Crystal Security - Discussion

Hello,

Thank you for your feedback and suggestion!

Regards,
Kardo

 

Hello,

Thank you for you information.

I believe that it is related with updated detection engine and because of cloud connection to nictatech database. WOT gives suspicious rating for nictatech for some reason but i am sure that it is safe connection.

I will make analysis for previous version via VirusTotal and if it shows all clean then i know that is because of updated engine detection in last version.

Regards,
Kardo

 

Hello,

I am back with virustotal analysis results:

1- 2.4.0.19 detected by several scanners
2- 2.4.0.18 detected only by one scanner
3- 2.4.0.17 detected only by one scanner
4- 2.4.0.16 no detection

I have to investigate what is causing false positives in latest versions.

Regards,
Kardo

 

Hi KardoKristal

Can you add These to your product

New Text File Log export format which is useful for posting scan logs in forums.

Save Log hyperlink is available directly after scan (before removal).

Any Infos for the Coming Version and when will you Release the Final Version of it

 

Hello,

Sorry about late answer.

If you mean to add 'Text File Log export' and 'Save Log' features into program - then the answer is yes, i will add these features into newer versions.

I have to investigate some problems because of false positives by several scanners in virustotal results.
In general i will release next version as soon as possible with several changes like:

License button will be replaced with Checkup button.

Then there is more comfortable to start System Checkup directly from Main menu.

Finally, sorry but no comments about Final version yet, because i must be sure that all is working fine on every computer.

Regards,
Kardo

 

Copied and pasted ? (http://www.surfright.nl/nl/whatsnew)

 

Hi KardoKristal

Thank you very much for your Information

You have send me a pm will you completly translate the programm in the future

 

Hello,

Thank you for pointing this out!

Regards,
Kardo

 

Hi,

Update released - Version: 2.4.0.20

Updated:

* Removed 'License' from Main window

# Program is absolutely free for all users and for businesses.

Improved:

* 'Checkup' is now accessible from Main window.

# Moved from 'Tools' section to Main window - GUI

Fixed:

* Detection system with results
* Several bugs

Download link: -http://content.wuala.com/contents/crystalsecurity/Public/Crystal%20Security%202.4.0.20/Crystal%20Security.exe?dl=1

Advice: I advice to uncheck from Settings: under System Checkup -> Report unknown tick - if this is unchecked then program generate during System Checkup less false positives (unknown classification results) and show only Unsafe and Suspicious items.

Any feedback welcome!

Regards,
Kardo

 

Hi,

Update released - Version: 2.4.0.21

Added:

Custom Protection Level:

* Custom file types to scan

# Choose what file types to analyze (On-access) by Crystal Security.
You can add/remove extensions or file types anytime via Settings - under Protection Level ->
-> Custom -> Edit...

* Custom Directories to scan

# Choose what areas to analyze (On-access) by program.
You can add/remove areas or directories anytime via Settings - under Protection Level ->
-> Custom -> Edit...

Fixed:

* False positive detection

# VirusTotal.com analyze show Crystal Security 100% clean now.

Improved:

* Auto-decision mode

# Program now automatically add analyzed objects into groups to remember
actions of already analyzed files.

* Overall code

Note: False positive about Crystal Security program generated
by scanners via VirusTotal.com is now fixed. There is no harmful detection about
Crystal Security program anymore - because of improved code.

Download link: -http://content.wuala.com/contents/crystalsecurity/Public/Crystal%20Security%202.4.0.21/Crystal%20Security.exe?dl=1

Any feedback welcome!

Regards,
Kardo

 

I have mentioned this previously, but I cannot see where the whitelist entries are being stored.

 

Hi

My checkup did not work by me can you help me

And can you add 1. start button, 2. stop button and a cancel button for the checkup

 

Hello,

Thank you for your feedback!

I will investigate Whitelist entries issue and fix it with
next update.

Regards,
Kardo

 

Hello,

Thank you for your feedback!

I will send PM with some instructions

Regards,
Kardo

 

Hi Kardo,

Perhaps, I am misunderstanding, how whitelisting works. I thought that these items that occur and which I am aware of, are checked against a database which you have access to.

 

Hello,

All whitelisted entries will be skipped next time. Following information describe...

How Whitelist/Blacklist module works:

# Crystal Security program detect created/changed file.
# Detection module check if detected item exist in Whitelist or Blacklist.
# If detected file exist in Whitelist/Blacklist - then program skip file analyze.
# If file not exist in Whitelist/Blacklist - then it will analyze the file.

Regards,
Kardo

 

From my understanding , if the files have been analyzed, they do not need to be whitelisted(any longer), or appear in (my) whitelist settings ini.

 

Hello,

Correct!

This change will be available in next version.

Regards,
Kardo

 

Great!

...but I am seeing these entries in the growing ActivityMonitor settings ini.

View attachment ActivityMonitor.txt

 

Hello,

For this time, when you add file to Whitelist/Blacklist (manually) section then Activity Monitor list should not grow with same entry.
If you just allow, block or deny file on Alert prompt without Remember this action then Activity Monitor list will grow by same entry.

Regards,
Kardo

 

That's just it, but I don't see any alerts any more.

 

This seems like a great product. I'm going to use it. I've been reading this entire thread and it looks good !
Thanks Kardokristal for your hard work and quick responses here on this forum!
I will certainly check this thread very frequently.
Also thanks to all other people here in this thread using this program and giving feedback, helps me to understand things better as well.

 

Great to have you on board.

Sometimes I feel like, I am the only one testing!

 

I will do my best to test, but I still don't feel comfortable to do without signature AV product as well to be honest.
I do have Mamutu, which is basically Emsisoft Anti-malware but only the behaverior blocker and no AV.

I've seen already something, when I did Checkup (in Crystal Security) to check the whole system, it detected 2 potential malicious things, but I can't see what it detected or what it might be. it just stated it detected something, but I don't know where to see a log or overview of what it might have encountered.

I know for sure I have a clean system, I haven't been on malicious sites and I checked with Hitmanpro and MBAM on demand and AV scan, nothing found.

 

Ow oh. AVG scanner went berserk. thought the dowload was a trojan !
I couldn't download it from the website. I have to exclude Crystal security from AVG IS 2012.

EDIT: I tried to download Crystal security again, and it suddenly blocked it, while in my previous post it didn't !!