Crystal Security 3.5

[thepierrezou]

360TS blocks your portable version and the installer too.

It's a FP (The QVM make too many FP with .net application) , please help the developer and report it
Thanks
EDIT : I will report it

 

[Kardo Kristal]

@ddave

360TS blocks your portable version and the installer too.

Hi, Thank you for the report. I should check all FPs by other vendors and then report all detections.

It's a FP (The QVM make too many FP with .net application) , please help the developer and report it
Thanks
EDIT : I will report it

@thepierrezou Thanks!

Regards,
Kardo

 

[Stefan Taf]

Hello everyone and good morning !
I am just working on one heur engine for crystal security and I am thinking of the DB type of the DB
Till now I was working with SQL,MySQL,Oracle and all of them are not the think that I want to have .
like Performance Read and Write I know MemSQl to but still lame can anyone suggest me something good in read most of it need to be in Read ?

 

[avkom]

Just read it in memory, it must be the fastest way

Make sure you only store small amount of data in memory / never assign string type into memory. Read the database file for each detection only for retrieve more information about the current detection.

 

[Stefan Taf]

yea I know this method but here we want to make the program work faster and to not use high memory usage or CPu and the method that you write about is using a lot

 

[Av Gurus]

I think that today memory isn't problem, most od people have 8gb

 

[avkom]

yea I know this method but here we want to make the program work faster and to not use high memory usage or CPu and the method that you write about is using a lot

You know it? But you have misinterpretation about how system works . Read my previous comment, don't flood the memory with your signatures. If you want speed, play in memory and avoid/minimize I/O process. Before implementing how to read your signatures in file, you should consider to design how your AV detects any virus. My advice is after some flags has matched then engine is allowed to read the file. So, database file will be read if it is necessary.

 

[Kardo Kristal]

@avkom

...you should consider to design how your AV...

Hmm... I am still lead developer and founder of Crystal Security. PS. Thank you for the advice. We will try to find the best way. A little bit off-topic: You are probably the developer of other AV (Kompas) here.

Regards,
Kardo

 

[Manzai]

Hello,

Crystal is a great antivirus but it would add a shield for unknown threats

Please read : http://www.malwaretips.com/threads/bypassed-crystal-security-vs-darkcomet-rat-manzaitest.37761/

 

[Kardo Kristal]

Hello,

Crystal is a great antivirus but it would add a shield for unknown threats

Please read : http://www.malwaretips.com/threads/bypassed-crystal-security-vs-darkcomet-rat-manzaitest.37761/

Hi @Manzai Thank you for the link. I agree about additional shields, we are currently working on heuristic system.

Regards,
Kardo

 

[Stefan Taf]

I think that today memory isn't problem, most od people have 8gb

you are right but the probem is not that .
At my last work we were working on something like huge Db viruses and etc and the product is on the top for years but most of the users are business users cuz normal pc can't take it yes you have 8 gb ram but the problems is not always there you have HDD and etc the program on start take 100% hdd before load db and afret that is the same ok little bit 30-40 % of the hdd is used by core functions yes the code of the program is big like 2 million and more line of code but here we want something new yes Baidu and 360 mau have some engine but i am working on something that's more good and dont have any influence on the system i am programr and security expert form years .
and i am working only because i want to see protected systems

360TS blocks your portable version and the installer too.

Avast To

 

[Kardo Kristal]

Good morning everyone.

Thanks to all reporters! I see that some FPs already fixed. Just re-checked all files via VT and got following results:

1. Crystal Security.exe

Result: 2 / 55
Detections: Bkav - HW32.Packed.4371; Qihoo-360 - HEUR/QVM03.0.Malware.Gen

2. crystal_security_3.5.0.103.zip

Result: 3 / 53
Detections: Bkav - HW32.Packed.4371; Qihoo-360 - HEUR/QVM03.0.Malware.Gen; TrendMicro-HouseCall - Suspicious_GEN.F47V1116

3. crystal_security_3.5.0.103_setup.msi

Result: 1 / 43
Detections: Qihoo-360 - HEUR/QVM03.0.Malware.Gen

Regards,
Kardo

 

[Kardo Kristal]

Hello,

Crystal Security 3.5.0.104 BETA released

Changelog

• Improved uploads section (list all uploads: queued and uploaded files)
• Improved notification (malware detection is now before clean detection)
• Improved performance in statistics section
• Added protection against unauthorized data modification
  
• Fixed several minor bugs
• Updated internal database

Screenshots

1. Uploads: list all uploaded files

2. Notification: malware detection before clean detection

Two different types of downloads

Download installer version of Crystal Security 3.5.0.104
Download portable version of Crystal Security 3.5.0.104

Looking forward to your feedback.

Regards,
Kardo

 

[thepierrezou]

2. Notification: malware detection before clean detection

Thanks for this

 

[Kardo Kristal]

@thepierrezou

Thanks for this

Anytime. It was very good suggestion by you.

Regards,
Kardo

 

[Kardo Kristal]

Hello,

Here is a tutorial of Shell integration feature. Please follow the instructions to enable and use this feature properly in Crystal Security.

1. Launch Crystal Security program and navigate to Settings
2. Under Settings -> Choose General tab -> Tick Shell integration check box -> Click Apply (wait a moment)

3. If feature applied successfully then you can see that Shell integration was analyzed by Crystal Security.
Shell integration executable is located under AppData\Crystal Security\3.5 Beta\ folder.

4. Finally, choose some file (one) or directory (one) and make right-click on selected item -> Click on Analyze with Crystal Security.
Now you should see under Overview section your selected and analyzed files.

Regards,
Kardo

 

[Kardo Kristal]

Hello,

Crystal Security 3.5.0.105 BETA released

Changelog

• Added On-access analysis mode (Settings -> Protection)
• Added reset feature for Statistics
• Added access log files via interface (Statistics)
• Added "View Quarantined Files" for Blacklist (right-click menu)
  
• Fixed bug in Protection (same malware detected only once)
• Fixed bug in Block function (sometimes malware not blocked correctly)
  
• Fixed bug in "Move to Whitelist" function (Blacklist section)
  
• Fixed several other minor bugs
  
• Updated internal database

NB! On-access is disabled by default but it is possible to enable it via settings anytime:
Navigate to Settings -> Choose Protection tab -> Tick On-access check box -> Click Apply.

Two different types of downloads

Download installer version of Crystal Security 3.5.0.105
Download portable version of Crystal Security 3.5.0.105

Looking forward to your feedback.

Regards,
Kardo

 

[Oxygen]

Testing this out right now @Kardo Kristal

 

[Kardo Kristal]

@Fedora

Testing this out right now @Kardo Kristal

Thank you for your interest. I hope that you like it and it works well for you. Just let me know if you have any questions about program.
Also, if there is any issue with program then feel free to let me know via this thread, PM or email at anytime.

All feedback welcome.

Regards,
Kardo

 

[thepierrezou]

I think i have found a bug

Spoiler: Logs

Impossible de traduire certaines ou toutes les références d'identité. à System.Security.Principal.NTAccount.Translate(IdentityReferenceCollection sourceAccounts, Type targetType, Boolean forceSuccess)
à System.Security.Principal.NTAccount.Translate(Type targetType)
à System.Security.AccessControl.CommonObjectSecurity.ModifyAccess(AccessControlModification modification, AccessRule rule, Boolean& modified)
à System.Security.AccessControl.CommonObjectSecurity.SetAccessRule(AccessRule rule)
à ﷓.﷝()
à ﷓.﷐(Object ﷐, EventArgs ﷑)
à System.Windows.Forms.Form.OnLoad(EventArgs e)
à System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
à System.Windows.Forms.Control.CreateControl()
à System.Windows.Forms.Control.WmShowWindow(Message& m)
à System.Windows.Forms.Control.WndProc(Message& m)
à System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
à System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

With the spoiler you can't view all, here a link : https://i.imgur.com/rcj4dXu.png
The software has taken 30 sec for show the UAC alert and has taken 1,30 GO on my RAM after it has show me a error.
At each lauch it do this for me, the system is CLEAN.
I think there is a bug :/