Crystal Security 3.7 BETA

[Kardo Kristal]

Hello,

Crystal Security 3.7.0.28 released

Changelog

• Fixed several reported bugs

Two different types of downloads

Download installer version of Crystal Security 3.7.0.28
Download portable version of Crystal Security 3.7.0.28

Looking forward to your feedback.

Regards,
Kardo

 

[Petrovic]

https://www.crystalsecurity.eu/downloads/crystal_security_3.7.0.28_setup.msi - Interactive analysis - ANY.RUN

 

[Kardo Kristal]

https://www.crystalsecurity.eu/downloads/crystal_security_3.7.0.28_setup.msi - Interactive analysis - ANY.RUN

Hi @Petrovic

Thank you for the feedback.

Static engine updates information about malware via Feeds. Feeds collects information about malware.
Feed includes hashes and urls but only hashes of malware are stored locally. URLs of malware are only temporarily loaded.
It seems that Any Run service analysis captured temporarily loaded URLs during analysis.

Regards,
Kardo

 

[Kardo Kristal]

Hello,

Crystal Security 3.7.0.29 released

Changelog

• Fixed several reported bugs

Two different types of downloads

Download installer version of Crystal Security 3.7.0.29
Download portable version of Crystal Security 3.7.0.29

Looking forward to your feedback.

Regards,
Kardo

 

[_CyberGhosT_]

Thanks man, I missed checking these out while I was gone.

 

[Kardo Kristal]

Hello,

Crystal Security 3.7.0.30 released

Changelog

• Fixed bug in Stealth Guard mode
• Fixed several bugs in Settings section

Two different types of downloads

Download installer version of Crystal Security 3.7.0.30
Download portable version of Crystal Security 3.7.0.30

Looking forward to your feedback.

Regards,
Kardo

 

[Kardo Kristal]

Hello,

Crystal Security 3.7.0.31 released

Changelog

• Fixed several reported bugs

Two different types of downloads

Download installer version of Crystal Security 3.7.0.31
Download portable version of Crystal Security 3.7.0.31

Looking forward to your feedback.

Regards,
Kardo

 

[ForgottenSeer 69673]

Windows Defender flags the install file as a trojan.

 

[Kardo Kristal]

Windows Defender flags the install file as a trojan.

Hi @ticklemefeet

Thank you for your feedback.

I just tried to check the installer file on my computer and here is clean.
The installer file is not detected by Windows Defender.

Can you please send False Positive report to Microsoft?

Regards,
Kardo

 

[ForgottenSeer 69673]

Hi @ticklemefeet

Thank you for your feedback.

I just tried to check the installer file on my computer and here is clean.
The installer file is not detected by Windows Defender.

Can you please send False Positive report to Microsoft?

Regards,
Kardo

I am on the latest insider update. Maybe that is why. Not sure how to send the file since it deletes it right after download. It delets the install file and the portable file. It does not quarantine it or offer a way to white list the file. This is something you will have to submit to MS I am afraid.

 

[vtqhtr413]

I am on the latest insider update. Maybe that is why. Not sure how to send the file since it deletes it right after download. It delets the install file and the portable file. It does not quarantine it or offer a way to white list the file. This is something you will have to submit to MS I am afraid.

Are you using any of the Defender tweakers ( Config Defender, NVT OSA, System hardeners)?

It's not starting at boot for me most of the time now since the last few Windows updates?

Windows 7 home 64bit

 

[ForgottenSeer 69673]

Are you using any of the Defender tweakers ( Config Defender, NVT OSA, System hardeners)?

It's not starting at boot for me most of the time now since the last few Windows updates?

Windows 7 home 64bit

No tweakers

 

[Kardo Kristal]

Hello,

Crystal Security 3.7.0.34 released

Changelog

• Updated Heuristic engine

Two different types of downloads

Download installer version of Crystal Security 3.7.0.34
Download portable version of Crystal Security 3.7.0.34

Looking forward to your feedback.

Regards,
Kardo

 

[Kardo Kristal]

Hello,

Crystal Security 3.7.0.37 released

Changelog

• Updated Dynamic engine

Two different types of downloads

Download installer version of Crystal Security 3.7.0.37
Download portable version of Crystal Security 3.7.0.37

Looking forward to your feedback.

Regards,
Kardo

 

[In2an3_PpG]

@Kardo Kristal

Is the dynamic engine scanning with sources like VT or what does it do?

 

[Kardo Kristal]

@Kardo Kristal

Is the dynamic engine scanning with sources like VT or what does it do?

Hi @In2an3_PpG

Thank you for your interest.

Dynamic engine uses local rules set to identify file status.
Currently there are about 15 different rules in rules set.

Some examples of rules: File signature, file age, extension, location, file visibility...
Dynamic engine does not require database updates and it can work without internet connection.

All data collected in the file is compared with the rules set.
When certain combination of rules are detected then Dynamic engine can determine the file status.

Regards,
Kardo

 

[ForgottenSeer 69673]

Tried to download and run the portable and Windows Defender delets the file right away even if it was zipped. Link to MS detection page.
Trojan:Win32/Fuery.B!cl threat description -Windows Defender Security Intelligence

 

[Kardo Kristal]

Tried to download and run the portable and Windows Defender delets the file right away even if it was zipped. Link to MS detection page.
Trojan:Win32/Fuery.B!cl threat description -Windows Defender Security Intelligence

Hi @ticklemefeet

Thank you for the information.

Regards,
Kardo

 

[Kardo Kristal]

Hello,

Crystal Security 3.7.0.38 released

Changelog

• Updated Static engine

Two different types of downloads

Download installer version of Crystal Security 3.7.0.38
Download portable version of Crystal Security 3.7.0.38

Looking forward to your feedback.

Regards,
Kardo

 

[Kardo Kristal]

Hello,

Crystal Security now uses the Hybrid Analysis Public Feed for a Static engine.
The Static engine database is updated automatically every hour.

Regards,
Kardo