Crystal Security 3.7 BETA

[_CyberGhosT_]

So, the Dynamic engine uses no sig's
Ok time to check this out
Thanks Kardo
**Spiffy looking site too there brother .

 

[Sr. Normal 2.0]

Sonar (Norton) identifies Crystal Security as Threat in High Grade



SUD

 

[Kardo Kristal]

Sonar (Norton) identifies Crystal Security as Threat in High Grade

Thanks for the information.

I see that you already reported it as False Positive.

Regards,
Kardo

 

[bjm_]

 

[Kardo Kristal]

Hi @bjm_,

Thanks for the feedback.

Can you please tell me your display settings:

1. Resolution
2. DPI Scaling

I tried to re-produce your reported issue on Windows 10 with different display settings but no problems here.

Regards,
Kardo

 

[bjm_]

btw ~ Zemana Portable was blacklisted and stripped to 0kb. Is there a restore from blacklist.
With Zemana Portable at 0kb with desktop Icon stripped. Only way I saw to restore Zemana was new download.

Crystal Security (something) was also blacklisted. Maybe, dynamic engine?

Analyze with Crystal Security (context menu) does not call CS or scan item as I can see.
btw ~ Analyze with Crystal Security needs CS Icon.

Quick & Advanced scans were 0 & 0. And other than cosmetic issue. CS felt okay for awhile.
Then after playing with CS Settings with close and open CS.
CS went aggressive on Zemana Portable.

Sorry, Zemana blacklist with desktop Icon stripped, happened so swift and unexpected, I did not capture screenshots.
I've deleted Crystal Security (for now).

 

[Kardo Kristal]

btw ~ Zemana Portable was blacklisted and stripped to 0kb. Is there a restore from blacklist.
With Zemana Portable at 0kb with desktop Icon stripped. Only way I saw to restore Zemana was new download.

When something is blocked and moved to Blacklist then you can restore file with the following steps:

1. Go to "Blacklist" section
2. Right-click on black-listed file
3. Choose "Restore Selected File"

If file is in quarantine then it should restore file to original location.

Crystal Security (something) was also blacklisted. Maybe, dynamic engine?

It was probably Shell integration file detection. It was also reported by @Petrovic. Will be fixed.

Analyze with Crystal Security does not call CS or scan item as I can see.

Bug confirmed and will be fixed.

CS went aggressive on Zemana.

I'll look into it.

I'll try to re-produce DPI scaling issue too.

Regards,
Kardo

 

[bjm_]

When something is blocked and moved to Blacklist then you can restore file with the following steps:

1. Go to "Blacklist" section
2. Right-click on black-listed file
3. Choose "Restore Selected File"

If file is in quarantine then it should restore file to original location.
Well, I did not see quarantine. Just blacklist and whitelist.
Is there a quarantine window?


It was probably Shell integration file detection. It was also reported by @Petrovic. Will be fixed.


Bug confirmed and will be fixed.


Interesting issue. Never happened here.
I meant by 0 & 0 that no threats were found.


I'll look into it.

I'll try to re-produce DPI scaling issue too.

Regards,
Kardo

 

[Kardo Kristal]

Well, I did not see quarantine. Just blacklist and whitelist.
Is there a quarantine window?

@bjm_ You can consider Blacklist as Quarantine. Quarantine files are stored under AppData directory.
You can restore files only via UI because all quarantined files are also encrypted.

I just tried to re-produce your DPI scaling issue. Changed DPI to 150%. After that I signed out and logged in.
I started Crystal Security and no problems here. I can only suggest to set DPI to 100% on your system.

Regards,
Kardo

 

[bjm_]

@bjm_ You can consider Blacklist as Quarantine. Quarantine files are stored under AppData directory.
You can restore files only via UI because all quarantined files are also encrypted.

I just tried to re-produce your DPI scaling issue. Changed DPI to 150%. After that I signed out and logged in.
I started Crystal Security and no problems here. I can only suggest to set DPI to 100% on your system.

Regards,
Kardo

Yeah, I was expecting and looking for a quarantine module within the CS user interface.
Guess, I'm used to programs that quarantine and restore from quarantine.
I'm used to NoVirusThanks ERP with Whitelist/Blacklist and Quarantine.
I'm used to Webroot with Block/Allow and Quarantine.

I just found (with your pointing) AppData > Roaming > Crystal Security > Quarantine. Quarantine folder is empty.

Since Crystal Security is only program showing cosmetic issue for me. I'll leave DPI as is.

Thanks

 

[Kardo Kristal]

Hello,

Crystal Security 3.7.0.2 BETA released

Changelog

• Improved Start with Windows
• Improved Dynamic engine
  
• Fixed several reported bugs
• Updated Shell integration

Two different types of downloads

Download installer version of Crystal Security 3.7.0.2
Download portable version of Crystal Security 3.7.0.2

Notice: Start with Windows uses now Task Scheduler method to bypass UAC prompt.

Looking forward to your feedback.

Regards,
Kardo

 

[Petrovic]

repeat - cerber3 cerber3.....etc | sage

cerber2
https://www.virustotal.com/en/file/...6f2fe9579e204100c7eabe0c5382f9c33a3/analysis/
13/57
not detected - first scan
re-scan

 

[DJ Panda]

Links to stable installers are down. Thinking of adding this to my security config.

 

[Kardo Kristal]

Hi @Petrovic,

Thank you for the feedback.

repeat - cerber3 cerber3.....etc | sage

Is it possible that you downloaded or copied "cerber3" file multiple times?

Double entries are currently allowed by default under Blacklist.

When you download or copy same file e.g. 2 times then it will be also listed under Blacklist 2 times (like double entries).

If you downloaded or copied "cerber3" file only once then it is possible bug.

cerber2
https://www.virustotal.com/en/file/...6f2fe9579e204100c7eabe0c5382f9c33a3/analysis/
13/57
not detected - first scan
re-scan

Seems like a bug. I'll look into it.

Links to stable installers are down. Thinking of adding this to my security config.

@J Gamez065,

Thanks. Stable download links up again.

Regards,
Kardo

 

[Kardo Kristal]

Hello,

Crystal Security 3.7.0.3 BETA released

Changelog

• Improved Overview section
• Fixed several reported bugs

Two different types of downloads

Download installer version of Crystal Security 3.7.0.3
Download portable version of Crystal Security 3.7.0.3

Looking forward to your feedback.

Regards,
Kardo

 

[Kardo Kristal]

Hello,

Crystal Security 3.7.0.4 BETA released

Changelog

• Improved Dynamic engine (reduced False Positives)
• Fixed bug in Digital signature verification (signature not detected)
• Fixed several other minor bugs (user interface)
  
• Updated rules set in Dynamic engine (balanced detection)

Two different types of downloads

Download installer version of Crystal Security 3.7.0.4
Download portable version of Crystal Security 3.7.0.4

Looking forward to your feedback.

Regards,
Kardo

 

[Sr. Normal 2.0]

Thanks for your awesome work bro

 

[JM Safe]

Hello,

Crystal Security 3.7.0.4 BETA released

Changelog

• Improved Dynamic engine (reduced False Positives)
• Fixed bug in Digital signature verification (signature not detected)
• Fixed several other minor bugs (user interface)
  
• Updated rules set in Dynamic engine (balanced detection)

Two different types of downloads

Download installer version of Crystal Security 3.7.0.4
Download portable version of Crystal Security 3.7.0.4

Looking forward to your feedback.

Regards,
Kardo

Great work Kardo

 

[blueblackwow65]

Wonder how Crystal would do with wannacry ,anyone test that ? I am running Latest Crystal Security with Comodo Firewall

 

[Kardo Kristal]

Wonder how Crystal would do with wannacry ,anyone test that ? I am running Latest Crystal Security with Comodo Firewall

Hi @blueblackwow65,

Thank you for the interest.

Just performed some tests against following ransomwares:

1. Jaff - sample by @Solarquest

Engines: Collective and Dynamic
Threat Score: 87%

2. WannaCry - sample by @Der.Reisende

Engine: Collective
Threat Score: 87,7%

3. WannaCry v2 - sample by @Der.Reisende

Engine: Collective
Threat Score: 92,8%

4. Cradle - sample by @Amelith Nargothrond

Engines: Collective and Dynamic
Threat Score: 75,8%

5. Cerber - sample by @silversurfer

Engines: Collective and Dynamic
Threat Score: 27%

6. DoNotChange - sample by @Der.Reisende

Engines: Collective and Dynamic
Threat Score: 82,9%

Regards,
Kardo