At the time of the test, I selected 4 malware samples that were detected by many major vendors, and even by COMODO, but not by Huorong: The problem is with what it didn’t detect. I won’t describe much of anything, just click to enlarge the pictures below (they’re grouped in 6 galleries): Once Huorong installed, it will be the first one to detect a malware, and only then CCAV would have the chance to catch what Huorong missed (this is how their system hooks were chained). OK then, I decided to just try it… alongside CCAV 2.0, as it didn’t complain about it, and the latter was light enough.
On-demand folder scan is very slow (I didn’t check whether subsequent scans of the same files are faster). Or even to disable it altogether! (That’s quite a deal-breaker.) There is no way to temporarily disable the AV. Sometimes the update fails try again and the update will most likely succeed. Signature updates can be more than 24 hours old. On the negative side, from my experience: Under “grayware” it can distinguish between adware, PUP/PUA, and “Kaspersky’s detected virus names starting with not-a-virus:” (which are not malware). Recognized by Microsoft as an antivirus software provider for Windows. Cons: Weak to new threats (no cloud engine yet) in some situations, performance is not so good. Tiny virus database (below 5 MB) but covering most malware (one signature can match thousands of variants). HVM (Huorong Virtual Machine): high capability of unpacking and detecting known threats/variants. Own AV engine called Cobra (but Google translates it as Velvet). Regular or High-speed (higher system load) scan mode. 
You can configure it to prompt you when a threat is found, rather than auto quarantining. Unlike Qihoo 360, this product catches Chinese adware and doesn’t whitelist them. “Best HIPS in the world.” Supports custom rules. Chinese and English (despite the website lacking an English version). (The download is here, but sometimes it may fail, or your DNS might not solve it Google’s DNS is fine.) And the Chinese guy who presented it managed to persuade me that it’s worth trying it: I found about Huorong Internet Security on a MalwareTips forum thread. So here’s me, installing a Chinese AV! Um… how come, given that I definitely can’t stand Qihoo 360 (in spite of its rather useful HIPS notifications when a startup entry is added or sensitive Registry stuff is changed), and generally Chinese software is ugly and… well, first of all, ugly? It worked well, but I wanted to try something else and… things escalated (sort of). While not being that much in the mood for writing, I had to clarify that I put a halt on my CCAV 2.0 journey.
0 kommentar(er)
