New Update Huorong Internet Security (Updates)

[Petrovic]

official forum(chinese): 火绒5.0公测 - 火绒安全软件 - Powered by Discuz!
use translator
Download: https://www.huorong.cn/downloadv5.html

 

[eonline]

I used it a few years ago, it was only in Chinese. It's totally free. Thank you very much for sharing this update. Regards.

 

[Sunshine-boy]

best hips in the world.this is what i was waiting for.

 

[Jerry.Lin]

Its HIPS supports custom rules. Simple and Powerful.

Some useful features

-Support Wildcards "*" (Replace all chars ), ">" (Replace until "\"), "?" (a char)
- FD, RD, AD(a little bit weak)
- Very Clear, Easy to use and setup
- Exception allow/deny
- Import and Export Rules


The rules i wrote
【支持5.0】【高级防护】反攻击规则 Version_3.02 - 用户规则分享区 - 火绒安全软件 - Powered by Discuz!

 

[Sunshine-boy]

I'm wondering what is enable immunity rules(smart protection)

The rules i wrote

very good:emoji_clap:
[阻止]可疑DLL加载
where is this in the English version? I can't find it.

 

[Jerry.Lin]

I'm wondering what is enable immunity rules(smart protection)

you could use cmd to run some .pif files

it blocks some uncommon extensions...

I'm wondering what is enable immunity rules(smart protection)

very good:emoji_clap:
[阻止]可疑DLL加载
where is this in the English version? I can't find it.

not yet... i may take some time to translate my rules into english...

 

[Sunshine-boy]

Unlike Qihoo 360 this product catch Chinese adware and don't whitelist them.

 

[roger_m]

@Petrovic Thanks for posting. I've seen it before, but never tried it as it was only in Chinese up till now.

I've just installed it on one of machines and my first impressions are good. I like that you can configure it to prompt you when a threat is found, rather than auto quarantining and that when scanning, you can switch to between High and Regular scan modes to use less system resources.

 

[Mops21]

Hi @Jerry.Lin

Are you the Developer of this Programm

Which Scan engines did you use it

Can you add this to virustotal please

With best Regards
Mops21

 

[Sunshine-boy]

Which Scan engines did you use it

it seems they are in partnership with Virus Information Alliance

 

[shmu26]

From the screenshots, it looks pretty powerful.
Can you run it as default/deny?
How good is the AV and BB at default settings?

 

[Jerry.Lin]

Are you the Developer of this Programm

No, just a Chinese user

Which Scan engines did you use it

Self-Developed ( called Cobra )
理念技术 Their website has many whitepapers, but all in Chinese, so...
Brief summary its pros and cons
pros:
1. HVM (Huorong Virtual Machine, Dynamic Heuristic), high capability of unpacking and detecting known threats/variants.
2. Extremely small virus database ( below 5mb) but cover most malware ( means one signature can match thousands of variants)
cons:
1. Weak to new threats (no cloud engine yet)
2. In some situation, performance is not so good (when a lot of new programs load, like ESET, both rely on local heuristic/sandbox)

Their approaches are very closed to ESET

Can you add this to virustotal please

They said they are waiting in line of being added into Virustotal. (They did not pay, so need to wait)

 

[Mops21]

Ah okay thank you very much for your Infos @Jerry.Lin and @Sunshine-boy

With best Regards
Mops21

 

[ichito]

Very interresting and promissing due to English version...great find
I saw it months ago...thanks to @Sunshine-boy ...in Chinese version but it was completely "uneatable"

 

[Ink]

The real questions is... "Huorong is Public beta" OR "Huorong Internet Security"

 

[ichito]

The real questions is... "Huorong is Public beta" OR "Huorong Internet Security"

"IS" means perhaps Internet Security...but still public beta

 

[Mops21]

Hi

I have some more questions

1. Have they other products when yes which

2. Are all free or paid

With best Regards
Mops21

 

[Sunshine-boy]

promissing

I'm using it with windows defender exploit Guard.this hips don't have memory protection but Exploit guard can help.

 

[Jerry.Lin]

1. Have they other products when yes which

They have the enterprise edition (only in Chinese now)
Also, inside the Huorong Internet Security, there's an ARK Tool - HRSword. I think it's a pretty good tool for advanced users.

2. Are all free or paid

Free for personal users, paid for enterprise users. They sale the enterprise edition and OEM services to earn money.
For personal edition, no ads, free forever, that's why Huorong has a relatively good reputation in China compared to Qihoo and Tencent.

Can you run it as default/deny?

You can add your rules to make it as default/deny
eg. stop all .exe from execution and use verdict cache to make exceptions.

How good is the AV and BB at default settings?

Fair enough for daily use, but compared to other famous vendors( Kaspersky, Eset....), still a lot of works need.
They enhanced Behavior-Based Detection in this new version

 

[Mops21]

Hi @Jerry.Lin

Thank you very much for your Infos

And how can I submit Samples

With best Regards
Mops21