Malware Hub Report Qihoo 360 TS - April 2020 Report

harlan4096 · Mar 31, 2020

Qihoo 360 TS - April 2020 Report

Due to the small number of samples used in this tests, you should take results with a grain of salt. We encourage you to compare these results with others and take informed decisions on what security products to use.

__

C: Clean / P: Protected / P - NC: Protected - Not Clean / I: Infected / E: Encrypted

* Dynamic BB Bonus Test (File System Protection Disabled)
* Partially Blocked
* BSR: Before System Reboot
* ASR: After System Reboot

April 2020	Samples Pack	Static Detection	Dynamic Detection	Total Detection	System Files Encrypted	2nd Opinion Scanners	System Final Status	Thread Link
		BALANCED	(AVIRA OFF	+	KUNPENG OFF)
01/04/2020	22	11 / 22	9 / 11	20 / 22	No	C	BSR: I ASR: P	Post#3
04/04/2020	1	1 / 1	1 / 1*	1 / 1 1 / 1*	No	C	C	Post#2
05/04/2020	1	1 / 1	1 / 1*	1 / 1 1 / 1*	No	C	C	Post#2
07/04/2020	1	0 / 1	1* / 1	1* / 1	Yes	N/A	E	Post#3
09/04/2020	1	1 / 1	1 / 1*	1 / 1 1 / 1*	No	C	C	Post#2
		BALANCED	(AVIRA ON	+	KUNPENG OFF)
09/04/2020	15	7 / 15	5 + 1* / 8	12 + 1* / 15	No	I: WV NPE C: HMP	BSR: I ASR: P - NC	Post#2
10/04/2020	16	12 / 16	1 / 4	13 / 16	No	C: WV HMP I: NPE	BSR: I ASR: I	Post#3
10/04/2020	1	0 / 1	1 / 1	1 / 1	No	C	C	Post#3
11/04/2020	13	6 / 13	1 + 2* / 7	7 + 2* / 13	Yes (Twice)	N/A	I + E	Post#2
11/04/2020	2	2 / 2	0 / 2*	2 / 2 0 / 2*	No	C	C P*	Post#2
13/04/2020	1	1 / 1	1 / 1*	1 / 1 1 / 1*	No	C	C	Post#3
13/04/2020	1	1 / 1	1 / 1*	1 / 1 1 / 1*	No	C	C	Post#2
14/04/2020	1	0 / 1	1 / 1	1 / 1	No	C	P	Post#2
		SECURITY	(AVIRA ON	+	KUNPENG ON)
15/04/2020	1	1 / 1	1 / 1*	1 / 1 1 / 1*	No	C	C	Post#2
16/04/2020	16	9 / 16	3 + 4*/ 7	12 + 4* / 16	Yes	N/A	I + E	Post#3
16/04/2020	1	0 / 1	1* / 1	1* / 1	No	I: WV HMP NPE	BSR: I ASR: P - NC	Post#2
17/04/2020	2	1 / 2	1* / 2 0 / 1*	1 + 1* / 2	No	I	BSR: I ASR: P - NC	Post#3
18/04/2020	5	2 / 5	1 + 1* / 3	3 + 1* / 5	No	C: NPE I: WV HMP	BSR: I ASR: P - NC	Post#2
18/04/2020	1	1 / 1	1 / 1*	1 / 1 1 / 1*	No	C	C	Post#4
19/04/2020	2	2 / 2	2 / 2*	2 / 2 2 / 2*	No	C	C	Post#3
20/04/2020	1	1 / 1	1 / 1*	1 / 1 1 / 1*	No	C	C	Post#2
21/04/2020	1	0 / 1	1 / 1	1 / 1	No	C	P	Post#3
22/04/2020	13	6 / 13	4 / 7	10 / 13	No	C	P	Post#2
22/04/2020	1	0 / 1	0 / 1	0 / 1	No	C: NPE I: WV HMP	BSR: I ASR: P - NC	Post#2
23/04/2020	1	1 / 1	1 / 1*	1 / 1 1 / 1*	No	C	C	Post#2
23/04/2020	1	0 / 1	1 / 1	1 / 1	No	I	P - NC	Post#2
24/04/2020	1	0 / 1	0 / 1	0 / 1	No	I	BSR: I ASR: P - NC	Post#3
26/04/2020	1	0 / 1	1 / 1	1 / 1	No	C	P	Post#2
28/04/2020	15	10 / 15	2 / 5	12 / 15	No	C: WV MWB I: HMP NPE	P - NC	Post#3
30/04/2020	1	0 / 1	0 / 1	0 / 1	No	C	P	Post#2
/04/2020		/	/	/	No Yes	C I	P C I	Post#
/04/2020		/	/	/	No Yes	C I	P C I	Post#
/04/2020		/	/	/	No Yes	C I	P C I	Post#
/04/2020		/	/	/	No Yes	C I	P C I	Post#

roger_m · Mar 31, 2020

Will you be testing with the new KunPeng Engine enabled?

harlan4096 · Mar 31, 2020

I'm still preparing the VM, but sure, why not?

Stas · Mar 31, 2020

Use max settings enable all protection features.

Jerry.Lin · Mar 31, 2020

Suggest you to set like this to achieve max. protection by its own technology

Also enable VT:

Divine_Barakah · Mar 31, 2020

Hello! I suggest you start by testing the default settings and then change the settings accordingly.

harlan4096 · Mar 31, 2020

I will start the 1st week with Defaults (Balanced), and then will be enabling additional scan engines modules + features...

LDogg · Mar 31, 2020

Has Bitdefender engine been taken off now?

~LDogg

stefanos · Mar 31, 2020

LDogg said:
Has Bitdefender engine been taken off now?

~LDogg

Yes .Bitdefender engine no longer exists

Jerry.Lin · Apr 1, 2020

Do you reboot your system after installing TS? I do not see Intel-VT enable. It should be enabled by default. You could check on the bottom of protection page.

It can be confirmed in HIPS popup.

harlan4096 · Apr 1, 2020

I enabled it but then disapeared that option

also I'm getting BSOD sometimes while starting the system (usually starts and the 2nd try) and I guess since I enabled that Qihoo setting...

harlan4096 · Apr 1, 2020

It seems not enabled then, checking the screen-shots of my last test...

Jerry.Lin · Apr 1, 2020

harlan4096 said:
I enabled it but then disapeared that option also I'm getting BSOD sometimes while starting the system (usually starts and the 2nd try) and I guess since I enabled that Qihoo setting...

Weird. What's your CPU model? Do you disable Hyper-V on both your real machine and VM or is there any other antivirus also use hardware virtualization? I guess it is because too many layers of nested virtualization.

harlan4096 · Apr 1, 2020

I don't have MS Hyper-V enabled in my main system since I'm using KTS2021 (incompatible with Hyper-V enabled), but was disabled and exited while testing, nor inside the W10 virtualized...

stefanos · Apr 1, 2020

Very good results with that new samples.It has justified me coming into conflict with many MT members who call the 360TS rubbish. I'll make a prediction

The results will not change much with high protection.

harlan4096 · Apr 1, 2020

System runs quite slow with Qihoo running inside, also it comes with many additonal bloat features I had to disable... apart from that, seems it has a solid HIPS against scripts

stefanos · Apr 1, 2020

harlan4096 said:
System runs quite slow with Qihoo running inside, also it comes with many additonal bloat features I had to disable... apart from that, seems it has a solid HIPS against scripts

You can block the most bloat features. And attention to HIPS. You must cliked very fast to block. Especialy against ransomware.

Jerry.Lin · Apr 1, 2020

harlan4096 said:
I don't have MS Hyper-V enabled in my main system since I'm using KTS2021 (incompatible with Hyper-V enabled), but was disabled and exited while testing, nor inside the W10 virtualized...

View attachment 236096

Can you take a screenshot of Protection Center of TS? So VT option disappear or just in gray?

I think it is due to some incompatibility, but hard to find. Can you try a fresh installation and then just reboot without change anything to see if that works?

I just found out another interesting thing.
Long time ago I talk the cloud feedback of TS: Update - 360 total security 10.6.0.1283 released ( december 11th 2019 )
It should be the function called "Cloud Analysis" now in TS, and it is configured differently based on language when installing (confuse me a lot, may be is due to privacy). Only some languages are enabled by default, others don't.
Usually getting result within 1-2 min for this auto-upload cloud analysis. It would upload all unknown exe to cloud when RTP detected, which is a pretty robust cloud protection now. So i don't know if you enable this or not during test, but suggest to do it.

harlan4096 · Apr 1, 2020

Yes, I already enabled cloud auto upload before testing

roger_m · Apr 1, 2020

harlan4096 said:
System runs quite slow with Qihoo running inside

Maybe it is related to running it in a VM. I've been using it for some time and it is consistently very light.

Malware Hub Report Qihoo 360 TS - April 2020 Report

Moderator

Level 41

Moderator

Level 10

Level 2

Level 29

Moderator

Level 33

Level 28

Level 2

Moderator

Moderator

Level 2

Moderator

Level 28

Moderator

Level 28

Level 2

Moderator

Level 41

Similar threads