Qihoo in my opinion.
It has three engines, two of these engines can be disabled but not the cloud engine, which seems, It is always active (at least until there is an internet connection). In other words, whenever 360 Total Security found a suspicious file, compares it with the online database automatically, whether we like it or not (and here we must trust the rules/privacy promises of this company).
For the rest, from some tests I've done, it seems to work well: the ability to recognize, even if you are disconnected from the internet, is quite good, and the same antivirus is sufficiently configurable: you can enable/disable scanning of usb devices, set the real-time monitoring, add a Whitelist folders that we want to be excluded from scanning and a sandbox.
It also has an active real-time block defense. (unauthorized changes to processes, drivers, registry and more).