Solved Trend Micro Thread in Security Apps?

Status
Not open for further replies.

Jonny Quest

Level 26
Thread author
Verified
Top Poster
Well-known
Mar 2, 2023
1,594
11,182
2,469
USA
Is there enough interest or users running Trend Micro that it could have it's own thread/category in the Security Apps sub forum, or isn't there enough room or interest to rearrange that space and add it in?
 
Is there enough interest or users running Trend Micro that it could have it's own thread/category in the Security Apps sub forum, or isn't there enough room or interest to rearrange that space and add it in?
I endorse having a new thread. I am currently running a trial of Trend on a VM and testing it extensively and would like to share my findings.
 
Upvote 0
I have Trend on my lappy, McAfee on this main desk PC, & ESET on my wife's Windows PC that gets little use, though moving that to McAfee when I can be bothered, so far I'm seeing McAfee has almost all the advantages, though Trend is also on two PC's I look after so I have in inherent interest in it, though in future anything I look after will have McAfee on it?
 
Upvote 0
I like Trend Micro and I am not enjoying the fact that it is not as good as McAfee, but we are here for the facts… it’s just not as good.

Yes, the UI looks better, more animated, more eye candies and so on. But protection-wise (in Hypersensitive mode), it doesn’t even come close.

A few more weird things about Trend Micro that I feel I have to share (cuz I know nobody else would):

-Some patterns, like the antivirus pattern are stored 3 times. There is the current pattern, the previous pattern, these 2 are in the pattern folder. However, the newest patterns are also copied in the engines folder. So Trend Micro is mostly cloud-based, they maintain small and efficient pattern, but nevertheless, it is copied 3 times.

-Behavuoural blocking service generates more CPU activity than other behavioural blockers. Much more than McAfee Real Protect.

-Blocking of scripts is highly suspicious when there are persistence indicators (writing in registry or start menu startup folder), but without persistence it can remain silent.

-Antivirus engine and new file warning don’t support files over a certain size. This is a problem for malware where padding is used.

-Static analysis not as good as other vendors.

-Lack of local machine learning models (sharp contrast with McAfee’s 4-5 on-device models). Behavioural blocking is very much policy-based (heuristics as opposed to AI).

-Development feels like it has stagnated, updates are not too frequent, features are pretty much not added anymore, even a few of them were deprecated. Even in terms of patents and R&D, Trend Micro is starting to lag.

Pros compared to McAfee:
More beautiful UI
Way faster scan (due to no local machine learning).
No promotional notifications ever.
Slightly better looking alerts (part of the UX).
A little bit more settings
I can’t think of others.
 
Last edited:
Upvote 0
I like Trend Micro and I am not enjoying the fact that it is not as good as McAfee, but we are here for the facts… it’s just not as good.

Yes, the UI looks better, more animated, more eye candies and so on. But protection-wise (in Hypersensitive mode), it doesn’t even come close.

A few more weird things about Trend Micro that I feel I have to share (cuz I know nobody else would):

-Some patterns, like the antivirus pattern are stored 3 times. There is the current pattern, the previous pattern, these 2 are in the pattern folder. However, the newest patterns are also copied in the engines folder. So Trend Micro is mostly cloud-based, they maintain small and efficient pattern, but nevertheless, it is copied 3 times.

-Behavuoural blocking service generates more CPU activity than other behavioural blockers. Much more than McAfee Real Protect.

-Blocking of scripts is highly suspicious when there are persistence indicators (writing in registry or start menu startup folder), but without persistence it can remain silent.

-Antivirus engine and new file warning don’t support files over a certain size. This is a problem for malware where padding is used.

-Static analysis not as good as other vendors.

-Lack of local machine learning models (sharp contrast with McAfee’s 4-5 on-device models). Behavioural blocking is very much policy-based (heuristics as opposed to AI).

-Development feels like it has stagnated, updates are not too frequent, features are pretty much not added anymore, even a few of them were deprecated. Even in terms of patents and R&D, Trend Micro is starting to lag.

Pros compared to McAfee:
More beautiful UI
Way faster scan (due to no local machine learning).
No promotional notifications ever.
Slightly better looking alerts (part of the UX).
A little bit more settings
I can’t think of others.
So far that's what I've found too, as far as your compared to McAfee list which I installed after my HP notebook reset last night. But, for the average user who isn't downloading the internet every day, are they going to have any real threat, malware issues with TM?

Well, now I'm thinking again.
That's what I like about this forum, some of the posts can get us thinking about what and why, but it also comes down to our online habits and what is hitting a fly with a sledgehammer and how much is enough and maybe, "overkill"? But I also know this is MT's and we can be concerned with what is the best and ultimate security.

After I set some settings and options up with McAfee, I went to their website to find the next step down from LiveSafe which came on this notebook. It's like they want to you lock you in with so many features (Identity, Privacy) that it would be harder to back out. If I renew from this trial, I'd probably get Essential and use my own choice for a VPN with better settings and a system tray icon.
 
Last edited:
Upvote 0
So far that's what I've found too, as far as your compared to McAfee list which I installed after my HP notebook reset last night. But, for the average user who isn't downloading the internet every day, are they going to have any real threat, malware issues with TM?
I am particularly unhappy with the inability to deal with padded malware. Not supporting large files is not great, a static analysis engine can open a file stream with just a part of the file (5-10-15 mb) and can check the Shannon entropy. Very large file with very low entropy (probably below 2) is an indication of padding.

It’s these little things not taken care of that make you think what exactly they are doing.

Needless to say in my Orion Remediation Kit, I can effectively detect padded malware.

Despite the release notes of ATSE mentioning a heuristic for abnormal decompression ratio (that’s another indicator of padding, the archive will be 5 mb and the file decompressed will be a gigabyte), this heuristic in my experience did not kick in.

Probably for some users it won’t be a problem, but I can’t really assess for whom it will be or won’t be.

Also, the performance impact is higher compared to McAfee, so for me, it’s a no-brainer who I will choose.
 
Upvote 0
So far that's what I've found too, as far as your compared to McAfee list which I installed after my HP notebook reset last night. But, for the average user who isn't downloading the internet every day, are they going to have any real threat, malware issues with TM?


That's what I like about this forum, some of the posts can get us thinking about what and why, but it also comes down to our online habits and what is hitting a fly with a sledgehammer and how much is enough and maybe, "overkill"? But I also know this is MT's and we can be concerned with what is the best and ultimate security.

After I set some settings and options up with McAfee, I went to their website to find the next step down from LiveSafe which came on this notebook. It's like they want to you lock you in with so many features (Identity, Privacy) that it would be harder to back out. If I renew from this trial, I'd probably get Essential and use my own more choice for VPN with better settings and a system tray icon.
I have a lot of licenses for different AV, Now using Norton and i can go for 1427 days.
Trend 6 years license
McAfee Total Protection 5 years license.
and so on....

Do not look at me, i love to test and test... @Trident and me discuss alot about this also on Whatsapp.
So do not think, ah these fellas change AV so i have to change again.....
 
Upvote 0
I have a lot of licenses for different AV, Now using Norton and i can go for 1427 days.
Trend 6 years license
McAfee Total Protection 5 years license.
and so on....

Do not look at me, i love to test and test... @Trident and me discuss alot about this also on Whatsapp.
So do not think, ah these fellas change AV so i have to change again.....
He and I have gone back and forth quite a few times in our PM's, and he never gets flustered when I ask or say, "what about...." but will graciously give me insights and information that I didn't know :) :)
 
Upvote 0
That's what I like about this forum, some of the posts can get us thinking about what and why, but it also comes down to our online habits and what is hitting a fly with a sledgehammer and how much is enough and maybe, "overkill"? But I also know this is MT's and we can be concerned with what is the best and ultimate security.
For me, McAfee and certainly TM are overkill. I've been working with computers for about 40 years, and I've never seen any of the AV programs I've installed report an attack. My first computer was a Sharp PC 1500, and for my first AV program, I received the weekly signature updates via Deutsche Bundespost on a 3.5-inch floppy disk. I think all the AV programs have been sufficient for me.
 
Last edited:
Upvote 0
For me, McAfee and certainly TM are overkill. I've been working with computers for about 40 years, and I've never seen any of the AV programs I've installed report an attack. My first computer was a Sharp PC 1500, and for my first AV program, I received the weekly signature updates via mail on a 3.5-inch floppy disk. I think all the AV programs have been sufficient for me.
I agree, even though F-Secure is a bit "defunct", I know with my online habits I could be just fine with it until my subscription runs out next year.
 
Upvote 0
Status
Not open for further replies.