Yes. basic kernel mode dll sideloadin, kernel modifications detected by Apex One. Home version seems to use the same "engine".

Props for TM, how to check runtimes and lolbins so fast.

So be happy with the "Defender".  I'm happy with my TM.

Was your system compromised, when you tested TM against your malwaere samples?

Don't be silly about AVC testing procedure vs TM. The Real World results is all about to protect the system. TM is very, very good about that.

I tested TM against some malware samples (Hypersensitive mode enabled).

1. Some samples were identified by TM malware signatures.

2. Some samples were first blocked by "Suspicious behavior detected" and then by signatures.

3. Some samples were blocked by "suspicious behavior detected" and no signature detection afterwards.

In case "1", local signature database is used? In case "2" no local database signature found, but cloud lookup flagged it?

I also do like to know how Hypersensitive mode actually works? Is it some kind of a "default-deny" method?

What i also do like to see when a program gets flagged by "Suspicious behavior blocked", why it gets blocked? Malformed PE-header? DLL sideloading? So what was the reason it gets blocked.

Hello all,

I am looking for Trend Micro version 17.8.1208 changelog. Where i can find it?

Tried to search this forum and used google search, but i cannot find what was fixed/added in this 17.8.1208 version.

I am using TM Antivirus Plus and i like it a lot. Especially Hypersensitive mode, which is some sort of "default-deny" mode. Fits perfectly on my layered security setup. 

Hello,

I've just received an update to version 17.7.1903.

Is there any release notes about this update?

Hello,

If i setup an exception for a folder, for example, C:\Steam, does it also make exceptions for all subfolders inside C:\Steam folder?