Trend Micro AntiVirus+ Security v16.0 Data Collection Disclosure

Google Analytics data is used to improve user experience.

IP Address

This feature cannot be disabled.

If you do not want this data to be collected, please uninstall the program on your device.

The data is used for troubleshooting when there is an installation error and to improve user experience.

Product Debug Logs
IP Address

This feature cannot be disabled.

If you do not want this data to be collected, please uninstall the program on your device.

License Management uses collected data to identify customers' accounts for support service purposes.

Password
Email address
First name
Last name
Computer name
IP address
Mac address

This feature cannot be disabled.

If you do not want this data to be collected, please uninstall the program on your device.

Active Update collects IP data to allow Trend Micro to know whether this device has the latest protection against the latest malware.

IP address

This feature cannot be disabled.

If you do not want this data to be collected, please uninstall the program on your device.

We use this data to troubleshoot customers' problems.

Product debug logs and dumps
System information
Windows system event logs
IP address

This feature cannot be disabled.

If you do not want this data to be collected, please uninstall the program on your device.

The data is used for Protect Another Device to let users know which detected devices are protected by Trend Micro products.

MAC address
Gateway BSSID and MAC address
IP address
Hostname
Device brand and model

This feature cannot be disabled.

If you do not want this data to be collected, please do not install the program on your device.

The data is used for Security Report to let user know the detection records and product settings of the user’s registered devices.

URL
Malware detection records
Product settings

This feature cannot be disabled.

If you do not want this data to be collected, please do not install the program on your device.

We process the data to improve the usability of our products.

Share threat information with Trend Micro controls the data collected by the following features:

Trend Micro Toolbar
Manual Scan / Schedule Scan
Realtime Scan
Active Monitor
Web Threat Protection
Browser Exploit Prevention
Firewall Booster
Anti Spam Toolbar
All malware detection records
Secure Erase - deleted filename
Wi-Fi Advisor
- detected ap name
- ap ID
- ap MAC
- NIC ID
- NIC name
- NIC MAC

Main Console > Other Settings > Smart Protection Network

• Main Console > Other Settings > Smart Protection Network > Share threat information with Trend Micro

  

Data is collected to build a knowledge base to enhance detection rate and reduce false alarms.

File name
File path
IP address
Original URL
Suspicious files
Task scheduler
WMI information

Main Console > Settings > Scan Preferences

• Main Console > Settings > Scan Preferences > Scan for threats when opening, saving, or downloading files

  

Data collected for machine-learning is used to identify if a file is malicious and fine tune our engine logics and pattern definitions.

File name
File path
URL
Path

Main Console > Settings > Scan Preferences

• Main Console > Settings > Scan Preferences > Enable machine-learning to protect from new or unknown threats

  

We collect this data to improve our solutions and provide reports to customers.

Restored file name

Main Console > Settings > Scan Preferences

• Main Console > Settings > Scan Preferences > Back up files encrypted or modified by suspicious programs

  

Active Monitoring monitors system activity in real time and takes action when activity of a program violates a policy.

The data collected is used to enhance detection rate and reduce false alarms.

Registry key
Registry value
URL
File name
File path
IP address
Original URL

Main Console > Settings > Scan Preferences

• Main Console > Settings > Scan Preferences > Check if programs try to make unauthorized changes to system settings that could threaten your security

  

The data collected is used to enhance detection rate and reduce false alarms.

IP address
URL
File name
File path
Original URL

Main Console > Settings > Internet & Email Controls > Web Threats

• Main Console > Settings > Internet & Email Controls > Web Threats > Block potentially dangerous websites.

  

Analyzes malicious URLs and malicious scripts in web pages.

The data collected is used to enhance detection rate and reduce false alarms.

URL

Main Console > Settings > Internet & Email Controls > Web Threats

• Main Console > Settings > Internet & Email Controls > Web Threats > Prevent Internet Explorer, Firefox, and Chrome from running malicious scripts on infected websites

  

Data collected by Firewall Booster is used to increase the accuracy and detection rate of each pattern rule.

Source IP and port number
Destination IP and port number

Main Console > Settings > Internet & Email Controls > Network

• Main Console > Settings > Internet & Email Controls > Network > Activate the Firewall Booster to enhance the protection given by the Windows Firewall and detect botnet programs that can hijack your computer by remote control

  

The data is used to let users know which detected devices are protected by Trend Micro products.

Do not scan your network using Protect Another Device if you do not want to transmit data to Trend Micro.

Gateway BSSID
Gateway Mac address
Mac address
IP address
Bluetooth name and address
Host name
Computer name and ID

• Welcome Page
• Main Console > Device > Protect Another Device > Choose
• Main Console > Protect Another Device > Scan your network to find devices

• OPTION 1: Welcome Page

  

• OPTION 2: Choose a Device
  Main Console > Device > Protect Another Device > Choose

  

• OPTION 3: Scan your network to find your device
  Main Console > Protect Another Device > Scan your network to find devices

  

• OPTION 4: Try to find your device again
  Main Console > Protect Another Device > Scan your network to find devices > Scan Results > Try again

  

  

• Popups:

  

  

The data is collected so that Trend Micro can analyze these URLs to check their safety.

Unrated URL
IP address

• Privacy Scanner: Main Console > Privacy > Privacy Scanner > Configure
• Social Networking Protection: Main Console > Privacy > Social Networking Protection > Configure

• Privacy Scanner: Main Console > Privacy > Privacy Scanner > Configure > Turn ON or Turn OFF Privacy Scanner

  

  

• Social Networking Protection: Main Console > Privacy > Social Networking Protection > Configure > Turn ON or Turn OFF Social Networking Protection

  

  

Manual and Scheduled Scans are used to detect threats on users' devices.

Data is collected to improve threat detection and generate scan reports.

To opt-out of data collection, users should not scan their devices.

File name and full path
IP address
Original URL
Detected program name/path

• Manual Scan:
  • Main Console > Arrow Icon
  • Trend Micro Shortcut > Scan Now
  • Dropdown Menu
• Scheduled Scan: Main Console > Settings > Scheduled Scans

• Manual Scan:
  • OPTION 1: Main Console > Arrow Icon > Quick Scan / Full Scan / Custom Scan

    

  • OPTION 2: Trend Micro Shortcut > Scan Now

    

  • OPTION 3: Dropdown Menu

    

• Scheduled Scan: Main Console > Settings > Scheduled Scans > Conduct a scheduled scan of the computer

  

Data collected is used to troubleshoot users' issues.

To opt-out of data collection, users should not use the Support Tool to report issues.

Debug logs from Trend Micro products
Modules
System information
Device name
Account name
File path
Detected suspicious files