KeepWards
Antivirus
Antivirus scans the folders you choose, isolates anything dangerous in quarantine and gives it back with one command if you change your mind. All on your computer.
The package arrives through the Microsoft Store, signed by Microsoft.
Five layers, one clear report.
Each layer answers a different question about the same file, and the verdict comes from combining them.
-
01
SHA-256 hash
Compares each file's fingerprint with the local base and the lists you import:
.txtwith one hash per line,.csvfrom MalwareBazaar or.json. -
02
Content patterns
Looks for patterns of 16 to 256 bytes, up to 5,000 per base. On import it rejects short patterns, bare MZ/PE headers and trivial repetition, which cuts false positives.
-
03
YARA rules optional
Uses your rules or those from open sources. If a rule takes too long, the program warns you and never marks the file as "clean".
-
04
Static heuristics
Looks at entropy, executables with swapped extensions, packer sections and double extensions. It only marks suspicious from a combination of signals, which avoids false alarms.
-
05
Reversible quarantine
The isolated file becomes
<id>.qbr, with a manifest and SHA-256 check on restore. It never isolates anything in%SystemRoot%, Program Files or WinSxS.
What it does with the result.
A scan is useless if the result isn't readable or automatable. Both paths exist.
-
Report on screen, in HTML or in JSON
Result in the terminal for a quick read;
--report-htmlto read at your leisure and--report-jsonto plug into another program. -
An exit code that tells the truth
Clean, found something or incomplete scan: each result has its own code, ideal for automation.
-
Window in Portuguese, English and Spanish
The interface follows the system language. The scan result and the report come out in Portuguese.
-
Your call on what is suspicious
You decide: a suspicious file only goes to quarantine if you ask (
--quarantine-suspicious). The default is to show and wait.
How it reaches your computer.
Through the Microsoft Store, as an MSIX package signed by Microsoft: it installs without a security warning.
Through the Microsoft Store
The arrival on the Microsoft Store is in progress.
- Channel
- Microsoft Store
- Format
- MSIX · signed by Microsoft
- Package
- ~95 MB
- System
- Windows 10 1809+ (x64)
- Version
- 0.1.0
- Link
- once approved