Antivirus
questions.
The questions that come in most about on-demand scanning and quarantine.
About how it works
The questions that come up in almost every on-demand antivirus support case.
Does Antivirus replace the Windows antivirus?
It works alongside Windows protection: on-demand scanning, a second opinion on what is on the machine.
Does it find everything on the machine?
No antivirus finds everything. KeepWards detection combines the five analysis layers with the lists and rules you import.
Do I need internet to use it?
No. The scan, the base and the quarantine are local. Importing a list is the only operation that touches the network, and even that is you doing it, with the file in hand.
Does it send samples for analysis?
No. The program has no file upload channel. If you want to report a false positive, the way is support and the file's hash.
About quarantine
What happens to the isolated file and how to go back.
Is the file deleted when I isolate it?
No. It becomes an <id>.qbr item with a manifest. Restoring returns the file to its original path.
What if I restore and regret it?
You can isolate it again. The SHA-256 check shows whether the item changed since it was isolated.
Does restoring into a system folder work?
No. Restore refuses system and startup folders, so as not to recreate a dangerous file in a sensitive place.
Can a file in a network folder be isolated?
No. UNC paths and names with colons (NTFS streams) are refused in quarantine and in restore.
About detecting and getting it wrong
The program can make mistakes, and reversible quarantine exists for that reason.
It flagged a legitimate file. How do I fix it?
Restore it from quarantine and send the hash to support with the subject FALSE POSITIVE. If confirmed, the pattern leaves the base.
Why doesn't it open .zip files?
To scan the contents of a compressed file, extract it to a folder and point Antivirus at it.
Why isn't a rootkit removed?
Because the program has no kernel driver and doesn't run in other processes' memory. It sees files, not what is hidden.
Can the scan freeze my computer?
Reading is block by block and the program doesn't run samples. On a slow disk the scan takes longer; stop it with --max-size or by interrupting.
Start using it today.
See the prices and start with the product that's right for you.