From the download
to the file returned.
Point at the folder, read the reason and decide. Quarantine is reversible, and the program never runs the sample.
Install
The delivery channel is the Microsoft Store, as an MSIX package.
-
01
Check your system
Windows 10 version 1809 (build 17763) or later, 64-bit.
-
02
Install the package
When the store approves it, the link appears on the product page.
-
03
Open the window
On first run there is no sign-up, key or login. Nothing is asked and nothing is sent.
First scan
Point at the folder, read the result and decide what to isolate. In the window or on the command line, the path is the same.
keepwards scan C:\Users\you\Downloads
-
Choose the target
A folder or a file. Large scans take time: reading is block by block and progress shows in the window.
-
Generate the report
Add
--report-html report.htmlto read later, or--report-jsonfor another program to consume. -
Read the result
Each file shows as clean, suspicious or malicious. The report shows the reason: hash, matched snippet, YARA rule or heuristic signal.
What to do with the result
Quarantine is your decision, and it is reversible. This is the full cycle.
-
01
Review
Before isolating, read the reason. Suspicious is not a synonym for malicious: it may be a legitimate installer with a packer.
-
02
Isolate
Confirmed malicious goes to quarantine. The file leaves its original place and becomes a
.qbritem with a manifest. -
03
Restore if you got it wrong
If the item was legitimate, restore it. The return checks the SHA-256 before writing the file back to its original place.
keepwards restore <id>
Suggested routine
Four simple habits.
-
Downloads, every week
It's where the dangerous file usually ends up, and where the scan finishes fast.
-
Before running an installer
One file, directly: the result comes out in seconds and avoids deciding in the dark.
-
Someone else's USB drive
Scan before opening. The program runs nothing, so there is no risk in pointing it at the drive.
-
Review quarantine
Once a month, look at what is isolated. A forgotten item in quarantine protects nothing anymore.
Start using it today.
See the prices and start with the product that's right for you.