V
TreeIQ
Anti-Malware
Administrator access
TreeIQ Anti-Malware
Dashboard
…
A-
A
A+
Light
Dark
Protection paused
This device isn't linked to a console yet.
Checking…
—
Threat Scan Full scan
Activity — last 12 hours
…
Activity Threats Script blocks
12h
24h
7d
Summary
0
Threats blocked
0
Log events
0
Script blocks
Protected
Real-time on
✓
Nothing to report
TreeIQ has been protecting your PC quietly. No threats detected, no scripts blocked.
This PC
Operating system
—
Device
—
Processor
—
Memory
—
System drive
—
Uptime
—
Threat Scan Recommended
Checks the places threats usually hide.
Start scan
Full Scan
Every file on every fixed drive
Start scan
Custom Scan
Pick a specific folder, drive, or file
Choose
Removable Media
USB drives, external HDDs, memory cards
Scan
Recent scans
Loading…
Checking…
Threats blocked
0
—
Files scanned
0
—
File Guard
Files, downloads and USB drives
—
Enable
Process Guard
Watches running processes and memory
—
Enable
Script Guard
PowerShell, Office macros, VBS
—
Enable
System Guard
Extra system-level protection · manage in Settings
—
Enable
Watched locations
Loading…
Ransom Guard
Checking…
Simulate ransomware
Decoy files
0
All intact
Protected backups
0
0 MB used
Protection window
On
recent changes kept
Attacks blocked
0
since install

## Activity — last 30 days

View full log →
—
View decoy files
decoy files
Restore files
Browse and roll back
Web Guard
Not available on your plan
Blocks ads, trackers and dangerous websites
Web Guard filters risky and unwanted sites for every browser and app on this PC — no browser add-on needed.
It's included with Internet Security and Total Security. Enter an upgraded key on the About page to turn it on.
Web Guard
Turned off
Web Guard is off
Turn it on to block ads, trackers and dangerous websites for every browser and app on this PC — no browser add-on needed.
Turn on Web Guard
Web Guard
Checking…
Manage in Settings →
Blocked · 24h
0
today
Blocked · 7 days
0
this week
Blocked · 30 days
0
this month
Blocked · all-time
0
since install
Active lists
0
enabled
Threats blocked
0
malware & phishing
Allowed sites
0
on your list

## Blocked over time

7 days
30 days

## Top blocked domains

Refresh
Nothing blocked yet.
RDP Guard
Checking…
↻ Refresh
Active bans
0
blocked IPs
Live RDP sessions
0
connected now
Mode
—
how it reacts
RDP protection
Detects and blocks repeated failed remote-desktop logins
Auto-block mode
On = block attacking IPs automatically. Off = alert only (record, don't block).
Live RDP sessions
USER CLIENT IP SCOPE STATE SINCE
No live RDP sessions.
Active bans
IP REASON ATTEMPTS UNTIL
No active bans.
Thresholds, ban behaviour, and trusted / blocked IPs are in Settings › RDP Guard.
Checking…
—
↻ Check for updates
Downloading…
↻ Analyze logs

↑ Check for upgrade
⬇ Download & install update

Tools
Each tool opens in its own window — no impact on the main app.
Records & data
Logs
A record of everything TreeIQ has done
Open
Quarantine
Threats safely isolated here · restore or remove
Open
Whitelist
Trusted files, folders, processes and publishers
Open
Restore files
Browse and roll back your protected files
Open
Deep clean & repair
Repair Scan
Deep-clean stubborn leftovers a normal scan can miss · with undo
Run
Rescue Scan
Deep clean for a badly-infected PC · boot into Safe Mode first if it is severe
Run
Cure Scanner
Repair virus-infected files in a folder
Open
Protection & backup
Harden Windows
Set up TreeIQ to run smoothly alongside Windows security
Open
Web Guard
Block unwanted and dangerous websites · works in every browser
Open
Ransom Vault
Protected, versioned backups · restore your files after a ransomware attack
Open
Profile Backup
Back up a user's profile · restore it on this or another PC
Open
USB Device Control
Control what USB drives can do · block, read-only or allow per device
Open
File Guard
What TreeIQ does while you work
File Guard
On detection — real-time
What to scan
Recommended
All files
Real-time extensions
Add
Skip files larger than (MB)
Scan inside archives
Scan network files
Auto-repair file-infector viruses
Repair infected files in place instead of quarantining (a backup is kept)
Kill running malware
Script Guard Win10+
Detection mode
Block
Watch only
PowerShell
Windows Script Host (VBScript / JScript)
Office macros (VBA)
HTA (mshta) & other
Skip scripts larger than (MB)
Extra rule-based checks
✓ Provider registered · AMSI active on this PC
Re-register
Content types
Script protection
Office macro protection
.NET protection
Ransomware protection
Extra protection against new ransomware
Ransomware protection
Turns ransomware protection on or off
Behavior signals
Always-on monitoring for ransomware behavior
ProHunt — deep confirmation Add-on
Extra verification before acting (optional)
Sensitivity
How strongly to react to suspicious activity
Low
Medium
High
Decoy files
—
Protected backups
—
Last activity
—
RDP Guard Business
Blocks remote-desktop brute-force attacks
RDP protection
Detects and blocks repeated failed remote-desktop logins
Auto-block mode
On = block attacking IPs automatically. Off = alert only (record, don't block).
Full status, bans and live sessions are on the RDP Guard page.
RDP Guard — ban thresholds
Ban an IP after this many failed logins in the window (0 turns a layer off)
🔒 Managed by your organization — these settings are set from the console and can't be changed on this device.
Fast burst
rapid guessing
fails /min
Medium
steady attempts
fails /min
Long
patient attacker
fails /min
Daily — hard
ban outright
fails / 24 h
Daily — slow burn
low-and-slow
fails / 24 h
RDP Guard — ban behaviour
How long a ban lasts and what else is blocked
Ban duration
Hour
Day
Permanent
Escalate on repeat offenders
Longer ban each time the same IP returns
LAN whitelist
Never ban private / local addresses
Block anonymous logons
Attempts with no username
Threat-feed auto-ban
Pre-block known malicious IPs
Save changes
RDP Guard — trusted and blocked IPs
Never-ban list, and block an address right now
Trusted IPs
Never banned — office / VPN source addresses
Add trusted
No trusted IPs.
Block an IP now
Immediately block a source address
Block now
System Guard
Extra system-level protection
System Guard
Master switch — turns the guards below on or off
Persistence guard
Tells you when a program sets itself to run at startup — you decide what to do.
Watch & tell
Rootkit guard
Spots programs trying to hide
Alerts only
Driver guard
Warns about risky system drivers
Alerts only
Deep file inspection
Checks programs for danger signs before they run
Opt-in
Force unlock and remove
Removes stubborn malicious files
Removes
Startup, rootkit and driver findings are notices only — nothing is blocked. Full history in Tools → Logs → System Guard.
On-demand scans
How Quick / Full / Custom scans behave
On detection — on-demand
Scan removable drives (USB)
Scan inside archives
Skip files larger than (MB)
Scan intensity
Smart RECOMMENDED
Scans executables, scripts, documents and archives. Skips safe file types · ~5× faster.
Thorough MAX
Scans every file regardless of type. Slowest — for post-cleanup verification.
Custom ADVANCED
Pick your own extensions to scan. Anything not in the list is skipped.
Extensions to scan (comma-separated, no dots):
Scan-cache
Skip re-scanning unchanged clean files
Weekly root sweep
Periodic re-verify of drop zones + autoruns
Rescue Scan
Deep clean for a badly-infected PC · Tools → Rescue Scan
Scan inside archives
Look inside .zip / .rar / .7z (recommended for rescue)
Skip files larger than (MB)
0 = no limit
Max extracted data (MB)
Scan intensity
Thorough RECOMMENDED
Scans every file with every engine + archives. Best for a real infection.
Smart
Uses your everyday on-demand engine settings. Faster, less deep.
Full rescue targets
Running processes
Memory scan
Startup entries
System drivers
Files & folders
USB / Removable Media Protection
USB protection
Auto-scan on USB insertion
Vaccine mode
Unhide & repair
Root-launcher flagger
LNK analyzer
USB remediation
Currently connected drives
Refresh Vaccinate all now
System Remediation
Clean up what a threat left behind
System remediation
Master switch for post-detection cleanup
Applies to
Real-time
On-demand
Kill running malware
Leftover cleanup
Hosts file cleanup
Browser hijack cleanup
Bad-autostart cleanup
Reboot-delete locked files
Exclusion sanitizer
Run cleanup now
Run cleanup now
Advanced
Advanced protection settings
Turning modules off reduces protection. Change only if you know what you are doing.
Applies to
Real-time
On-demand
Per-mode scan rules
Detection Engines
›
Boot area scan
32-bit executable emulation
64-bit executable emulation
JavaScript simulation
P-Code simulation
.NET analysis
.NET unpacking
Adware / PUA scanning
Heuristic Rules
›
Bare executable is suspicious
Encrypted archive is bad
Encrypted archive with bad name
Damaged executable
Auto-open macros
Encrypted document is bad
Treat as mail item
Performance
›
Preset
Fast
Balanced
Thorough
Custom
Per-file timeout (sec, 0 = none)
Total scan timeout (sec, 0 = none)
Max extracted data (MB)
Aggressive memory control
Global protection
Process guard
Watch running processes
Scan program memory
Scan loaded DLLs
Trusted publishers
47,000+ built-in publishers · encrypted, managed by TreeIQ. Your added publishers are also trusted.
Your trusted publishers
Add
Password-protected files
Password-protected files
›
Treat unopenable encrypted files as suspicious
About and maintenance
Version and virus database
TreeIQ Anti-Malware
Signatures: —
Updates
Virus database update schedule and servers
Automatic updates
Update frequency
Update servers Advanced
One address per line (https://…). Blank = default TreeIQ servers. Multiple lines = automatic failover.
Save servers
Logs & Quarantine
How long activity logs and quarantined items are kept · your own files are never touched
Keep logs for (days)
Old activity logs are cleaned automatically · 0 = keep forever
Keep quarantined files for (days)
Old isolated malware is removed · items awaiting your review are always kept · 0 = keep forever
Notifications
Tray alerts when something is blocked
Show notifications
Management Admin · Test
Connect this PC to a management console (internal testing)
Managed by console
Off = standalone. On = this PC reports to the server below.
Management server
License key
Not connected
Save & connect

## Detection log

Threats TreeIQ has blocked on this PC · read-only.
Time
Guard
Threat
Category
Action
No detections yet — you are protected.
You are protected
All protection modules are active · managed by your administrator
Threats blocked
—
Last scan
—
Virus DB
—
Protection modules
File Guard
Files and downloads
On
Web Guard
Malicious sites
On
Ransom Guard
Ransomware
On
RDP Guard
Remote-desktop
On
Script Guard
Malicious scripts
On
IP Reputation
Known-bad IPs
On
USB Guard
Removable drives
On
Process Guard
Running programs
On
Subscription
Licensed to
—
Edition
—
Expires
—
Status
—
Settings are managed by your administrator.
Administrator access
Enter the administrator password to see the full app. Settings are managed by your IT administrator.
Incorrect password.
Unlock Cancel
Scan
Starting…
Stop Close
Scanned
0
Threats
0
Neutralized
0
Time
0:00
Threat
Detection
Category
Path
Action
Scanning… no threats found yet.
Set all
Neutralize threats
🐛 Debug console 💾 Save to file Full screen Clear Hide
Custom Scan
Choose the drives, folders or files to scan.
✕
Drives
Browse folders
⬆ Up This PC
Selected
Nothing chosen yet — tick a drive or add a folder.
0 selected Cancel Scan selected
⚠
Your license has expired
Real-time protection, scans and updates are paused. Enter a license key to reactivate TreeIQ Anti-Malware.
Activate
Everything else stays protected by Windows until you reactivate.