TreeIQ
Anti-Malware
Sciter beta
Dashboard
…
A-
A
A+
Light
Dark
Checking…
—
Quick scan Full scan
Activity — last 12 hours
…
Activity Threats Script blocks
12h
24h
7d
Summary
0
Threats blocked
0
Log events
0
Script blocks
Protected
Real-time on
✓
Nothing to report
TreeIQ has been protecting your PC quietly. No threats detected, no scripts blocked.
This PC
Operating system
—
Device
—
Processor
—
Memory
—
System drive
—
Uptime
—
Recommended
Quick Scan
Scans your PC's high-risk spots — Downloads, Desktop, Temp, AppData, Startup, and running processes. Takes about 2 minutes.
Start Quick Scan
Full Scan
Every file on every fixed drive · ~30–60 min
Start
Custom Scan
Pick a specific folder, drive, or file
Choose
Autoruns Scan
Every program set to auto-start · Run keys, services, tasks
Start
Removable Media Scan
USB drives, external HDDs, memory cards
Scan
Boot Scan
Restart & scan startup + boot sectors · ~3-5 min
Restart & scan
Advanced
Memory Scan
Scans running processes for fileless / in-memory threats. Slower, deeper.
Start
Force Full Scan
Re-verifies every file with the engine, even ones the cache says are clean. Takes as long as your very first scan.
Start
Tip: right-click any file, folder, or drive in File Explorer → Scan with TreeIQ Anti-Malware.
Recent scans
Loading…
Checking…
Threats blocked
0
—
Files scanned
0
—
File Guard
Files, downloads and USB drives
—
Enable
Process Guard
Watches running processes and memory
—
Enable
Script Guard
PowerShell, Office macros, VBS
—
Enable
Watched locations
Loading…
Ransom Guard
Checking…
Simulate ransomware
Canary honeypots
0
All intact
Rollback snapshots
0
0 MB used
Snapshot window
15 min
sliding, per file
Attacks blocked
0
since install

## Activity — last 30 days

View full log →
—
View canary paths
decoy files
Rollback snapshots
Browse or force-refresh cache
System Guard
Checking…
Modules active
0 of 6
Protection
—
Idle cost
~20 MB · <1%
Modules
Deep file inspection
Checks a program structure for packers and injection before it runs
Opt-in
Force unlock and remove
Removes locked malicious files without a reboot
Removes
Persistence guard
Alerts when a program adds itself to Windows startup
Alerts only
Rootkit guard
Finds programs hiding themselves from Windows
Alerts only
Driver guard
Warns when a program installs a risky system driver to disable security
Alerts only
S
Startup Manager
See and remove what runs at Windows startup
Open ▸
Recent activity
Startup, driver and hidden-process findings · these are alerts, nothing was removed
Refresh
Loading…
Checking…
—
↻ Check for updates
Downloading…
↻ Analyze logs

↑ Check for upgrade
⬇ Download & install update

Automatic updates
Update frequency
Tools
Each tool opens in its own window — no impact on the main app.
Logs
Activity across all guards · scan history · USB events
Opens in a new window
Open ›
Quarantine
Threats moved to the encrypted vault · restore or delete
Opens in a new window
Open ›
Whitelist
Trusted files, folders, processes and publishers
Opens in a new window
Open ›
Restore files
Ransom Guard backups · browse and roll back your files
Opens in a new window
Open ›
Harden Windows
Defender coexistence · exclusions and protection settings
Opens in a new window
Open ›
General
Global preferences and startup
Show notifications
File Guard
What TreeIQ does while you work
File Guard
On detection — real-time
What to scan
Recommended
All files
Real-time extensions
Add
Skip files larger than (MB)
Scan inside archives
Scan network files
Kill running malware
Script Guard Win10+
Detection mode
Block
Watch only
PowerShell
Windows Script Host (VBScript / JScript)
Office macros (VBA)
HTA (mshta) & other
Skip scripts larger than (MB)
Extra rule-based checks
✓ Provider registered · AMSI active on this PC
Re-register
Content types
Script protection
Office macro protection
.NET protection
Ransomware protection
Behavioral safety net for unknown ransomware
Ransomware protection
Master switch for the detector + rollback stack
Behavior signals Always on
4 detectors · canary, rapid-write, extension-flip, entropy · 0 ms latency
ProHunt — deep confirmation Add-on
Scan-engine confirmation on kill · +20-100 ms on trigger
Sensitivity
How aggressively to trip on mass file changes
Low
Medium
High
Canary honeypots
—
Rollback snapshots
—
Last activity
—
On-demand scans
How Quick / Full / Custom scans behave
On detection — on-demand
Scan removable drives (USB)
Scan inside archives
Skip files larger than (MB)
Scan intensity
Smart RECOMMENDED
Scans executables, scripts, documents and archives. Skips safe file types · ~5× faster.
Thorough MAX
Scans every file regardless of type. Slowest — for post-cleanup verification.
Custom ADVANCED
Pick your own extensions to scan. Anything not in the list is skipped.
Extensions to scan (comma-separated, no dots):
Scan-cache
Skip re-scanning unchanged clean files
Weekly root sweep
Periodic re-verify of drop zones + autoruns
USB / Removable Media Protection
USB protection
Auto-scan on USB insertion
Vaccine mode
Unhide & repair
Root-launcher flagger
LNK analyzer
USB remediation
Currently connected drives
Refresh Vaccinate all now
System Remediation
Clean up what a threat left behind
System remediation
Master switch for post-detection cleanup
Applies to
Real-time
On-demand
Kill running malware
Persistence cleanup
Hosts file cleanup
Browser hijack cleanup
Bad-autostart cleanup
Reboot-delete locked files
Exclusion sanitizer
Run cleanup now
Run cleanup now
Advanced
Fine-tune protection engines
Turning modules off reduces protection. Change only if you know what you are doing.
Applies to
Real-time
On-demand
Per-mode scan rules
Detection Engines
›
Boot / MBR simulation
32-bit executable emulation
64-bit executable emulation
JavaScript simulation
P-Code simulation
.NET analysis
.NET unpacking
Adware / PUA scanning
Heuristic Rules
›
Bare executable is suspicious
Encrypted archive is bad
Encrypted archive with bad name
Damaged executable
Auto-open macros
Encrypted document is bad
Treat as mail item
Performance
›
Preset
Fast
Balanced
Thorough
Custom
Per-file timeout (sec, 0 = none)
Total scan timeout (sec, 0 = none)
Max extracted data (MB)
Aggressive memory control
Global protection
Process guard
Watch running processes
Scan process memory (fileless)
Scan loaded DLLs
Trusted publishers
47,000+ built-in publishers · encrypted, managed by TreeIQ. Your added publishers are also trusted.
Your trusted publishers
Add
Password-protected files
Password-protected files
›
Treat unopenable encrypted files as suspicious
About and maintenance
Version and virus database
TreeIQ Anti-Malware
Signatures: —

## TreeIQ Anti-Malware

Version
—
Scan engine
JRDESK 6.5.5
Virus database
—
License
—
Memory usage
TreeIQ processes (service + tray + app)
—
CPU usage
TreeIQ processes combined
—
Sciter beta build · runs beside the WebView2 build, same protection engine.
Scan
Starting…
Stop Close
Scanned
0
Threats
0
Neutralized
0
Time
0:00
Threat
Detection
Category
Path
Action
Scanning… no threats found yet.
Set all
Neutralize threats
🐛 Debug console 💾 Save to file Full screen Clear Hide