Qore Guardian

Keeps your archive drives clean, whole and repairable.

• Windows
• Linux

Offline guardian for long-term archive drives: fingerprints and seals every file, checks the drive the moment it is plugged in, catches the tricks worms use to spread on drives plus ClamAV signatures, finds truncated or zero-filled files, and rebuilds damaged ones from recovery data. Windows and Linux Mint (Raspberry Pi edition on request). $29.99 once or $3.99 monthly.

What it does

• Protect a drive: every file is fingerprinted (SHA-256) and the record is sealed with a key that lives only on your PC, with a second copy of the record kept on the PC — a worm on the drive cannot forge it.
• Check on plug-in: the next time the drive is connected the app compares every file with the seal and says "all N files identical to <date>" or lists exactly what changed, went missing, got damaged or was added. Quick check (changed size/date + a random sample) or full check (every byte re-read).
• Repair: recovery data (PAR2, 10% by default, 5–30% selectable) is written to the drive in small groups of files; corrupted, truncated, zero-filled or deleted files are rebuilt byte-for-byte and proven against the seal.
• Anti-worm: the ways worms travel on drives are caught without needing a name — autorun.inf, shortcut decoys that run cmd/powershell/wscript, hidden folders replaced by same-named EXEs, double extensions, programs disguised as pictures, fake Recycle Bins, VBScript/PowerShell/batch USB worms, macro documents, PDFs with launch actions, and the Stuxnet shortcut trick (CVE-2010-2568).
• Antivirus: ClamAV® 1.5 signatures (bundled, offline) — every file when you protect or deep-scan, new and changed files on each check (every file again whenever the database has been updated, or on demand). Update over the internet, or import a signature pack from a USB stick on an offline PC; the database age is always shown.
• Whole-file checks: images are decoded, video containers walked, ZIP/Office/7z archives CRC-tested (RAR and encrypted archives: headers checked), PDFs and programs parsed — truncated, half-copied and zero-filled ("eaten") files are found at the baseline, not years later.
• Three honest severity tiers (confirmed / strong indicator / note), an allow-list for files you know, and quarantine only for confirmed threats and only by your decision — nothing is quarantined or re-sealed automatically.
• Mirror compare: one drive is never an archive — compare the master with its second copy and the app says which copy is the good one for every difference.
• Bilingual printable certificates (Arabic + English) with the manifest digest anyone can recompute; six-month reminders for drives left in a drawer; Windows autorun/AutoPlay switched off for your user; read-only lock as accident protection.
• Raspberry Pi edition (a dedicated offline Pi as a clean checking station for drives when you do not trust the PC itself) is supplied on request to buyers, with its source code.

Runs on

• Windows 10/11 (64-bit)
• Linux: Mint 22+ / Ubuntu 24.04+ (64-bit)

• Works offline
• No tracking
• Pay once, no subscription