How it works

From scan to protection in a few careful steps.

Lexyte shows what it found, explains the consequence, records original Windows settings, and asks before making protected changes.

1. Scan without changing anything

The free Scanner checks running processes and executable files in common download, desktop, temporary, and application folders. It also reports whether Windows Remote Desktop or Remote Assistance is enabled.

2. Review the evidence

Each recognized product includes plain-language identity evidence such as its verified publisher, original filename, product metadata, reviewed hash, and supporting location. A common filename alone is never enough to report a match.

3. Create a Security PIN

A 6–12 digit PIN protects sensitive choices. Lexyte hashes it with Argon2id and a unique salt, adds delays after failed attempts, and produces an offline recovery code so the legitimate owner is not permanently locked out.

4. Record and lock down

With administrator approval, Lexyte records the original state, applies selected registry, service, and firewall changes, verifies the result, and preserves the snapshot for later restoration.

5. Keep watch locally

Paid continuous protection runs independently of the dashboard. Signed definitions identify supported products through multiple signals, while signed updates are verified before installation.