User Guide

Complete documentation for MZGuard IDS. Learn how to install, configure, and maximize your protection.

Installation

MZGuard IDS is designed to work alongside your existing antivirus. Follow these steps for a smooth installation.

1

Download Installer

Download the latest version from mzguard.com/download

Download page
2

Run Installer as Administrator

Right-click the installer and select "Run as administrator". MZGuard requires admin privileges for kernel-level protection.

Right-click MZGuard_Setup.exe → Run as administrator
🛡️

Follow Setup Wizard

Choose installation directory and select components. Default settings are recommended for most users.

Installer wizard
IMPORTANT: Do NOT disable your existing antivirus. MZGuard works alongside it, providing real-time detection and controls that complement signature-based protection.

System Requirements

Component Minimum Recommended
OS Windows 10 64-bit Windows 11 64-bit
RAM 4 GB 8 GB
Disk Space 100 MB 500 MB
.NET Framework 4.8 Latest

First Run

When you launch MZGuard for the first time, you'll see the initial setup wizard.

Welcome Screen

The welcome screen introduces you to MZGuard's core features and trial information.

Welcome screen
14-Day Free Trial All new users get 14 days of full Starter plan features. No credit card required!

Initial Baseline Scan

MZGuard will perform an initial scan to establish a security baseline of your system. This process:

  • Catalogs all installed applications
  • Creates fingerprints of legitimate processes
  • Establishes network connection baselines
  • Takes 2-5 minutes on most systems

Whitelist System

The whitelist system allows you to mark trusted applications, preventing false positives while maintaining security.

Adding Applications to Whitelist

1

Open Whitelist Manager

Click the "Whitelist" button in the sidebar or press Ctrl+W

Whitelist button
2

Select Application

You can add applications by:

  • Browse: Click "Add" and browse to the executable
  • Process List: Right-click a running process → "Add to Whitelist"
  • Alert: When an alert appears, click "Allow & Remember"
Whitelist dialog
3

Configure Whitelist Entry

Choose whitelist scope:

  • Executable Only: Trust this specific .exe file
  • Publisher: Trust all apps signed by this publisher
  • Folder: Trust all executables in this folder
SECURITY BEST PRACTICE: Only whitelist applications from trusted sources. Verify publisher signatures before adding to whitelist.

Managing Whitelist Entries

The whitelist manager displays all trusted applications:

Whitelist manager
✏️

Edit Entry

Modify whitelist scope or conditions

🗑️

Remove Entry

Delete whitelisted application

📋

Export List

Save whitelist to JSON file

Import List

Load whitelist from backup

Protection Modules

MZGuard includes 24 real-time protection modules. Here are the most important ones:

Core Privacy Protection

⌨️

Anti-Keylogger

Detects and blocks keyboard input monitoring attempts

📸

Screenshot Protection

Prevents unauthorized screen capture

📹

Camera/Mic Monitor

Alerts when camera or microphone is accessed

📋

Clipboard Guard

Protects against clipboard hijacking

Advanced Threat Detection

PowerShell Blocker

APT-grade PowerShell attack prevention

YARA Engine

4-engine malware pattern detection

💾

File System Monitor

Detects ransomware-like behavior

🔌

USB Protection

Scans removable media for threats

Dashboard

The main dashboard provides real-time security status and threat statistics.

Main dashboard

Key Metrics

  • Files Analyzed: Total files scanned since installation
  • Threats Detected: Suspicious behaviors blocked
  • Exploits Blocked: YARA rule matches
  • Protection Status: Active/Disabled module count

Troubleshooting

Common Issues

False Positive Alerts

Solution: Add the legitimate application to whitelist. Use publisher-based whitelisting for software from trusted vendors.

High CPU Usage

Solution: If CPU usage is consistently high:
  1. Check if initial baseline scan is running (temporary)
  2. Disable real-time file scanning for development folders
  3. Reduce YARA scan frequency in settings

Service Not Starting

Solution:
  1. Run as administrator
  2. Check Windows Event Viewer for error details
  3. Verify .NET Framework 4.8 is installed
  4. Reinstall MZGuard if issue persists
Still Having Issues? Contact our support team at [email protected] or create a ticket.

Frequently Asked Questions

Do I need to uninstall my antivirus?

No! MZGuard is designed to work alongside traditional antivirus software. It provides real-time detection and controls that complement signature-based protection.

How much system resources does MZGuard use?

MZGuard is lightweight, using approximately 50-100MB RAM and minimal CPU during idle. During active scanning, CPU usage may spike briefly.

Can I use MZGuard on multiple devices?

Free plan supports 1 device. Starter plan includes 3 devices, Professional up to 10 devices. See pricing for details.

How do I upgrade from Free to Starter/Professional?

Click "Upgrade Now" in the dashboard, or visit your account portal to manage subscriptions.