How to Use ESET Online Scanner for a Secondary Malware Scan
A second malware scan can reveal threats missed by an installed antivirus program. Different security tools use different detection engines, cloud reputations, behavioral signals, and potentially unwanted application settings, so an independent check is useful when a computer behaves strangely.
ESET Online Scanner is a portable, on-demand utility for Windows. It can examine files, memory, boot sectors, and other locations without requiring a permanent second antivirus installation. This makes it suitable for checking suspected spyware, trojans, adware, ransomware components, and browser hijackers.
The scanner does not replace a full security strategy or guarantee that every threat will be removed. If the computer is severely compromised, disconnect it from the internet, protect important accounts from another device, and consider professional incident-response assistance.
Why Run A Secondary Scan
A primary antivirus product may miss a newly modified threat, classify an unwanted program differently, or fail to inspect an area affected by system damage. A second-opinion scan adds another detection perspective and can help verify whether a cleanup was successful.
ESET Online Scanner is especially useful after removing suspicious browser extensions, uninstalling unknown software, or recovering from a malware alert. It can also identify potentially unwanted applications that may generate advertisements, alter search settings, or collect browsing information.
Before scanning, remember that two real-time antivirus products should not normally run together. ESET Online Scanner is designed for an on-demand check, so it should not conflict with the computer’s main security product in the same way as installing another always-active antivirus suite.
Prepare The Computer
Save open documents and close unnecessary applications. A scan can use considerable processor, memory, and disk resources, and running programs may lock files that the scanner needs to inspect.
Update Windows and the resident antivirus program when possible. Then temporarily disconnect external drives, phones, and backup devices that are not needed. Malware can spread to removable media, while an infected computer should not be allowed to alter clean backups during troubleshooting.
If the device shows signs of active account theft, avoid entering passwords on it. Use a known-clean phone or computer to change important passwords and enable multifactor authentication. For privacy-related incidents, such as a suspected camera compromise, review the guidance in this webcam hijacking guide.
Download And Configure ESET
Open ESET’s official website and download the current ESET Online Scanner for Windows. Avoid download portals, cracked software pages, pop-up advertisements, and links delivered through suspicious emails. Verify that the downloaded file is digitally signed by ESET if Windows displays a publisher prompt.
Launch the executable with an administrator account. Accept the license terms, then allow the utility to download its latest detection modules. The interface and wording can change between releases, but the main choices generally include enabling detection of potentially unwanted applications and selecting the areas to inspect.
For a thorough secondary scan, enable detection of potentially unwanted applications when that option is available. Choose a full scan or a custom scan that includes memory, boot sectors, running processes, local disks, and connected locations you trust. A full examination may take substantially longer than a quick scan.
| Setting |
Recommended choice |
Purpose |
| Detection updates |
Download before scanning |
Provides current signatures and cloud intelligence |
| Potentially unwanted applications |
Enable detection |
Finds adware, toolbars, bundlers, and risky utilities |
| Scan scope |
Full scan |
Examines more files and system locations |
| Cleanup action |
Quarantine or clean |
Prevents detected items from running |
| Log handling |
Save the report |
Documents what was found and what action was taken |
Run And Review The Scan
Start the scan and leave the computer powered on. Do not browse, install programs, or interrupt the process unless necessary. If the scanner reports that a restart is required, save your work and restart when prompted so locked files or startup components can be handled correctly.
When the scan ends, review every detection rather than dismissing the report immediately. The results may identify a malicious file, a registry entry, a potentially unwanted application, or a suspicious archive. Read the detection name, location, and recommended action before choosing to clean, quarantine, or exclude anything.
Quarantine is usually safer than manually deleting a detected file because it prevents execution while preserving a possible recovery path. Do not restore an item simply because its filename looks familiar. Malware frequently uses names that resemble Windows components or legitimate applications.
Handle Detections Safely
Allow ESET to clean or quarantine confirmed threats, then restart Windows if requested. Run a second scan after the restart to check whether the detection returns. A recurring item may indicate a scheduled task, malicious service, browser extension, startup entry, or another component that recreates the removed file.
If the scanner finds a potentially unwanted application, research its publisher and installation history before removing it. Some bundled utilities are unwanted but not technically malware, while others can create serious privacy and security risks. Uninstall related software through Windows Settings, then inspect browsers for unfamiliar extensions, notification permissions, search providers, and proxy changes.
When the scan reports ransomware, credential-stealing malware, or a backdoor, avoid using the machine for banking or sensitive communication. Change passwords from a clean device and preserve relevant logs. Do not delete encrypted files if ransomware is suspected; those files may be needed for identification and future recovery attempts.
When A Normal Scan Is Not Enough
Some threats interfere with security tools, block downloads, or hide inside startup processes. If ESET Online Scanner will not launch, update, or complete, boot Windows into Safe Mode with Networking and try again. Safe Mode loads fewer drivers and startup programs, which can prevent some malicious processes from protecting themselves.
A failed scan does not prove that the computer is clean. Continue investigating browser policies, scheduled tasks, startup entries, hosts-file changes, suspicious services, and recently installed software. Use reputable rescue media or a trusted offline scanner when malware prevents normal Windows tools from working.
After cleanup, monitor the computer for recurring redirects, unknown pop-ups, disabled security settings, unusual network activity, rapid battery drain, or unexplained webcam and microphone access. Additional security guidance and malware-removal resources are available through the PC Malware Expert resource hub.
Recommended Follow-Up Actions
- Keep one trusted real-time antivirus product enabled and fully updated.
- Run an on-demand second-opinion scan after major alerts or suspicious software installations.
- Remove unknown browser extensions, notification permissions, and bundled applications.
- Change sensitive passwords from a clean device after suspected credential theft.
- Maintain offline or versioned backups and test that files can be restored.
Use ESET Online Scanner as a verification step, not as the only response to an infection. Download it from an official source, enable current detections, review its report carefully, and repeat the scan after cleanup. Prompt action and preserved evidence can make the difference between a minor cleanup and prolonged malware exposure.