Online malware scanners let you check a file without installing an antivirus. They work in two very different ways, and the difference matters for your privacy and for what each one can catch.
Two kinds of online scanner
1. Hash lookup (file stays on your device)
The browser computes a fingerprint of the file, such as an MD5 or SHA-256 hash, and compares it with a list of known malware hashes. iMalware works this way. It is instant, works with files of any size, and never uploads the file. The trade-off: it only recognises files that are already known to be malicious.
2. Upload scanners (file goes to a server)
You upload the whole file and the service scans it with one or many antivirus engines, and sometimes runs it in a sandbox to watch its behaviour. This can catch threats that are not in any hash list yet. The trade-off: your file leaves your device, uploads have a size limit, and many services keep the file and share it with security researchers.
Comparison
| Scanner | How it works | File uploaded? | Best for |
|---|---|---|---|
| iMalware | MD5 hash lookup in the browser against 1,045,564 known malware hashes | No. Only a 3-character hash prefix is requested | Private documents, very large files, quick first check |
| VirusTotal | Dozens of antivirus engines plus behaviour reports; also accepts hash and URL searches | Yes (files up to 650 MB via the website) | Executables and installers you are happy to share |
| Jotti's malware scan | Several antivirus engines | Yes | A free multi-engine second opinion |
| OPSWAT MetaDefender Cloud | Multiple engines, plus file sanitisation features | Yes | Documents and archives |
| Hybrid Analysis | Sandbox detonation with a behaviour report | Yes, reports are often public | Advanced users analysing unknown executables |
Size limits and features of third-party services change; check each site for its current terms before uploading.
Privacy: think before you upload
VirusTotal states that files submitted through its public service are shared with the security community and its partners, and may be downloadable by premium users. That is fine for a suspicious setup.exe, but never upload contracts, tax returns, ID scans, source code or anything confidential to a public scanner. For those, use a hash lookup like iMalware or a local antivirus scan.
Which one should you use?
- A personal document (PDF, Word, Excel): check its hash with iMalware and open it with macros disabled. See which file types can contain malware.
- A program or installer you downloaded: hash check first, then a multi-engine scan if you are still unsure, and check the digital signature.
- A huge file (ISO, game, video, backup): upload scanners will refuse it. Use a hash lookup, which has no size limit. See scanning large files.
- A ZIP or other archive: see how to scan a ZIP file.
What online scanners can't do
An online scanner checks one file. It cannot clean an infected computer, remove a running infection, or watch your system in real time. If you think your PC is already infected, run a full scan with Microsoft Defender (built into Windows) or another reputable antivirus, and use Defender's offline scan for persistent threats.
Frequently Asked Questions
What is the best free online malware scanner?
It depends on the file. For private files or very large files, a hash lookup such as iMalware is best because nothing is uploaded and there is no size limit. For an unknown executable you don't mind sharing, a multi-engine upload scanner such as VirusTotal gives a broader second opinion.
Is there a free malware scanner with no download and no sign-up?
Yes. iMalware runs entirely in your web browser with no installation, no account and no limit on the number of scans.
Are online virus scanners safe to use?
Reputable ones are safe for your computer, because the scanning happens on their side or in your browser. The main risk is privacy: upload-based scanners keep and may share the files you send, so don't upload confidential documents.
Can an online scanner remove malware?
No. Online file scanners only tell you whether a file is malicious. To remove an infection, use an installed antivirus such as Microsoft Defender and run a full or offline scan.