Two security programs on one device
Installing a second antivirus product without removing the first is one of the few things in this subject that reliably makes a device worse. The symptoms are distinctive, and the remedy is an order of operations rather than a setting.
The short version
Run one real-time scanner. On Windows, the built-in protection normally steps aside by itself when a third-party product registers, so you are unlikely to end up with two by accident from that direction — but two third-party products, or an old product that was never fully removed, will collide. Remove the one you are not keeping using the vendor’s own removal tool, restart, then install the one you are.
Why two is worse than one, and worse than none of the second
A real-time scanner inserts itself into the path that file operations take. When two products do this, every read and write is inspected twice, and each product encounters a file the other currently has open. The result is not simply double the work: it is waiting, retrying, and occasionally each product treating the other’s activity as suspicious, because the behaviour of a scanner — reading everything, injecting into processes, intercepting network traffic — resembles the behaviour scanners are built to notice.
The practical consequences are a slow machine, files that will not open at first attempt, downloads that disappear between browser and disk, and each product reporting the other as a threat. On Windows, the built-in Microsoft Defender Antivirus is designed to hand over to a registered third-party product, which Microsoft describes in its Windows support material; that handover is why the common conflict is between two third-party products, or with the remains of one that was uninstalled badly.
Signs you have two
- Two icons in the system tray or menu bar for different security brands.
- Two entries under Installed apps on Windows, or two applications in the macOS Applications folder.
- Repeated warnings that another security product has been detected.
- Detections naming files inside the other product’s folders.
- A new installation that refuses to complete, citing an existing product.
- Slowness that is constant rather than tied to a scan schedule — the pattern described on the slowdown page.
Trial software that came preloaded on a new laptop is a frequent source. It often remains installed and active long after the trial has lapsed, and people rarely think of it as a product they chose.
Removing one properly
- Decide which one stays before you touch anything. Check which licence is current and which covers the devices in your household. Removing the one you are still paying for is an expensive way to save time.
- Find the vendor’s own removal tool. Most major vendors publish a dedicated removal or clean-up utility on their support site, because their ordinary uninstaller sometimes leaves drivers and services behind. Download it from the vendor’s own domain only.
- Uninstall through the operating system first. Windows: Settings → Apps → Installed apps. macOS: many security products require their own uninstaller from the Applications folder rather than being dragged to the Bin, and using the wrong method is what leaves fragments behind.
- Restart, then run the vendor’s removal tool. This order matters: the tool clears what the uninstaller could not while files were in use.
- Restart again and confirm the device is unprotected but stable. On Windows, Windows Security should now show itself as active. Stay off unfamiliar sites until the replacement is installed, and do not leave the device in this state for days.
- Install the product you are keeping, and let its first scan finish. Expect the heavy disk activity described on the slowdown page for a day or so.
- Check the startup list afterwards. Fragments occasionally survive as startup entries pointing at files that no longer exist. Removing those entries is harmless and tidies up the boot.
Two mistakes that cause most of the trouble
The first is installing the new product before removing the old one, on the assumption that the installer will sort it out. Some do, many do not, and a half-uninstalled product is harder to deal with than a working one. The second is reaching for a third-party uninstaller or registry cleaner found through a search. Use the vendor’s tool, or nothing; general-purpose cleaners in this category cause more problems than they solve, and the download sites hosting them are a well-known source of bundled extras.
What can safely run alongside
Not everything that calls itself security software is a real-time scanner, and the one-product rule applies to scanners rather than to the whole category.
| Type of software | Alongside an antivirus product? | Notes |
|---|---|---|
| A second real-time antivirus scanner | No | The conflict this page is about. |
| An on-demand scanner used manually | Usually yes | Only inspects when you ask it to, so the two rarely meet. |
| A password manager | Yes | Different job entirely, whether bundled or separate. |
| A VPN client | Usually yes | Two VPN clients active at once will conflict with each other. |
| Browser-based ad or content blockers | Yes | Operate inside the browser rather than in the file path. |
| A firewall bundled with a security suite | One only | Two software firewalls produce their own category of confusion. |
| Backup software | Yes | Excluding the backup destination folder from real-time scanning often helps performance. |
Phones, tablets and Macs
On mobile platforms the question barely arises in the same form. Applications run in a sandbox that limits what any of them can see of the others, so mobile security apps concentrate on web filtering, permission review, device location and message screening rather than on scanning the system. Two such apps installed together will duplicate notifications and battery use rather than fight over files, though a phone can only send its traffic through one VPN profile at a time, and security apps often use one.
On macOS, Apple documents the protections built into the operating system in the Apple Platform Security guide. Third-party products for macOS use system extensions that require explicit approval in System Settings, and an approval that was never granted is a common reason a Mac product appears installed but inert. Removing a macOS security product almost always requires the vendor’s own uninstaller.
When the old product will not go quietly
Occasionally an uninstaller fails: it errors, it asks for a password nobody has, or the entry vanishes from the installed list while the software keeps running. Three approaches usually resolve it, in this order.
- Use the vendor’s removal tool on its own. These utilities are written for precisely this case and do not require the ordinary uninstaller to have worked first.
- Try it in safe mode. Starting Windows or macOS in safe mode loads a minimal set of drivers, which frees files the product had locked. Run the removal tool there, then restart normally.
- Ask the vendor’s support, even without a current subscription. Removal assistance is generally provided regardless of licence state, and support can supply the correct tool for the specific version you have, which is not always the one linked from the front of their site.
A product preloaded on a new laptop deserves a particular mention. Trial software shipped by a manufacturer often keeps running long after the trial lapses, and because nobody chose to install it, nobody thinks to remove it. If a device arrived with something already in place and you have since bought your own, that preloaded trial is the first thing to look for.