Abstract: The inventive application includes a secondary OS for scanning which installs on one or many client computers and boots prior to a client's primary OS to counter security threats. In one configuration, a bootloader responds to a flagged condition to boot to the primary or secondary OS in accordance with the flagged condition. In another aspect, the secondary OS scans the file system of the primary OS to determine if remediation is required.