The 5 Best Antivirus for PC (2023 Update)

Summary

Norton has the best device, privacy, and identity protection. It has all the security features you need and a great price too.

• Malware protection: 100%. Norton averaged 6 out of 6 in the last 10 protection tests. It is excellent at detecting and removing malware.
• Speed impact: 100%. Norton averaged 6 out of 6 in the last 10 performance tests. It does not slow down your PC.
• Features: 100%. Norton offers anti-malware, anti-phishing, firewall, unlimited VPN, password manager, parental controls, and more.
• Price: 95%. Norton offers better value for money than all competitors, except for Kaspersky, which is slightly cheaper.

Discount: Temporarily save up to 70% 🔥

Summary

Bitdefender offers excellent protection and bonus features. However, it’s pricey if you want the VPN and password manager.

• Malware protection: 95%. Bitdefender averaged 5.95 out of 6 in the last 10 protection tests. It is excellent at removing malware.
• Speed impact: 100%. Bitdefender averaged 6 out of 6 in the last 10 performance tests. It does not slow down your PC.
• Features: 95%. It offers anti-malware, anti-phishing, firewall, parental controls, and more. But the VPN and password manager cost extra.
• Price: 75%. If you only want the antivirus, Bitdefender offers great value. But if you want all features, Norton offers a better deal.

Discount: Save 50% on this secret page

Summary

McAfee offers excellent device, privacy, and identity protection. However, some features are only available in the USA.

• Malware protection: 100%. McAfee averaged 6 out of 6 in the last 10 protection tests. It is excellent at detecting and removing malware.
• Speed impact: 85%. McAfee averaged 5.85 out of 6 in the last 10 performance tests. So it has a minimal impact on your PC’s speed.
• Features: 100%. McAfee offers anti-malware, anti-phishing, firewall, unlimited VPN, password manager, parental controls, and more.
• Price: 95%. McAfee offers better value for money than most competitors, except Kaspersky, which is slightly cheaper.

Discount: Save 70% on this secret page

Summary

Panda offers excellent protection and has flexible pricing. However, it’s expensive if you want the unlimited VPN.

• Malware protection: 99%. Panda averaged 99.9% in the malware protection tests. It is excellent at detecting and removing malware.
• Speed impact: 99%. Panda averaged 99% in the performance tests. So it has almost no impact on your PC’s speed.
• Features: 100%. Panda offers anti-malware, anti-phishing, firewall, unlimited VPN, password manager, parental controls, and more.
• Price: 75%. Panda offers the most flexible pricing of all brands. But, if you want all the security features, Norton is more affordable.

Discount: Save 50% on this secret page

Summary

Kaspersky has excellent protection at a low price. But the war in Ukraine raises concerns about its ties to the Russian government.

• Malware protection: 100%. Kaspersky averaged 6 out of 6 in the last 10 protection tests. It is excellent at removing malware.
• Speed impact: 100%. Kasperksy averaged 6 out of 6 in the last 10 performance tests. So it does not slow down your PC.
• Features: 100%. Kaspersky has anti-malware, anti-phishing, firewall, unlimited VPN, password manager, parental controls, and more.
• Price: 100%. Kaspersky Plus is the most affordable way to protect a Windows PC with all essential features, including an unlimited VPN.

Discount: Save up to 50%

Antivirus software buying guide

Below we cover a range of topics:

• What is antivirus software?
• How does antivirus software work?
• Does a PC need antivirus software?
• How do we test antivirus software?
• How to choose the best antivirus software?
• What cyber threats can antivirus protect you from?
• What cyber threats can antivirus not protect you from?
• What antivirus software have we tested?

Clicks the links to be taken to the one of your choice:

What is antivirus software?

Antivirus software is a type of computer program designed to safeguard your computer or network from cybersecurity threats. These threats include viruses, worms, trojans, ransomware, spyware, adware, and other types of malicious software, collectively known as malware.

Antivirus software functions as the first line of defense, acting as a sentinel that continuously monitors for potential threats. It is also responsible for quarantining and eliminating any detected threats, protecting your system’s data integrity and user privacy. Beyond these protective measures, modern antivirus software also offers additional features such as firewalls, email protection, and safe browsing tools.

For more, read our blog post on what antivirus software is.

How does antivirus software work?

Antivirus software uses various methods to detect and neutralize threats. It primarily relies on three mechanisms: signature-based detection, heuristic analysis, and behavior-based detection. Each of these mechanisms provides a unique approach to identifying potential threats.

Signature-based detection

Signature-based detection is one of the earliest and most straightforward methods employed by antivirus software. Each piece of malware has a unique piece of code or “signature” that distinguishes it from others. Antivirus software maintains a vast database of these known malware signatures.

When a file or program is accessed, the antivirus software scans it, comparing its code against the database of known malware signatures. If it finds a match, it flags the file or program as a threat. This method is highly effective at detecting and removing known malware but falls short when it comes to new, unknown malware variants, also known as zero-day threats.

Heuristic analysis

To overcome the limitations of signature-based detection, antivirus programs use heuristic analysis. Instead of looking for a specific signature, heuristic analysis aims to identify previously unknown malware or new variants of known malware by examining the file’s structure and behavior.

The software dissects the suspect file, examining the code for behaviors or instructions that are commonly associated with malware, such as code that attempts to modify system files or transmit data to an external server. While this method significantly improves detection rates for new malware, it is also more prone to false positives – flagging legitimate programs as potential threats.

Behavior-based detection

Behavior-based detection, also known as behavior blocking, goes beyond static code analysis. It monitors the behavior of applications in real-time. If a program starts to exhibit suspicious behavior, such as trying to access protected files or modify system settings, the antivirus software flags it as potentially malicious and takes appropriate action.

This method is particularly effective against malware that may evade signature and heuristic analysis, such as polymorphic or metamorphic viruses that can alter their code to avoid detection. Behavior-based detection is also helpful against sophisticated threats like rootkits or fileless malware that reside in system memory instead of installing themselves as regular files.

It’s worth noting that while behavior-based detection can detect previously unknown threats, it may also produce false positives, and hence, should be combined with other methods to ensure accuracy and reliability.

For more, read our blog post on how antivirus software works.

Does a PC need antivirus software?

Does a PC Need Antivirus Software?

A PC, or Personal Computer, is a multi-purpose computer whose size, capabilities, and price make it feasible for individual use. PCs are intended to be operated directly by an end user, rather than by a computer expert or technician. They are powered by various operating systems, such as Microsoft Windows, Apple’s macOS, and Linux distributions, among others.

Particularly when it comes to Windows-powered PCs, there is a pressing need for antivirus software. Windows holds a substantial market share in the global operating system landscape, making it a popular target for cybercriminals.

Its wide adoption by both personal users and businesses further elevates the potential reward for cybercriminals, driving a significant volume of malware to be developed specifically to exploit vulnerabilities in the Windows ecosystem.

Security on Windows 8 PCs

Windows 8 was the first version of Windows to introduce a significant upgrade in built-in security measures. This included Windows Defender, a built-in antivirus tool, and features like SmartScreen, which helped protect users from phishing and malware attacks online.

However, while these features provided a basic level of protection, they did not offer the comprehensive coverage that standalone antivirus software can offer. Windows 8 systems remained vulnerable to zero-day threats, ransomware, and advanced cyber-attacks due to limited detection methods and absence of advanced protective features like a secure firewall or VPN.

Security on Windows 10 PCs

Windows 10 further bolstered the security features with enhancements to Windows Defender, making it a more robust tool. It introduced a host of additional features, such as ransomware protection, frequent security updates, and Windows Hello for passwordless sign-ins.

Despite these enhancements, security risks persisted, with Windows 10 systems still falling prey to sophisticated phishing attacks, complex malware, and targeted cyber-attacks. Built-in tools often lag behind dedicated antivirus software in terms of real-time protection, heuristic threat detection, and user privacy protection.

Security on Windows 11 PCs

With Windows 11, Microsoft has taken another step forward in built-in security measures. It mandates hardware-based isolation, secure boot, and TPM 2.0, making it more challenging for malware to infiltrate the system. It also introduces Microsoft Pluton, an integrated hardware security chip.

Despite these advances, potential security risks persist. Cybercriminals continuously evolve their methods, creating more advanced, targeted threats. These evolving threats necessitate the additional layers of protection that dedicated antivirus software offers.

In conclusion, while Windows continues to improve its security features, standalone antivirus software plays an indispensable role in bolstering system security. Antivirus software offers comprehensive, real-time protection against a wide range of threats and sophisticated malware that built-in security tools may not detect or effectively handle.

Additionally, antivirus software often provides extra features like VPN for secure browsing, advanced firewall protection, and tools for secure financial transactions, further enhancing overall system security and user privacy.

For more, read our blog post on whether Windows 11 needs antivirus.

How do we test antivirus software?

When evaluating antivirus software, we adhere to a detailed, rigorous testing process. We focus on six core elements, each carrying varying degrees of weight in our overall assessment:

• Anti-malware protection (30%)
• Security and privacy features (30%)
• Speed impact (10%)
• False positives (10%)
• Price (10%)
• Ownership and reputation (10%)

This multifaceted approach ensures that we assess antivirus software from all angles, focusing not only on its protective capabilities but also on its influence on system performance, pricing structure, and company reputation.

Anti-malware protection (30%)

Anti-malware protection is crucial to antivirus software, and therefore, it forms a substantial 30% of our evaluation weight. We measure this aspect through a combination of in-house testing and examination of external testing agency results, namely those from AV-Test.

In-house testing

In our own testing labs, we conduct thorough examinations of each antivirus product’s anti-malware prowess. Our process involves intentionally infecting a controlled test PC with hundreds of known malware samples via a USB drive. We then assess how effectively the antivirus software can detect and neutralize these threats.

We also simulate real-world malware attacks by executing malicious files and initiating ransomware attacks to measure the software’s real-time defense capabilities. These tests aim to mimic the threats users might encounter during regular computer usage, providing a realistic gauge of the antivirus software’s performance.

AV-Test results

Supplementing our in-house testing, we analyze results from AV-Test, a respected independent testing agency. We scrutinize their assessments of antivirus products for Windows, Mac, and Android, focusing particularly on their findings regarding malware protection.

AV-Test’s comprehensive evaluations include exposure to thousands of malware samples, providing a broader perspective on the antivirus software’s capabilities. This external data enriches our own findings, allowing us to offer a more rounded judgement on the effectiveness of each antivirus product’s anti-malware features.

Security and privacy features (30%)

Beyond basic malware protection, the comprehensive suite of security and privacy features offered by an antivirus product is a significant determinant of its overall quality and effectiveness. We devote 30% of our evaluation weight to these features. Below, we delve into each feature’s functionality and our testing process.

Web protection (anti-phishing)

Web protection tools, or anti-phishing capabilities, safeguard users from fraudulent websites that aim to steal sensitive information. During testing, we expose the antivirus software to a variety of known phishing sites and assess whether it successfully blocks access and alerts the user.

Firewall

A firewall is a digital barrier that prevents unauthorized access to a network or system. We evaluate the antivirus’ firewall by attempting to breach it using various methods and tracking its response.

Password manager

Password managers store, manage, and auto-fill passwords securely. We test this feature by using it across various sites and devices, evaluating its ease of use, security, and effectiveness in handling password-related tasks.

Virtual private network (VPN)

VPNs establish a secure, encrypted connection for safe online browsing. We test the antivirus’ VPN for connection speed, server selection, and efficacy in masking IP addresses and protecting user privacy.

Parental controls

Parental controls help monitor and limit children’s online activities. We test this feature by setting up various restrictions and monitoring tools, then attempting to bypass them.

Identity theft protection

Identity theft protection tools monitor for signs of identity theft, like unusual credit report activity. We test this feature by assessing the breadth of its monitoring capabilities and its alert system.

Secure cloud storage (cloud backup)

Secure cloud storage allows users to back up data safely online. We test its ease of use, encryption standards, and restoration capabilities after intentionally deleting some files.

Anti-ransomware

Anti-ransomware tools protect against malware that encrypts files until a ransom is paid. We test this feature by launching simulated ransomware attacks and measuring the software’s response.

Dark web monitoring

Dark web monitoring services scan the dark web for signs of the user’s personal information. We evaluate its effectiveness by cross-verifying any alerts it provides with known data breaches.

In each of these testing areas, our goal is to mimic real-world scenarios to gauge how well these features work and the level of security and convenience they offer to the end user.

Bonus features

An antivirus program can come with various entry-level functions, such as spam filters and secure browsers, and premium options like online storage with enhanced security. We consider the following bonus features worthy of your consideration:

• Ad Blocker
• Anti-theft
• Email protection
• File encryption
• File shredder
• Gaming mode
• Microphone protection
• PC maintenance features
• Secure browser (hardened browser to protect your online banking)
• Spam filter
• Startup optimizer
• Tune up tools
• Virtual keyboard
• Webcam protection

Speed impact (10%)

The speed impact of antivirus software on your device is an essential factor in our evaluation process, contributing to 10% of our overall weight. Antivirus software should protect your system without significantly slowing it down. For this, we turn to the performance tests conducted by AV-Test.

These tests evaluate how much the antivirus software impacts system performance during common tasks such as loading websites, downloading software, installing and running programs, and copying files. We analyze these results to understand how much lag the antivirus program might introduce into a typical user’s day-to-day operations.

False positives (10%)

False positives occur when an antivirus program erroneously identifies a safe file or action as harmful. These false alarms can disrupt user experience and lead to a disregard of legitimate threats over time. Thus, we allot 10% of our evaluation to the frequency of false positives, using AV-Test’s usability tests for guidance.

AV-Test’s usability tests scrutinize antivirus software for instances where they incorrectly warn about actions undertaken while installing and using legitimate software, or when they block certain actions performed using legitimate software. By reviewing these results, we can form an understanding of how likely an antivirus program is to disrupt a user’s activities with unwarranted warnings.

Price (10%)

Price is a fundamental aspect of any purchasing decision, contributing to 10% of our assessment. While looking at the price, we focus on value for money – a balance between the cost and the features provided.

It’s worth noting that there can be significant differences between first and second-year prices, as many companies offer attractive discounts for the initial subscription, which significantly rise upon renewal. We factor in these variations to provide a realistic outlook on the product’s long-term cost.

Ownership and reputation (10%)

The reputation of the company behind the antivirus software is a critical factor in our evaluation, representing 10% of our overall weight. Not all companies uphold the same ethical standards, and their reputation can give valuable insights into their reliability and trustworthiness.

For instance, the scandal with Avast selling user data through a subsidiary, Jumpshot, raised significant questions about the company’s commitment to user privacy. Such incidents inevitably impact a company’s reputation, and we consider them carefully when assessing the trustworthiness of the antivirus software in question.

We believe in a user’s right to privacy and transparency, and we consider any violations of these principles to be a serious concern.

For more, read our blog post on how we test antivirus software.

How to choose the best antivirus software?

Choosing the best antivirus software requires a nuanced consideration of various elements. Each product offers a different combination of features, performance, and pricing, all of which can significantly impact your overall experience and security. Here’s a breakdown of the primary elements you should consider:

Reliable protection from malware

At its core, antivirus software should reliably shield your devices from a wide range of malware, including viruses, trojans, ransomware, and spyware. It’s essential to ensure the antivirus has robust real-time protection that actively monitors your system and intercepts threats as they occur. Consider antivirus software that consistently performs well in independent lab tests conducted by entities like AV-Test.

Security updates

Timely security updates are a crucial component of an effective antivirus solution. With new malware threats emerging daily, an antivirus that doesn’t update its threat database regularly can leave your system vulnerable. Look for software that offers automatic updates to ensure continuous protection against the latest threats.

Security features

While basic malware protection is non-negotiable, additional security features can enhance your digital safety. These may include a firewall, password manager, VPN, parental controls, and more. Evaluate your needs and choose software that offers the most comprehensive and relevant set of security features for your circumstances.

Performance impact

While an antivirus software’s primary function is to protect, it shouldn’t significantly slow down your system. Performance impact varies widely between products, and a program that excessively drains system resources can be disruptive. Choose an antivirus that provides robust protection with minimal performance impact, as confirmed by independent testing labs.

Customer support

Top-notch customer support can make a significant difference, especially in moments of crisis. Look for companies that offer round-the-clock support, multiple contact methods (like phone, email, live chat), and a robust knowledge base for self-help. The availability of support can greatly ease the process of troubleshooting or resolving any issues you might encounter.

First-year and second price

Finally, pricing is an essential factor in any purchasing decision. However, don’t be immediately swayed by discounted first-year prices. Many antivirus companies offer attractive first-year discounts but have considerably higher renewal prices. Compare the initial and subsequent costs and ensure that the product offers good value for money over the long term.

By paying close attention to these aspects, you can select an antivirus solution that delivers reliable, comprehensive protection while fitting your budget and performance requirements.

Operating system

If you have a specific operating system that you would like to protect, we probably have a dedicated antivirus comparison for it:

• The best antivirus of 2023 – For all OS.
• The best antivirus for Windows 11 – For Microsoft’s latest desktop OS.
• The best antivirus for macOS – For Apple’s desktop OS.
• The best antivirus for Android – For Google’s mobile OS.
• The best antivirus for iPhone – For Apple’s mobile OS.
• The best antivirus with a VPN – For both security and privacy.
• The best VPN providers – For a dedicated privacy solution.

Click the links to be taken to your comparison of choice.

What cyber threats can antivirus protect you from?

Antivirus software is designed to safeguard users from a broad spectrum of cyber threats. While it’s crucial to note that antivirus software isn’t a panacea for all cybersecurity threats, it can provide a formidable line of defense against many prevalent types of cyberattacks. Here’s a closer look at the various threats that antivirus software can help you combat:

Malware

Malware is a blanket term for malicious software designed to damage or gain unauthorized access to a computer system. It includes viruses, ransomware, spyware, and more. Antivirus software can detect and eliminate various malware forms, thus preserving your device’s health and your digital safety.

For more, read our blog post on malware or malware examples.

Adware

Adware is a type of software that automatically delivers or displays unwanted advertisements on a user’s device. While not always harmful, adware can become a nuisance and may even serve as a conduit for more malicious threats. Antivirus solutions can identify and remove adware, maintaining a cleaner, safer digital environment.

For more, read our blog post on adware or adware examples.

Botnets

Botnets are networks of computers infected with malicious software and controlled as a group without the owners’ knowledge. They are often used to launch large-scale attacks, including DDoS attacks and spam campaigns. Antivirus software can detect botnet-related malware, preventing your device from becoming part of a malicious network.

For more, read our blog post on botnets or botnet examples.

Keyloggers

Keyloggers are malicious programs designed to record every keystroke made on a targeted device, capturing sensitive data such as login credentials, credit card information, and personal messages. Antivirus software can often identify and neutralize keyloggers, thereby protecting your sensitive information.

For more, read our blog post on keyloggers or keylogger types.

Ransomware

Ransomware is a form of malware that encrypts a victim’s files, with the attacker then demanding a ransom to restore access to the data upon payment. Antivirus software can prevent ransomware attacks by detecting and eliminating such threats before they infiltrate your system.

For more, read our blog post on ransomware or ransomware examples.

Rootkits

Rootkits are designed to provide unauthorized users with privileged access to a computer. They can hide their presence and that of other harmful software. Antivirus programs, especially those with dedicated anti-rootkit features, can detect and remove these threats, protecting your system’s integrity.

For more, read our blog post on rootkits or rootkit examples.

Spyware

Spyware is software that secretly gathers a user’s information through their Internet connection without their knowledge. It collects data ranging from browsing habits to personal data and financial information. Antivirus software can help protect against spyware, ensuring your privacy remains intact.

For more, read our blog post on spyware or spyware examples.

Trojans

Trojans are malicious programs that misrepresent themselves to appear useful or benign to trick users into installing them. Once inside a system, they can execute various malicious activities. Antivirus software can protect against Trojans by identifying and eliminating them before they cause harm.

For more, read our blog post on trojans or trojan examples.

Viruses

Viruses are a type of malicious software that, when executed, replicate themselves by modifying other computer programs and inserting their own code. They can cause significant damage to your system. Antivirus software is designed to detect, quarantine, and remove viruses, keeping your system safe.

For more, read our blog post on viruses or virus examples.

Worms

Worms are self-replicating malware that spread to other computers without any user action. They typically cause harm by consuming bandwidth or overloading web servers. Antivirus software can detect and eliminate worms, preventing their spread and mitigating the damage they can cause.

For more, read our blog post on worms or worm examples.

In essence, a robust antivirus solution can provide comprehensive protection against a wide range of cyber threats, preserving both the health of your device and the security of your personal information.

What cyber threats can antivirus not protect you from?

While antivirus software serves as a robust defense against various cyber threats, it’s essential to understand that it is not an all-encompassing solution. Certain cyber threats, particularly those that involve manipulation or deception, may not be wholly prevented by antivirus solutions. Here’s an overview of the various threats that require user vigilance in addition to the security provided by antivirus software:

Phishing

Phishing involves fraudulent attempts to obtain sensitive data such as usernames, passwords, and credit card details by masquerading as a trustworthy entity in digital communication. It commonly occurs through deceptive emails and websites.

While some advanced antivirus solutions offer anti-phishing tools, they may not catch all phishing attempts, especially more sophisticated ones. Hence, user awareness and caution are critical to thwarting these types of attacks.

For more, read our blog post on phishing or phishing examples.

Online Scams

Online scams cover a wide range of fraudulent activities, including false auctions, non-existent products, and advanced-fee fraud. These scams rely heavily on human factors such as greed or fear, enticing users into making bad decisions.

While antivirus software can block known scam websites, it cannot fully protect users from falling for scams, especially those conducted via email or social media. Users must remain vigilant about unsolicited communications and too-good-to-be-true offers.

For more, read our blog post on online scams.

Social Engineering

Social engineering involves manipulating individuals into divulging confidential information or performing actions that compromise security. These attacks exploit human psychology rather than software vulnerabilities, making them difficult for antivirus software to detect and prevent. Users must stay informed about social engineering tactics and always double-check requests for sensitive data or suspicious links.

For more, read our blog post on social engineering.

Zero-Day Exploits

Zero-day exploits target vulnerabilities in software that are unknown to those who should be interested in fixing them, such as the vendor. These vulnerabilities are thus unpatched, making them attractive targets for cybercriminals.

Antivirus software may struggle to protect against zero-day attacks since these threats are unknown and do not have a specific signature for the software to identify. This underlines the importance of regularly updating all software, as updates often include patches for known vulnerabilities.

For more, read our blog post on zero-day exploits.

In conclusion, while antivirus software plays a crucial role in securing a digital environment, it cannot fully protect against every cyber threat. Users must supplement their antivirus software with good digital habits, regular software updates, and a healthy dose of skepticism when confronted with unexpected digital communications or offers.

What antivirus software have we tested?

We have tested 28 antivirus brands, ranging from entry-level free antivirus programs, to mid-range paid antivirus software and full-featured internet security suites. Below is the list of the 20 most important brands:

• Avast
• AVG
• Avira
• Bitdefender Antivirus
• ESET
• F-Secure
• Intego
• Kaspersky
• MacKeeper
• Malwarebytes
• McAfee Antivirus
• Microsoft Defender (Windows Defender)
• Norton Antivirus
• Panda
• PC Matic
• Sophos
• TotalAV
• Trend Micro
• VIPRE
• Webroot

The best antivirus programs are Norton 360 Deluxe, Norton 360 Advanced, and Bitdefender Total Security. By comparison, the other antivirus software cost too much, offer less capable protection from malware threats, or have no unlimited VPN access.