Which of these 10 AV Contenders deserves a spot on your pc?
It's entirely possible to run rampant through a minefield without blowing yourself up, but do you really want to risk it? One wrong move or accidental step will have you forever regretting that decision. There are strategies you can employ that will lessen the chance of setting off an explosive, but unless you have a blueprint of the entire landscape, your luck is bound to run out at some point.
Surfing the web without antivirus protection is similarly risky. You may think you're playing it safe by avoiding shady websites and staying away from illegal downloads, but you can't avoid danger entirely. Even if you do everything right, the security practices of other users and websites are out of your control; should a legitimate website become compromised, it could serve up malware to unsuspecting visitors. Likewise, a family member could unwittingly send you an infected file. While you're sipping your morning latte singing "Everything is Awesome," some black-hat teen in Russia is busy selling your stolen info on the underground market. Good luck explaining your situation to all three credit bureaus. In less dramatic fashion, you could simply end up with an infected PC that putters around like a beat-up truck with sugar in the gas tank.
The alternative is to supplement your safe computing habits with security software. There are many suites available, so we rounded up 10 of the most popular AV applications—seven that cost money, three that are free—and ran rampant on the web to separate the contenders from the pretenders.
Making the Grade
Performance Impact and Scan Times
Maybe 100 years from now, installing security software will actually speed up performance. We're not there yet, so evaluating the performance hit of each AV program still factors into our verdict. To gauge this, we record startup times and how long it takes to transfer large and small files. We also collect scores from PCMark 8 (system) and Peacekeeper (browser). All results are compared to a clean installation with no AV software, which we revert back to in between installing AV programs using Acronis True Image ($50, www.acronis.com). Full system scan times also affect scores.
Annoyance Level
Imagine hiring a bodyguard to follow you around, but instead of warding off muggers, he screams "Danger!" each time you walk past a dark alley. And when real danger does present itself, rather than jump into action, he freezes up until you tell him what to do. We've seen some AV programs act like that. AV software should take action on its own when there's a real threat, and false positives should be kept to a minimum. We also don't want to be badgered into purchasing additional protection.
Features and Implementation
Seven of the 10 AV programs in this roundup are fleshed-out security suites, which give them an immediate advantage over the three free programs in this category. However, it's not that cut-and-dried. We're not adding up bullet points and giving higher scores to the programs with the most features. Instead, we're on the lookout for features that we'll actually use, along with how well they're implemented. For example, a virtual keyboard that dodges potential keyloggers is great for signing into banking sites, but if we have to spend 10 minutes searching for the option in a convoluted menu layout, then we'd rather risk using our hardware keyboard.
Pricing and Value
While full-fledged security suites have an inherent advantage in terms of features, the free security programs own this category. The onus is on the seven other security suites to convince us the additional layers of protection and added amenities are worth paying for when free protection is a mouse click away.
Malware Detection
To ensure we do this category justice, we not only run our collection of tests—visiting infected websites and attempting to load malware samples—we also take into consideration the results of three independent testing labs: Virus Bulletin (www.virusbtn.com), AV-Test (www.av-test.org), and AV-Comparatives (www.av-comparatives.org). Going this route paints a broader picture of protection than we're able to test on our own.
Bitdefender
Internet Security
Let's get straight to the point—Bitdefender lays the smackdown on malware like it has a personal score to settle, but like any good hitman, it goes about it without drawing attention to itself. The high level of effectiveness is what makes Bitdefender's Autopilot mode a feasible option. When engaged—you have the option of turning it on during installation—Bitdefender mans the controls and silently takes out threats as you stumble across the web. There are no pop-ups asking for your permission to take out a target, just lethal protection against menacing malware.
Even with Autopilot mode turned off, Bitdefender isn't bothersome. We actually prefer to leave Autopilot disengaged so that we know when we just stepped on a mine, but either way, Bitdefender offers the same high level of protection. It blocked nearly all of our attempts to sneak malware onto our system, and even when we did manage to download and install a malicious program, Bitdefender detected something was amiss and scrubbed our testbed clean.
Our results aren't unusual. Bitdefender has passed every single VB100 comparative test by Virus Bulletin since August 2010, and in AV-Test.org's latest report, it scored perfect marks across the board (Protection, Performance, and Usability). Out of nearly more than 19,600 malware samples deemed widespread and prevalent by AV-Test, Bitdefender nabbed them all.
Bitdefender's interface is easy to navigate and somewhat friendly for touch operation, for those who care. We also like that it includes a built-in file shredder, allowing you to permanently delete files. All of this security goodness weighs on the package—it takes up a bit more space than most AV programs, and we sometimes noted longer boots and file-transfer performance. We're not too harsh on this simply because you're not likely to notice the impact without a stopwatch.
Turning on Autopilot mode allows Bitdefender to man the controls without ever having to ask for your input.
Bitdefender Internet Security
$70 (1 Year, 3PCs), www.bitdefender.com
Kaspersky
Internet Security 2014
More of the same from a familiar face
Having consistency in the AV space can be a double-edged sword. What do we mean by that? Whereas some security programs look and act drastically different each year, Kaspersky seems to have found a formula it's comfortable with and is sticking with it. That's great for the things that work well, but it also means the same blemishes go unattended.
The user interface looks the same as it did last year and the year before that. If you're rocking a fancy hybrid laptop with a touchscreen display, you'll appreciate being able to tap dance your way through the menu system, which features large controls. Getting where you want to go isn't always intuitive, though the most common actions you're likely to perform are easily accessible.
Kaspersky's scan engine continues to run down malware like a demolition car, though it sometimes takes a moment to kick into gear. Rather than create a roadblock for dirty files, Kaspersky will often let an infected file reach the desktop before running it over and sending the infected code to the digital graveyard.
We found Kaspersky's detection rate to be nearly on par with what independent third-party testing labs report, though it did let a potentially unwanted program (PUP) lock our mouse cursor into a small box on the desktop. It took a bit of persistence (and Safe Mode) to undo the damage, but we eventually got rid of the offending program. We'd also like Kaspersky to rely less on our input when it finds a threat and take decisive action on its own.
Gripes aside, Kaspersky offers effective protection. It also bundles welcome extras like a virtual keyboard to evade keyloggers, a rescue media builder in case things go really wrong, and a vulnerability scanner to see if any programs present a security risk.
Kaspersky's interface is equally suited for mouse and touch controls.
Kaspersky Internet Security 2014
$80 (1 Year, 3PCs), usa.kaspersky.com
Norton
Internet Security
Lightweight protection that beats up malware like a heavyweight boxer
Symantec dropped the yearly designation for its Norton product line, so instead of Norton Internet Security 2014, it's now simply Norton Internet Security (NIS). This change doesn't affect current or future subscriptions—you're always eligible to download the latest version of NIS as long as your subscription is current.
This born-again AV continues to atone for its sinful past. Power users still find this hard to fathom, but ever since Symantec rebuilt NIS from the ground up in 2009, it's been one of the better security products on the market. It installs in under a minute, is lean on system resources, and pounces on malware like a hungry cat chasing a three legged mouse.
We didn't have as many third-party reports to lean on for NIS this year as we normally do, so we threw some additional infected files of our own into the mix. Anytime we managed to evade the scan engine, NIS's SONAR technology would spring to action and zap our malware based on whatever suspicious activity it detected (precisely as SONAR is designed to do).
There are a lot of settings for power users to play with, though less-savvy users are better off leaving things alone.
NIS leaves very little room to nitpick. If we were in charge of the program's development, we'd add a virtual keyboard for logging into sites like banking institutions, and we'd clean up the basement levels of the menu interface. The sleek UI is only skin deep—as you crawl through the options, the menu takes on a different look. It's also tailored more towards savvy users, which could be a turn-off for some people.
In addition to a two-way firewall and intelligent spam controls, Symantec bundles in a deep-scanning utility called Power Eraser for stubborn infections, and a Safe Web scanning app that combs your Facebook feed for malicious links. It's nice to have these baked in, though they're both freely available to everyone.
Norton Internet Security
$100, us.norton.com
Panda
Internet Security 2014
Trying a little too hard to fit in
When you start hanging around a new group of people, you might change your style to blend in with your peers. So it goes with Panda Internet Security 2014 and Windows 8/8.1. Panda didn't just take a page from Windows 8's design scheme, it swiped the entire playbook and then gave itself a dramatic makeover. The result is that Panda's interface is a natural extension of the Modern UI in Windows 8, which bodes well if you're a fan of the design.
Unfortunately, it appears the developers spent more time dressing up Panda and not enough time teaching it tricks. For example, Panda includes a set of parental controls, but they lack even basic scheduling options. What's even worse is they don't support Internet Explorer 11, the latest version of IE introduced with Windows 8.1 earlier this year. To be fair, Panda is working on fixing this and it might even be compatible as you're reading this, but for now, it's a glaring omission for a security suite that's trying so hard to fit in.
Panda's lumbering scan engine is also a mixed bag. There's no sense of urgency in performing a full-system sweep, and not much time is shaved off when running subsequent scans. This is in stark contrast to most other AV programs that skip over files that haven't changed since the last scan. To Panda's credit, it caught most of our malware, and it scores well with the labs we check in with. However, we did manage to trip up Panda a few times, though in almost every case, it eventually picked itself up and figured out that something was wrong. One thing that likely helped in these cases is that we enabled Panda's TruPrevent option. This gives Panda the green light to analyze the behavior of programs and is essential in catching unknown threats that haven't yet been added to its virus database. Ideally, Panda would enable this option by default.
Panda's resemblance to Windows 8 is uncanny (and intentional).
We like that Panda includes a virtual keyboard, which makes it more difficult (not impossible) for hackers to steal your login information with a keylogger. Panda also includes built-in backup software to automatically back up files to the cloud or local storage on a set schedule—nothing earth-shattering, but a welcome add-on.
Overall, Panda does a decent job of standing guard against malware, but there are other suites that do it better.
Panda Internet Security 2014
$70 (3 PCs, 1 Year), www.pandasecurity.com/
McAfee
Internet Security 2014
Turning over a new leaf
Minus a few missteps here and there, McAfee's been on the verge of breaking into the ranks of one of the top AV solutions. That may sound like malarkey to old-school PC users who have spent hours uninstalling bundled McAfee software on systems belonging to family and friends, but one of the advantages to running these roundups is we get to see how a program evolves over time. What we've witnessed is a transformation from a lumbering and lethargic AV into light-footed security. However, the level of protection hasn't been up to our standards, until now.
We threw potentially unwanted programs (PUPs), Trojans, drive-by downloads, and an assortment of other malware at McAfee. Unlike in years past, we couldn't sneak anything by McAfee's on-demand scanner. We checked with a few AV testing labs and are confident that our experience is the norm, not the exception.
That isn't to say that McAfee's perfect. Pop-ups alert you when something foul is detected, but McAfee does a poor job providing details on the threat. We'd be willing to overlook this, except McAfee makes it a little too easy to bypass its recommended course of action. In our opinion, security software should either be decisive and neutralize a rogue file, or give us enough information to make the proper choice ourselves.
McAfee's interface isn't sexy, though it is functional and tuned for touch. It's also a little slow to react at times, such as trying to cancel a scan. It doesn't affect the entire menu, but there are definitely instances of lag.
McAfee's interface won't win any beauty pageants, but it's mostly easy to navigate and friendly for touch.
There's quite a bit included in McAfee's security suite—a file shredder, network traffic monitor, vulnerability scanner, and miscellaneous tools to help justify the price tag. To the point, this is the best version of McAfee yet, though there's still room for improvement.
McAfee Internet Security 2014
$80 (3 PCs, 1 Year), home.mcafee.com
ESET
Smart Security
An effective antivirus for nerds and newbs alike
Sheldon is often seen playing on an Alienware laptop in The Big Bang Theory, and if he has antivirus software on that thing, it's probably ESET Smart Security. It's a nerd's paradise. You could spend an afternoon frolicking through the advanced settings and fine tuning ESET to your liking. On the flipside, there's nothing forcing you into the deep end—the main window offers access to the most commonly used functions.
Underneath it all is a scan engine that takes out malware with extreme prejudice. Our modest collection of foul files never stood a chance, and it didn't matter how many intentionally wrong turns we took on the web, ESET never stopped watching our six. Our experience jibes with the major testing labs—ESET collects VB100 award from Virus Bulletin like it has an addiction.
Like most other modern security software, there was only a negligible performance impact. File transfers took ever-so-slightly longer on our Windows 8 testbed; if you're rocking an older system, the performance hit might be exacerbated, but overall it's a fairly lean and efficient AV.
ESET includes anti-theft protection. With so many users going mobile these days, this could prove an invaluable tool. Once you report your device stolen, you can track its whereabouts, receive webcam pictures, and send a message to the screen.
Another feature that good-hearted geeks will appreciate is being able to send files to ESET. These can be malware samples that the scan engine missed, or false positives.
Savvy users will appreciate the wealth of submenus and options at their disposal.
We don't have a ton to complain about. The interface is due for an overhaul, there's no time-management option in the parental controls, and the anti-spam feature hasn't worked with Thunderbird since version 5—boo! These gripes don't detract from the overall package, though they do stand in the way of a Kick Ass award.
ESET Smart Security
$80 (3 PCs, 1 Year), www.eset.com
Webroot
SecureAnywhere Internet Security Plus
Reigns light and effective from the cloud
Take everything you know about antivirus protection and security suites, roll it into a ball, and flush it down the toilet. Done? Now, let us introduce you to Webroot, which very well might represent the future of security. Webroot works on the assumption that today's threats come from the Internet, so rather than install a bulky suite and maintain it with product updates and security patches, Webroot works most of its malware fighting mojo from the cloud.
There is a small program to install, which takes all of a few seconds. If you choose the custom option, you can have Webroot generate a random name for itself to thwart malware that might try to block known security programs—that's smart thinking.
Once installed, Webroot scans your system, both to look for obvious signs of malware and also to take inventory of what's installed. From then on, Webroot sits idly by, waiting for malware to make the first move. When it detects a file doing something nefarious, Webroot blocks it from making changes, or rolls back any changes that might have been made when you weren't connected to the Internet.
Don't let the local interface fool you, Webroot works its magic almost entirely from the cloud.
What sets Webroot apart from other cloud solutions is that its online infrastructure was purpose-built to be its backbone rather than exist to supplement local definition scans. This allows Webroot to take up very little space, use fewer resources, and still remain effective—it's essentially a bigger, more robust cloud.
Webroot took pole position in full system scan times, though it missed some dirty files that were later detected when we directed it to focus solely on those files. This is the trade-off—Webroot won't necessarily clean your system of infected files during an initial sweep, but there's a good chance it will catch them when activated.
As a security suite, Webroot lacks parental controls or spam protection, and its outbound firewall serves as a supplement to the built-in firewall in Windows. However, you do get a password manager based on Lastpass, a built-in system optimizer, and a file shredder via right-click context menu. By default, the shredder only bypasses the recycle bin. To truly obliterate a file, you'll need to change the Secure Erase level to medium (overwrites with three passes) or maximum (seven passes).
Webroot is a bit feature-poor for a security suite, but it's also the cheapest of the paid packages. With a 70-day money back guarantee, what's to lose?
Webroot SecureAnywhere Internet Security Plus
$60 (3 PCs, 1 Year), www.webroot.com
AVG
Antivirus Free 2014
Pro bono protection for the cost of a sales pitch
You don't buy bottled water, you think extended warranties are a waste of money, and you sure as hell aren't going to pay for security software. Fair enough, we won't begrudge you any of those choices, but if you opt to install AVG Free for antivirus protection, get ready for a series of sales pitches.
Whenever you have cause to fire up AVG's dashboard, you'll see a banner ad imploring you to give the full Internet security suite a 30 day test drive. There's an option to hide the banner, but it's only temporary—the next time you load the dashboard, it's there again. AVG also teases freeloaders with locked options that are only available to paid users, such as anti-spam controls and identity alerts. Hey, AVG's developers have to eat, right?
What you do get is above-average malware protection with a surprising amount of configuration options. If you opt for AVG, we recommend spending some time going through the settings to make sure everything aligns with your expectations. For instance, AVG will scan for potentially unwanted programs, but there's an additional option for enhanced scanning that isn't checked by default. When enabled, AVG goes a step further by analyzing legitimate apps that might be misused or contain unwanted add-ons like toolbars. And if you're using an older PC—say, from the XP era—you should enable the "thorough scanning" option to look for older exploits and software flaws that don't apply to modern systems.
AVG's dashboard is littered with options that you can only use when you upgrade to the full-fledged (paid) security suite.
AVG caught the majority of our malware samples, though not all of them. This is in line with what AV-Test.org experienced, which rated AVG's performance a 4.0 out of 6.0. Assuming you're not spending the majority of your time in the web's dark alleys, AVG should keep you safe, but there are better options.
AVG Antivirus Free 2014
free, free.avg.com
Avira
Free Antivirus
A blueprint for free security
To say that Avira is popular in the antivirus space is a gross understatement. According to Avira, over 200 million users around the world put their trust in its software. So should you, if you're looking for free security.
Of course, this isn't a popularity contest, though there are advantages to serving a large number of users. In this case, Avira has a large pool of users to draw information from regarding new and emerging threats, which are then stored in a database in the cloud. Unless you have the unlucky distinction of being the very first out of over 200 million users to stumble onto a brand-new strain of malware, there's a good chance that whatever evil lurks in the shadows will have already been cataloged.
This isn't just a theory of ours—Avira consistently scores high marks from third-party testing labs. In our own tests, Avira knocked nearly every harmful file unconscious, and in many cases it would follow up detection with a supplementary scan just to make sure no traces were left behind.
One thing Avira doesn't seem to do is skip over unchanged files during subsequent scans. Other AV programs use this technique to reduce scan times, and we're not sure why Avira doesn't.
Traversing Avira's menus feels a bit convoluted at first. If you spend enough time poking around, you'll feel better about your ability to drill down to an advanced option without any missteps, but who wants to spend time studying an AV software's layout? At least there's a fair amount to play with.
Don't be fooled by the firewall option in Avira—it's actually just hooking into the Windows firewall.
As with most freebie options, Avira lacks extra features like a two-way firewall, spam controls, and a game mode, which hushes the software when it detects you're playing a game. Still, this is our top pick for no-cost security.
Avira Free Antivirus
free, www.avira.com
Avast
Free Antivirus
Slightly new look, same reliable protection
Like Avira, Avast boasts over 200 million installations on planet Earth—that seems to be the magic number in free AV. That's to say Avast is no Johnny-come-lately to the PC-protection party, though it does sport a slightly freshened-up interface that's a bit more streamlined compared to last year's release. Weaving in and out of advanced settings is mostly straightforward and logical, though it's a bit odd that Avast buries the update option in the Settings menu.
Avast doesn't scan for potentially unwanted programs (PUPs) by default. Even worse, the option to turn it on lies several menus deep (Settings > Active Protection > File System Shield > Sensitivity). Given that malware often piggybacks on top of seemingly legitimate programs, Avast should at least give users the option of enabling PUP protection during installation.
Only one of our malware samples went undetected during a system sweep. Avast also did a good job blocking access to harmful websites, though we were successful in downloading an infected file. This doesn't concern us too much, considering how many sites and downloads we put these programs through, and for the most part, Avast does well in third-party testing, save for AV-Test.org, which notes a below-average score in detecting zero-day malware attacks.
While the free version of Avast doesn't include amenities like a firewall, spam protection, and parental controls, you do get a rescue media option (USB or CD) along with a software updater that alerts you to outdated programs. This is a thoughtful inclusion, as black-hat hackers are always on the hunt for security holes to sneak malware through.
Avast recognizes the importance of keeping third-party programs up to date and will let you know which ones have an upgrade available.
Most of Avast's attempts to upsell security are confined to the Store menu, which is where you'll find add-ons and upgrades available for purchase. We like this tactful approach, as well as Avast in general.
Avast Free Antivirus
free, www.avast.com
What's the Deal with Adware?
If you've ever been called upon by a family member or friend to clean up their PC, then you've undoubtedly seen what a horrific mess bundled adware can have on a system. Toolbars and hijacked searches are common aftereffects of what happens when a person doesn't pay attention to the fine print, and so are random pop-ups and other types of cruft. They're not only annoying, but they can impact performance, too. With that being the case, have you ever wondered why many antivirus programs leave adware alone?
Unfortunately, the onus here falls on the end user. In many cases, they agreed to be bombarded with advertising when they installed a particular program. One way a developer can offer his or her program for free is by bundling in adware, and usually there's an option to not install the supplementary software. However, it's not always obvious—we've trained ourselves to skip over fine print and boring legalese. Still, it would be unscrupulous for AV programs to remove adware that a user agreed to install in exchange for a free application. It's unfortunate, but it's the way it is.
Not all types of adware play by the rules, and perhaps you never agreed to install a toolbar, yet there it is. While your AV software might not detect it, there are other security programs that will. It's a good idea to scan your system every so often with a program like Malwarebytes (Free, www.malwarebytes.org), which won't interfere with your AV.
Avoid Drive-By Downloads
Careful where you click on the web or you could get run over by a drive-by download. These are the web's equivalent of a hit-and-run, only they're entirely intentional and always intended to do you harm. The scary thing about drive-by downloads is that they come at you when you least expect it. You might have a favorite website that you visit every morning, but if that site is compromised by a hacker, that innocent looking ad banner or link to an article could serve up malware and you'd never know it.
It's best to err on the side of caution. Installing antivirus software goes along with smart computing habits as your top two lines of defense, but there are other steps you can take. One of the biggest is to make sure your browser plug-ins are all up to date. An easy way to do this is to use the BrowserCheck tool by Qualys (Free, http://bit.ly/MPC_Qualys). This handy tool will analyze your browsers and plugins, and then offer to fix any out-of-date software it finds.
We also recommend uninstalling or disabling Java if you don't have a specific need for it. There are still many applications that require Java, so this isn't an option for everyone, but unless you're one of those folks, this is just another potential path for malware to enter your system. The same goes for Flash. Firefox users can also install the NoScript add-on, which blocks JavaScript, Java, Flash, Silverlight, and other active content by default.
AV FEATURES
| Bitdefender | Kaspersky | Norton | Panda | McAfee | Webroot | ESET | AVG | Avira | Avast |
| Email scanning | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y |
| IM scanning | Y | Y | Y | N | Y | Y | Y | N | N | N |
| Virtual Keyboard | N | Y | N | Y | N | N | N | N | N | N |
| Facebook scanning | Y | N | Y | N | N | N | Y | Y | Y | N |
| Heuristics | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y |
| Firewall | Y | N | Y | Y | Y | Y | Y | N | N | N |
| Spam controls | Y | Y | Y | Y | Y | N | Y | N | N | N |
| Parental Controls | Y | Y | Y | Y | Y | N | Y | N | N | N |
| File Shredder | Y | N | N | N | Y | N | N | N | N | N |
AV PERFORMANCE
| Bitdefender | Kaspersky | Norton | Panda | McAfee | Webroot | ESET | AVG | Avira | Avast |
| Scan 1 (min:sec) | 3:42 | 9:00 | 6:40 | 13:55 | 9:45 | 0:42 | 3:48 | 4:33 | 7:53 | 6:20 |
| Scan 2 (min:sec) | 0:46 | 1:01 | 2:15 | 12:30 | 6:40 | 0:15 | 0:26 | 0:38 | 7:48 | 5:09 |
| PCMark 8 | 3,444 | 3,427 | 3,446 | 3,442 | 3,422 | 3,439 | 3,447 | 3,437 | 3,426 | 3443 |
| Peacekeeper | 2,199 | 2,199 | 2,206 | 2,171 | 2,218 | 2,162 | 2,214 | 2,209 | 2,210 | 2,210 |
| Boot (seconds added) | +3 | +2 | +0 | +3 | +2 | +3 | +1.5 | +2 | +1 | +2 |
| 3GB File Transfer (seconds added) | +0 | +0 | +0 | +3 | +0 | +0 | +1 | +1 | +1 | +1 |
Our test machine has an Intel 2.8GHz Core i7-930, Asus P6X58D Premium, 4GB Corsair DDR3/1333, Radeon HD 5850, 120GB Kingston SSDNow V300 (OS), Western Digital Red 3TB 7,200rpm (storage), and Windows 8.1 Enterprise
Slim and sexy, but is it fast enough?
Showcasing the sexiest, most photogenic game screenshots this side of the Internet
A sharpened Blade
Two new GPUs for laptops
AMD R300 Series is around the corner
