The five things that actually matter
Marketing pages love long feature lists. In practice, only a handful of things decide whether a security program is worth running:
Does it recognize threats — both known malware and brand-new variants it has never seen before? A program that only matches a list of known viruses will always be a step behind.
Does it stop the bad thing before it runs? Blocking a dangerous download or a malicious website is far better than cleaning up after the fact.
When something does get in, can it fully remove it, including the leftovers — browser hijacks, scheduled tasks, startup entries — or does it just quarantine the obvious file?
How much slower is the computer with it installed? Startup time, file copying, web browsing. Protection you disable because it’s painful isn’t protection at all.
Can a normal person understand the alerts? Does it constantly push upsells, "registry cleaners" or scary warnings designed to sell you something? That matters a lot to me.
How the testing is done
I don’t test security software on a computer anybody depends on, and neither should you. Here’s the process:
- Start from a clean baseline.
A fresh Windows install on an isolated test machine, with startup time, boot-to-desktop responsiveness and a few file-copy tasks measured before any security software is installed.
- Install one product at a time.
Two antivirus programs on one machine fight each other and skew everything. One product, one clean image, then wipe and repeat.
- Measure the slowdown.
The same tasks are run again. If startup, browsing or everyday file work takes a noticeable hit, that’s a real cost the user pays every single day.
- Test prevention on an isolated network.
Known-bad download and phishing-style test sites are used on a sandboxed machine that’s cut off from everything else. Does the product block at the browser, at download, or not at all?
- Test cleanup on an already-infected image.
This is the part most reviews skip. I install the product onto a machine that is already infected and see how much it can actually repair — and whether the browser, search settings and startup list come back clean.
- Live with it for a while.
How many pop-ups per week? Do updates install quietly? Does it falsely flag harmless programs? Over a couple of weeks the annoying ones reveal themselves.
- Compare against independent lab results.
Organizations like AV-TEST and AV-Comparatives run large-scale detection tests every month. I cross-check my own findings against their current published results rather than trusting any single opinion — mine included.
Why this matters: antivirus rankings change. A product that led last year can slip, and a quiet one can improve. Judge by the current test results and by how the program behaves on your machine, not by the brand name you remember.
The kinds of protection worth considering
Rather than pushing one brand, here’s how I think about the categories, because the right answer depends on how you use your computer.
Microsoft Defender is included with Windows, updates automatically and costs nothing. For a careful user with an up-to-date system, a good browser and regular backups, it covers the basics well — and it has no upsell pop-ups.
Worth it when you want extras in one place: web and phishing filtering, ransomware protection for your documents folder, firewall management, and support you can call. Best for busy households and small businesses.
A second-opinion on-demand scanner is excellent for cleaning up adware, browser hijacks and pop-ups that a traditional antivirus may wave through. Great as a cleanup tool alongside your main protection.
Usually fine at scanning, but often stripped of the web protection that stops trouble before it starts, and heavy on reminders to upgrade. Read what’s actually included before relying on one.
What I look for before recommending anything
- Real-time protection, not just manual scans you have to remember to run.
- Web and download filtering, since most infections today arrive through a browser.
- Ransomware protection for your documents and photos folders.
- Automatic, quiet updates — definitions that are days old are a real gap.
- Clear pricing and easy cancellation, with no auto-renew surprises a year later.
- Light footprint on older machines, which is where a heavy suite does the most damage.
Software to steer clear of
A fair amount of the cleanup work I do is removing the "security" software itself. Warning signs:
No antivirus replaces the basics
The best-scoring product in the world still can’t stop you from handing over a password. The habits around the software matter just as much:
- Keep Windows and your browser updated — many infections use holes that were patched months ago.
- Use strong, unique passwords and turn on two-factor authentication on email and banking.
- Back up your important files, so ransomware is an inconvenience instead of a disaster.
- Only trust contacts and callers you actually know, and never let an unexpected caller into your computer.
Think something got through?
If you’re seeing pop-ups, a changed homepage, new toolbars, programs you didn’t install, or a computer that suddenly crawls, it’s worth having someone look at it properly. Virus and malware cleanup is covered by the Mark’s Computer Repair Single Repair service, and we’ll also set up sensible protection afterward so it doesn’t happen again.
Pop-ups, viruses or a slow PC?
Call Mark’s Computer Repair — remote help is available 24/7.
Want advice on protecting several computers at a business? Contact David.
← Back to all tech tips