Antivirus test on Windows 10 64-bit

The German antivirus laboratory AV-TEST has tested 20 Internet Security packages and free Microsoft Windows Defender 4.8. The test platform was the latest Windows 10 64-bit, which, despite many controversies about the privacy of users, gains an ever-larger slice of operating system cake.


The AV-Test is divided into three stages. The first is to check the effectiveness of protection, the second performance of the antivirus agent, and the third its "usability", which consists of a number of blocked secure sites and installers of various software.

However, the most important category of research is protection, because its ability to block and remove malware affects "buy or not buy" and largely determines the choice of an anti-virus application. AV-TEST simulates a scenario of protection against online threats, including 0-day malware, email attachments, malicious websites and malicious files that have been transferred from mass storage.

Very good effectiveness of the program can not be paid for using too much hardware resources. AV-TEST, when evaluating the overall performance of anti-viruses, takes into account such factors as: downloading files from the network, copying files "to and from" the local network, installation time of programs, time of running applications such as Word or Excel. In turn, the usability of programs is checked on the basis of the number of false positive generated.



To test the actual effectiveness and detectability of antiviruses, AV-TEST divided the test into two parts:

1. In the REAL-WORLD study programs to obtain certificates had to meet the requirements for detecting new, unknown malware samples. 142 0-day samples were used for the test.

2. The second stage of the study consisted of static detection - the programs were designed to scan 20,754 commonly known threats. In this study, the detection of threats is assessed only on the basis of static protection mechanisms. None of the threats are run.


Even the most efficient antivirus solution needs a certain amount of CPU and RAM resources to operate. AV-TEST has checked the performance of programs by subjecting them to an attempt to delay opening websites, downloading files, installing and running programs, and copying data.

Avira, Bitdefender, Kaspersky Lab, Symantec, AhnLab, Comodo, F-Secure and McAfee products proved to be the least aggravating anti-viruses.


The less the antivirus "asked questions", the better it fell out in the test. Also very good protection, but occupied with a large number of false alarms is unacceptable. AV-TEST, to check the impact of security software on the usability of the entire computer, checked the anti-virus applications for false alarms.

1. In the first stage, false alarms were checked on the basis of the number of trusted websites blocked by the anti-virus classified as dangerous. For this purpose, 500 URLs were used.

2. In the second stage, the programs were designed to scan 1 468 321 secure files. The more viruses counted against the virus by the antivirus program, the worse for the tested product.

3. The third step was to count preventative warnings about certain actions when installing and running 41 samples of virus-free software.

4. The fourth stage consisted in counting messages that during the installation and launch of the application from point 3. informed testers about blocking secure and virus-free software.

The full report can be found at this link.

Learn more about our offer

If you sell security solutions, are a distributor, authorized partner or developer and would like to share your portfolio with a group of potential customers, advertise an event, software, hardware or other services on AVLab - simply write to us. Or maybe you had to deal with ransomware? We can also help you decrypt your files.
Read more

We use Google Cloud Translation and Gengo API’s to translate articles with exception of our comparative tests.