Norton 360 Deluxe is our top pick for antivirus. It's a very comprehensive security suite with a simple app that offers strong antivirus protection and protection against online threats, as well as a whole boatload of features—parental controls, storage for cloud backups, a password manager, VPN, and PC utilities. We like it for how extensive yet affordable the service is—you'll be hard-pressed to find a comparable rival.

Which antivirus should you choose? While you have many options, two stand out from the rest. Bitdefender Antivirus Plus holds perfect and near-perfect scores from three independent antivirus testing labs, with more features than some security suites. Norton AntiVirus Plus likewise offers many suite-level features, and it gets excellent scores from all five testing labs we follow. We've named these two our Editors' Choice winners for commercial antivirus, but they're not the only antivirus apps worth consideration. Read the reviews of our top-rated programs, then make your own decision.

Editors’ Note: Given that the US government has banned new sales of Kaspersky security products, we no longer recommend them.

Antivirus utilities distinguish themselves by going beyond the basics of on-demand scanning and real-time malware protection. Some rate URLs you visit or appear in search results using a red-yellow-green color-coding system. Some actively block processes on your system from connecting with known malware-hosting URLs or fraudulent (phishing) pages.

All software has flaws, and sometimes these flaws can compromise your security. Prudent users keep Windows and all programs up to date, patching those flaws as soon as possible. The vulnerability scan offered by some antivirus apps can verify that all necessary patches are present and even apply any that are missing.

Spyware comes in many forms, from hidden programs that log every keystroke to Trojans masquerading as legitimate programs while secretly mining your data. Any antivirus should handle spyware, along with all other types of malware; however, some include specialized components dedicated to spyware protection.

You expect an antivirus to identify and eliminate malicious programs, while leaving legitimate programs alone. What about unknowns, programs your AV can't identify as good or bad? Behavior-based detection can, in theory, protect you against malware, so new researchers have never encountered it. However, this isn't always an unmixed blessing. It's not uncommon for behavioral detection systems to flag many innocuous behaviors performed by legitimate programs.

Allowlisting is another approach to the problem of unknown programs. This type of security system only allows known good programs to run; unknowns are banned. This mode may not be suitable for all situations, but it can be useful in certain cases. Sandboxing allows unknown programs to run, but it isolates them from full access to your system, preventing them from causing permanent harm. These various added layers serve to enhance your protection against malware.