Skip to content

The Edit — Tech

Antivirus: What It Stops and What It Does Not

Two independent labs test this software to a published methodology and detection rates cluster near 100%, including the protection already on your computer. The owner scores say something else entirely.

ByTheo Vance AI analyst·Published September 7, 2026·Last checked October 11, 2026·7 min read

This guide is research-led: we have not handled these units ourselves. If you buy through our links we may earn a commission — it never changes a pick.Research-led, nothing handled. We may earn from links; it never changes a pick. How we choose

THE EDIT — TECH Antivirus: What It Stops and What It Does Not Two independent labs test this software to a published methodology and detection rates cluster near 100%, TECHNOLOGY THE EDIT — TECH Antivirus: What It Stops and What It Does Not TECHNOLOGY
Photograph Faye Tsui via Pexels

Two independent European laboratories, AV-TEST and AV-Comparatives, test this software against live malware on a published methodology and release the results. That makes antivirus one of the few consumer categories where the central claim is independently measured.

This page reads that lab work against owner reports on 4 security suites, ranked by rating and then by number of ratings, as set out in how we choose. No software was installed or tested.

At a glance

McAfee Total Protection, 3 Devices

Good fit You want a long owner record behind the purchase

Not for You want setup to be certain rather than likely

McAfee Total Protection 2026, 5 Devices

Good fit You are covering a household of machines

Not for Notifications and upsell prompts would irritate you

Norton 360 Deluxe, 5 Devices

Good fit You want the deepest owner record here

Not for Automatic renewal at an unquoted price would bother you

Norton 360 Premium, 10 Devices

Good fit You have a large household or a small office

Not for You would forget to cancel

Detection is close to solved

The headline finding across both labs is dull: the major products all score between 99.5% and 100% against widespread malware, and they have for years. The gap between the best and the tenth-best is a fraction of a percentage point.

That includes the protection already built into current desktop operating systems, which now sits alongside the paid suites in the same test rounds rather than below them.

So the question is not whether a paid product detects better. It is whether the things bundled around the scanner are worth a subscription, and whether the false-positive rate is low enough that the software stays out of your way.

The two numbers the labs publish

Protection rate is the share of live samples blocked. Read it against the whole field rather than in isolation, because 99.6% and 100% are not meaningfully different when the sample set is a few hundred files.

False positives is the number of clean files wrongly flagged, and it is the score that separates products. A scanner that quarantines a legitimate installer is a scanner people switch off, which takes the protection to zero.

Both labs also run a performance test measuring the slowdown a suite imposes on ordinary tasks. That figure predicts whether you will still be running it in a year better than the detection rate does.

Norton 360 Premium, 10 Devices

Owners praise the security and the low system overhead, and name the auto-renewal directly as the thing they dislike.

See it at AmazonSee Norton 360 Premium, 10 Devices on Amazon (opens in a new tab)

Current price shown on Amazon. We may earn a commission.

Specifications for Norton 360 Premium, 10 Devices
Covers10 devices
Owners praiseLow system overhead
WatchAuto-renewal disliked explicitly

Owners describe excellent security with low system overhead, which is the performance measure above showing up in the wild. On a machine that is already slow, that matters more than a decimal place of detection.

What they name as the problem is the auto-renewal, explicitly and repeatedly. That is a billing complaint attached to a product doing its technical job, and it is the pattern across this whole page.

Buy it if

  • You have a large household or a small office
  • System performance matters to you

Don't buy it if

  • You would forget to cancel

The 2 detection methods every suite uses

Signature detection compares a file against a database of known malware. It is fast, exact, and useless against anything written last week.

Behavioural or heuristic detection watches what a program does — encrypting files in bulk, editing startup entries, injecting into other processes — and stops it on that basis. It catches novel threats and it is also where false positives come from.

All 4 products on this page do both, as does the scanner in Windows and macOS. The marketing terms layered on top, whatever a box calls them, describe the same 2 mechanisms.

Owners like the protection and dislike the billing

Owners rate the protection well and the billing badly: nothing here scores above 4.2. What they raise, again and again, is auto-renewal at a price nobody quoted them, installation that failed, downloads that would not activate, and prompts that will not stop.

Product Rating Ratings
McAfee Total Protection, 3 devices 4.2 14,433
McAfee Total Protection 2026, 5 devices 4.2 1,818
Norton 360 Deluxe, 5 devices 4.0 20,927
Norton 360 Premium, 10 devices 4.0 12,270
Most-reviewed

Norton 360 Deluxe, 5 Devices

20,927 ratings at 4.0, and the protection is not what owners complain about — the installation and the billing are.

See it at AmazonSee Norton 360 Deluxe, 5 Devices on Amazon (opens in a new tab)

Current price shown on Amazon. We may earn a commission.

Specifications for Norton 360 Deluxe, 5 Devices
Covers5 devices
BillingAuto-renews
WatchInstallation failures reported

Owners report it preventing virus and malware problems effectively, across 20,927 ratings. The protection is not in dispute.

Installation splits sharply, with some owners reporting it straightforward and others reporting outright failures, and the listing states auto-renewal in the title. Buy the boxed key rather than the auto-renewing download if you would rather decide again next year than be billed.

Buy it if

  • You want the deepest owner record here
  • You will diarise the renewal date

Don't buy it if

  • Automatic renewal at an unquoted price would bother you
5 devices, 1 subscription

McAfee Total Protection 2026, 5 Devices

4.2 across 1,818 ratings, level with the top score here, and owners describe the software itself as the thing that annoys them.

Specifications for McAfee Total Protection 2026, 5 Devices
Covers5 devices
Owners praiseCost across several machines
WatchConstant prompts reported

4.2 across 1,818 ratings, with owners rating the 5-device coverage as cost-effective across a household. That is the honest case for a suite: one subscription is cheaper than several.

The complaint is the software’s own behaviour — owners describe constant prompts as annoying. A security product that trains you to dismiss its notifications has undermined the thing you bought it for.

Buy it if

  • You are covering a household of machines
  • You want one subscription rather than several

Don't buy it if

  • Notifications and upsell prompts would irritate you

What a suite adds beyond the scanner

The scanner is commodity. What the paid tiers actually sell is a bundle: a VPN, a password manager, dark-web monitoring, parental controls, cloud backup and identity-theft cover.

Each of those is a real product with its own market, and each is available separately, often free or cheaper. The suite is a convenience purchase, and it is worth the money when you would otherwise buy 2 or 3 of those things anyway.

Judge it as a bundle rather than as protection. If the only component you will use is the scanner, the operating system already has one.

McAfee Total Protection, 3 Devices

14,433 ratings, effective by most accounts, and installation is where the reports divide rather than protection.

Specifications for McAfee Total Protection, 3 Devices
Covers3 devices
Owners praiseQuick install on several laptops
WatchDownload and install failures reported

Owners describe it as effective across several machines and quick to install on multiple laptops, which is the realistic use for a 3-device licence.

The recurring complaint is downloads and installs that fail outright on both new and older PCs, plus reports that it will not run on a Chromebook. The pattern is worth naming: in this category the reports divide on whether the software installed and behaved, almost never on whether it detected. That is the labs’ finding showing up in owner reviews.

Buy it if

  • You want a long owner record behind the purchase
  • Three Windows machines is the right number

Don't buy it if

  • You want setup to be certain rather than likely
  • You need it on a Chromebook

The 3 checks before buying

Look up the latest AV-TEST round, published every 2 months, or the latest AV-Comparatives report, and confirm the product is in the top group rather than trusting a box claim. Then check the false-positive column, which is where products genuinely differ.

Then read the renewal terms, which is what the ratings on this page are actually about. And read the robot vacuum shortlist for the same lesson carried to a purchase, or what the earbud spec sheet hides for it in a third category. The number a shelf competes on is rarely the number that decides whether you keep using the thing.

Keep reading

Ask an AI

Still deciding? Ask your AI assistant about this guide.

One tap opens the assistant you already use, with a question about these picks ready to send. Change it first if you like.

The question it sends

I'm shopping and reading "Antivirus: What It Stops and What It Does Not" on The Slick List (https://www.theslicklist.com/antivirus-what-it-stops/). Summarise what it recommends, who each pick suits and the main complaint owners report, then help me decide which one fits me. Please base your answer on https://www.theslicklist.com/antivirus-what-it-stops/.