Best Free Antivirus Software

  Read this article in Spanish
  Read this article in Chinese


To begin with let me say this: there is no best antivirus out there. Why do I say this? Any product that you take will behave differently against various virus samples since the AV engines and other components incorporated in them are of different technologies.

While one product might have higher detection ratio, another might have better malicious URL blocking or virtualization techniques, yet another might have lesser impact on system performance and so on.

Read more about Antivirus Engine and other related details at the end of this article.


Rated Products

Kaspersky Free Antivirus/ Kaspersky Security Cloud  

The paid security giant forays into free category and outsmarts its rivals

Our Rating: 
License: Free (Limited features)
  • Similar signatures & cloud features as its paid counterparts
  • Performance impact is decent on higher end systems
  • Strong behavioral blocker
  • Attractive GUI with no ads
  • Top-notch detection and always up-to-date
  • Thorough malware removal and disinfection process
  • Privacy policy (complies with GDPR)
  • Default settings cover most users
  • Bundles with Kaspersky VPN (can be uninstalled)
  • Fairly good web protection
  • Powerful exclusion settings (even for specific modules)
  • Extensive scan logs
  • Protection settings are locked with presets in Kaspersky Free Antivirus (KFA) [is available in Kaspersky Security Cloud]
  • Long but thorough system scans
  • Performance hit becomes worse on lower end systems
  • Slow update installation
Read full review...

Avast Free Antivirus  

The only antivirus with a fully customizable installer and selection of user preference components.

Our Rating: 
License: Free (Limited features)
  • Extremely light on the system with a modern and clean UI
  • The only antivirus with a fully customizable installer, selection of user preference components
  • Works best in hardened or lock-down mode, which blocks all unknown programs (medium-expert users only)
  • Top notch detection capability, many secondary components to offer variety to a wholesome software
  • Excellent malicious URL blocking, network protection, outdated software checking, integrated password manager, and comes with a rescue disk.
  • Deep screen technology that includes Sandbox and Safe machine components for protection
  • Bloated default setup, some ads and pop'ups
  • Account creation for further protection after a month
  • Lack of an anti-ransomware module, and Deepscreen disabled by default
  • Cloud reputation, Malware signatures and HIPS module needs improvement
  • Offers Google Chrome and various bloated secondary components during install [Choose custom install]
Read full review...

Comodo Internet Security Premium  

Provides a multi-layered protection scheme with HIPS, sandbox, antivirus and firewall.

Our Rating: 
License: Free (Limited features)
  • Feature-rich with lots of options for customization along with setting tolerance against prompts
  • Tweaked settings gives the best 0-day protection among the pack
  • Multi-layered protection scheme with HIPS, Sandbox, Antivirus and Firewall
  • Industry grade firewall with options for learning and behavioural blocker
  • Low on resources with various graphical skins available and a clean user interface
  • Painful for beginners to use it, not very newbie friendly 
  • Av-module is a bit weak especially the signature based detection
  • Auto-sandboxing happens for various legitimate files, troubles with FPS games
  • Too many tweaks needed for better protection
  • Buggy software and updates are released slow.
  • Chromodo browser, Yahoo search engine, custom DNS and Geek Buddy offered during default install. [Click customize installation during install]
Read full review...

Qihoo 360 Total Security  

This free antivirus is better than most commercial ones.

Our Rating: 
License: Free
  • Totally free, light on resources, extremely fast scan times and pre-configuration protection modes
  • Smooth running installer with no adware, pleasing UI and comes with many themes
  • Fast updates/fixes and excellent customer service with immediate replies
  • Great signatures with multiple engines and in-house cloud protection
  • Web protection addon, browsing locking, webcam, sandbox and usb protection modules
  • Online shopping protection, malicious URL protection and network threat blocking
  • Includes Glasswire Firewall and Windows patch-up components
  • Great detection rates, with very high zero day protection
  • Speedup and clean-up tools might not be for everyone (not present in Essentials version)
  • Bitdefender or Avira engines not enabled by default
  • Might encounter few false positives
  • PUP [Potentially Unwanted Programs] detection needs to improve
Read full review...

Avira Free Antivirus  

A free antivirus with high quality signatures, very fast updates and less false positives.

Our Rating: 
License: Free (Private/Educational use)
  • Pretty light on the system and runs smooth without system slow-downs
  • Clean ad-free GUI, Ad-free installer, No pop-ups or ads
  • High quality signatures, very fast updates, excellent detection on non-zero day threats
  • Deep file scans with very less false positives
  • Avira Protection Cloud makes for an excellent cloud engine
  • Browser safety Add-ons available for major browsers
  • Zero day protection (heuristic & behavioural shield) is very weak. 
  • Ineffective Browser launcher which is a memory hog (can be uninstalled)
  • Painful removal for detected files. Repeated scans from Luke Filewalker increases CPU & RAM usage. 
  • Multiple file exceptions needs to be added (real-time and on-demand)
  • No firewall/sandboxing/web shield technologies
Read full review...

Panda Free Antivirus  

Gives you antivirus protection with low memory and CPU usage, and collective intelligence cloud security.

Our Rating: 
License: Free (Private/Educational use)
  • Low memory & CPU usage thanks to cloud protection
  • Tiled UI with customizable interface and nicely rendered Settings interface
  • Collective intelligence cloud security - Downloading virus definitions is history
  • Good detection rates and behavioural analysis program
  • Fairly good web protection and hardware resource handling
  • Dependant on internet connection leading to weaker offline protection
  • Slow scanning speed, no fingerprinting (successive re-testing same files) and at times issues with virus removal
  • Not really light, performance impact in web browsing, installation and copying
  • Certain false positives despite the information available at cloud
  • Watch out for Panda security toolbar during install
Read full review...

Honorable Mention


Related Products and Links

How to make an antivirus engine

Other Articles By Chiron

Related Free Antivirus Software Articles

Related Security Articles


Antivirus Engine

It is used for Real Time malware protection of files and is the core component to scan data on your PC for detecting and removing malware from hard disk, memory, boot sectors, network drives, removable disks, or from external network traffic (internet).

  • How does an antivirus detect malware:

Firstly you got the signature-based detection which contains an offline database of known patterns of malware downloaded from the internet which can identify specific malware codes or family of malware. Then you have heuristic based detection that identifies pieces of code that are unlikely to be found in legitimate programs and hence is prone to false positives depending on the sensitivity of heuristics. Virtualization and sandboxing unpacks or executes unknown programs in an isolated secure environment so that their behaviour can be analysed and scanned using the antivirus engine. The latest one is cloud based detection that requires a reliable internet connection and sends the suspicious scanned file over the internet and the analysis is done by the vendors' machine running the cloud engine.

  • Scanning for viruses:

Most antiviruses include these basic scan types: On-demand scan/manual scan is initiated by the user from right click context menu or from within the software. On-access scan is initiated when the resource is being accessed like running an executable, copying files from external drives etc. Scheduled scan periodically ensures that the system is free from malware by setting the time and frequency for scanning. Startup scan/quick scan checks most important locations like running processes, startup items, system memory and services, boot sectors and so on.

To be Continued in the next update....... Firewall, Proactive protection, Web protection components and more.



This software category is maintained by volunteer editor George.J. Registered members can contact the editor with any comments or questions they might have by clicking here.

Back to the top of the article.


Please rate this article: 

Your rating: None
Average: 4.3 (2219 votes)


I agree with your findings although with an i5 and 8G in my dual booted desktop I'm not too bothered about resource use for anything. Unfortunately, 360IS is being discontinued in favor of 360TS so I'd rather use something that is being fully supported. MC - Site Manager.
360IS isn't discontinued. It just had an update today :D It's just that they are concentrating more on the TS version.
Not yet it's not, but their plan is for TS to replace 360IS, although they haven't said when. MC - Site Manager.
Honestly performance matters to me. Here's my findings 360TS is much heavier on the system than IS version. Idle Memory Usage 360TS - >150MB RAM 360IS - Scanning Memory Usage 360TS - 320MB RAM , high CPU usage touching upto 95% at times, Disk Usage is also very high 360IS -

Please consider Qihoo 360 internet security:

Very well reviews product in

Thanks for doing this.


Am back to using Qihoo 360 IS, and it's been excellent. Excellent independent lab test results, very light on resources and clean installer (which is not the case with most free antiviruses). The Total security version is too much for me, as it also includes Avira engine excluding the BitDefender engine, which is not needed for me. But overall, a perfect suite. Moreover, it's good to see that Avira is offering a clean installer, which was not the case in the past. And also it's lab results are among the best. Had to switch from Panda as it was slowing down my system to a crawl :(
Update: It seems that the company has switched from 360 Internet Security (IS) and is favoring the Total Security (TS) version, as the last IS version dates back to January. So far 360 Total Security has been amazing for me. Works great as an antivirus and as a total security suite. Great performance, high detection, better zero day expolits (registry, files & system protection), keylogger detections, support and frequent updates, makes it awesome. By the way am using only the BitDefender engine, but even with Avira engine enabled it still seems very light. But I don't wanna go around and update Avira engine, so not using it.
Qihoo is not a bad choice at all. I'm also happy to hear it's light on your system. From what I have heard Panda is generally light as well. However, the heaviness of an AV is always, to an extent, system specific. Thus, you may find that when you get a new computer it is Panda that is lighter and Qihoo which is heavier. Thank you.
Honestly I expected Panda to be lightweight considering it being cloud antivirus. But the results just mirrored the lab tests at AV-Test with Panda rated lowest in performance, and lower than other Free antiviruses at AV-Comparatives for performance. But like you said, it also depends from system to system.
I will be considering them for my next major revision. Thanks.

It has been a long time since someone suggested Kingsoft Antivirus 2012 to be taken into consideration as possible antivirus solution. (see: and (

Few months after that there was a quite interesting discussion about the possibility to run Kingsoft Antivirus 2012 alongside other AV without conflicts. This discussion did not end very well meaning there was no clear conclusion to the matter. (see:

I come back here today with Kingsoft Antivirus 2012 (Cheetah) SP5.7 ( because i have been testing it for a while alongside KIS2013 on a pc with Win XP and on a pc with Win 7 64. I can tell you that i am quite impressed. No conflicts or compatibility problems so far. It is a cloud based antivirus, very light, with useful features, ability to fix vulnerabilities, USB defense function and it claims to be "Perfectly Working with Other Antivirus, Provides Outstanding Protection to End Users.". Although the software itself doesn't update frequently, the virus libraries do.
An interesting fact is that the company that makes the software is Chinese and apparently is no other than the guys from Cheetah Mobile that make known apps like Clean Master, Battery Doctor and CM Security for Android.

I just thought maybe we should give this one, another chance.

[Moderator's note: Link to non-English site edited out. Not allowed as per site rules.]

Thanks for pointing this out. I will look into Kingsoft for the next update.

I've tried Comodo Antivirus and Avast and could not get either of them to install on XP SP3. Comodo was the worst. Three times I got to the 71% point (it also stops and reboots your computer at the 43% and 51% marks) and it told me that it failed to install and to install it manually, but how in the hell do I do that?

Then the 4th time it told me it was installed, but it wasn't. The only thing it installed was it's geekbuddy software, which apparently is the only help available for the free version. I have to say, both Comodo and Geek Buddy are rude and arrogant and want nothing to do with people who install the free version.

I'm now about to try Panda's Antivirus. One of these HAS to work, no?

I'm sorry to hear about this. It sounds to me like there may be an issue with your computer. Perhaps another program is actively interfering, there is some sort of corruption, or remnants from a previously removed software are interfering in some way. If you make a topic for this in the forum, and send me a link to it, I can try to help.

FYI, I just visited the Comodo site using the link provided in the article. Download page states that Comodo free AV is for "Operating System: Windows 8, Windows 7, Vista", but nothing about WinXP. So I would not put it down to a computer problem - it's the second time this week I've run into this situation (I have a laptop and desktop w/XP, a desktop w/8.1). I'm sure that this will increasingly be the case, and wonder how many of the other AVs listed in the article no longer support XP. (No disrespect meant to the author - things change quickly.)

Thank you very much for pointing this out to me, and I very much do encourage that any reader who notices an issue brings it to my attention. I do keep track of all issues reported, and, if possible, these will be addressed as soon as possible. For this situation, I have edited the Quick Selection part to now explain this situation. There is an issue where there are significant limitations to Windows XP x64. These are such that if you are running the 64 bit edition I would advise that you use a different AV instead. However, Windows XP x32 should work fine. Please let me know if this answers your question, or if you have noticed any other issues. Anything you can bring to my attention would be appreciated. Thank you.

I guess you've been a bit unlucky - I've run CIS free for two or three years now with very few problems, although I do always install onto a clean system.

I've not tried GeekBuddy but the Comodo forums can be helpful.

We encounter these issues all the time with a variety of products and they are always local, due mostly to corrupt system files or the incomplete removal of other security software. MC - Site Manager.

avast FREE ANTIVIRUS now comes with OpenCandy.

"OpenCandy is integrated into SoftwareUpdater since a couple of months. We use it to offer additional software to our customers in avast Free under some conditions. It helps us paying for the traffic caused by Software Updater in Avast Free." (June 2014)

Thank you for pointing this out to me. I have now added a warning to the article.

Your warning: "Take care to avoid the default inclusion of the Chrome browser and OpenCandy during the install process by using the custom install option" (accessed 2014-08-24). That has been bothering me. :)

It would be very unusual to be given the option to reject OpenCandy. What you can reject are the downloads suggested by OpenCandy, but those come only AFTER OpenCandy itself has been installed, assigned you a permanent identifier, snooped through your stuff, phoned home info about your computer, your software, your geolocation, etc. It then selects downloads based on that info and on its previous interactions with you.

Last I checked, the user could avoid OpenCandy by not including the Software Updater component when installing avast or by removing it later. Note that Software Updater is not the avast updater.

the other thing: The OpenCandy offers are not made, or not only made, during the installation of avast. They come when the Software Updater functions, as long as it is installed.

According to Open Candy's own information, the OC component itself installs nothing on your system unless you accept one of the bundled offers. I've checked this for myself and it's true.

What happens is that when you run an installer that includes OC, the installer runs a dll which activates the bundled offers.

If you refuse all the offers then the dll is terminated and deleted after the original installer completes and nothing is left behind. I've also tested this for myself.

However, if you accept any of the offers then OC will install an auto-updater along with whatever offer you accepted.

The OC dll will "phone home" anyway, unless you block it, with the following information;

"A. Operating system version and language, country location and timezone of the computer running the installer, and the language of the developer’s installer
B. That the developer’s installer was initiated, and whether it was completed or canceled
C. Whether any third-party recommendations were made and if so, whether they were accepted or declined
D. If a third-party recommendation was accepted, whether the recommended app’s installer has been downloaded and the installer initiated
E. That the recommended third-party installer was initiated, and whether it was completed or canceled."

Note that the OC dll can be intercepted and blocked anyway, by programs like CIS.

LOL. The link removed in the paragraph below because of the bad WOT rating was to OpenCandy's FAQ; accessed accessed 2011-03-27.

Although you might like to think it's funny, our site rules are designed to protect visitors from potentially harmful links. Of course there are grey areas and situations when having a bad WOT rating does not present a hazard, but once we begin to make exceptions the whole system becomes meaningless. We do however expect members to read the rules before posting and abide by them for the benefit of the community. MC - Site Manager.

The comic element was the entrance of WOT in this particular conversation, in a rebuttal of the claim that OpenCandy is benign. The opportune arrival of reinforcements. I apologize for the unclarity.

I got the joke and enjoyed the irony too : )

I stand by my comments re; OC in general but fair cop, I hadn't properly looked into the situation with Avast in particular.

Not sure why anyone would be comforted by the fact that the dll is removed, when (1) the snooping has already been done at that point, (2) it leaves a permanent identifier on the computer, what OpenCandy used to call a "non-reversible identifier" [link with bad WOT rating removed as per site rules], and (3) its dossier on you is kept remotely.

Thus it is, or was, FALSE that "nothing is left behind."

In any case, you are describing the typical case in which OpenCandy comes with an INSTALLER. This is NOT the case with avast.

The dll is in fact NOT removed in the case of avast (not that it matters). You may "verify" that via the avast forum thread linked above. It remains and gets triggered repeatedly by avast's Software Updater component (which is something akin to the Secunia Personal Software Inspector).

Sophisticated users can block OpenCandy, certainly, but those are likely not the users seeking recommendations for free anti-virus programs. Also, the presence of OpenCandy gives insight into the values and ethics of the avast company.

360 Total Security Rocks!

It's like McDonald's "I'm lovin it!"

Yes I realize it is new. I've been on the net since all the others were new also. I too like to live dangerously.

* Patch windows with Windows Updates.
* Built-In System Cleaner.
* Built-In Start Remover.
* Built-In Sandbox. (similar to Avast)

One of the best guis I have seen in a while since others mucked theirs up. You ever try changing the detailed settings in newer versions of Avast?

It might just be me but it seems my machines run faster with 360 Total Security on. Probably because of the patches applied. It seems to find patches that Windows Update did not find.

* I have not run it on a purposely infected machine.
* It did remove startup items I did not want removed. (They were easily restored)

I would recommend only for an Advanced user for now. We don't know yet if their system cleaner is going to destroy something important.

Lenovo R60 Windows Vista 32-Bit
Acer Aspire 5532 Windows 7 Pro 64-Bit

This seems to be just an assertion. This does not necessarily mean it is true. Have you found any other sources which back this up. I found many which linked back to this same article, but are there any which have reached the same conclusion through analysis of the product itself? Thanks.