The Ultimate Antivirus Guide: 10 Top Programs Reviewed
Panda Internet Security 2011
Puts the pain on malware, but is also painfully slow
Panda holds a ton of promise, and if it weren’t for a few niggling issues, we’d anoint it our favorite security suite. But there are some things that just can’t be ignored, like the same persistent pop-ups we complained about in the 2010 release. It started from the get-go with Panda reminding us that we still needed to activate the program (even though we hadn’t previously been prompted). Shortly after, another pop-up appeared imploring us to register, something that is usually optional. In this case, our choices were to go ahead and register or be reminded at a future date (one day, one week, or one month), with no option to disregard it forever. Bad Panda!
Panda does its due diligence in alerting you to potential threats, but it overreacts to your home network, at least at first. Less savvy computer users may end up inadvertently blocking file shares, thinking that the pop-up represents a real danger when in fact it doesn’t.

Panda’s new UI now includes a virtual keyboard as an added precaution against keyloggers.
Our other issue is with Panda’s pokey scan engine. Panda subjects certain files to its Collective Intelligence database in the cloud, and a company representative warned us this would slow down scanning. It did, but the real problem is with Panda’s poor file-caching algorithm, which shaved only 26 seconds off a second system sweep that wasn’t that fast to begin with.
That’s what we don’t like about Panda, but there are plenty of redeeming qualities. We were told to expect improved boot times over time, and that’s what we saw. Initially, Panda added 15 seconds to startup, but after several reboots, Panda settled down to five seconds over a clean install. We also dig the repainted UI. It’s mostly an aesthetic change from last year’s version, but still packed with features—like a home network manager, ID theft protection, remote access, and more—all thoughtfully arranged.
When we fed Panda our malware samples, it chewed them up like a real panda bear chomps on bamboo. It also zipped through AV-Test.org’s much larger collection of malware, scoring higher than the industry average in each of four virus categories. And as an added layer of protection, Panda now includes a virtual keyboard, in case you’re paranoid about keyloggers.
Panda’s not the fastest security suite, nor is it always well behaved, at least at first. But if you can overlook its flaws, it will protect your system unconditionally.
Virtual keyboard; checks the cloud for updated threats.
Poor file caching and too many alerts.
$60 (1 year, 3 PCs), www.pandasecurity.com
BitDefender Internet Security 2011
A powerful antivirus suite you can take home to meet the parents
BitDefender flies in the face of conventional wisdom in more ways than one. Like most security suites, BIS runs the risk of spreading itself too thin by combining antivirus, antispyware, antiphishing, a firewall, parental controls, antispam, and more into a single package. That’s a challenge in and of itself, but BitDefender also attempts to cater to computer users of all skill levels, whether you consider yourself a beginner, intermediate, or expert. A tough challenge, but BitDefender proves up to the task.

Last year’s version of BitDefender also included different layouts to choose from, but they weren’t as slick or user friendly as they are now.
BitDefender prompts you to choose your level of expertise during installation, with each option sporting a different dashboard. You’re given a glimpse of each UI along with a short explanation before you commit, but can also select a different layout if you later change your mind. What’s great about this is that you can slap the Basic View on your parents’ rig and not have to worry about them inadvertently pushing a button they shouldn’t, and use the Intermediate or Expert layout on your own machine. The Intermediate UI is a step up from Basic in that you can customize the dashboard with up to 14 scrollable icons (Basic has three), while the Expert layout throws everything plus the kitchen sink and all the plumbing at you.
None of this would matter if BitDefender went belly up the first time you encountered a virus, but in our testing, it stood tall. It also zipped through our test bed’s hard drive like it was late for a date, reducing a little more than a six-minute scan to less than two minutes the second time around. There’s even a vulnerability scan that combs your system looking for unpatched software, missing Windows updates, and weak passwords.
Last year we concluded that “we’d always know we settled” with Bit-Defender, and now we’re wondering why we’d settle for anything else.
Suitable for all skill levels; supersonic scan speed.
$50 (1 year, 3 PCs), www.bitdefender.com
ClamWin Free Antivirus
You’ll wish it weren’t free so you could ask for a refund
It’s hard not to look a gift horse in the mouth when you’re told it’s a potential thoroughbred capable of racing in the Kentucky Derby, but later find out it’s limping on two legs short of a set and isn’t even fit for making glue. That’s what we think about ClamWin, a free, open-source antivirus program that comes saddled with “gotchas.”

If ClamWin finds a virus, it doesn’t actually eradicate it unless you change the default setting from “Report Only” to “Remove” or “Move to Quarantine Folder.”
The main problem with ClamWin is it doesn’t offer any kind of real-time protection. It’s strictly an on-demand scanner, so your only chance of avoiding infection is to either manually inspect every file you download, or set up a rigorous automated scan schedule. But even that’s a chore, because you have to configure a separate schedule for every drive/partition in your system. And it doesn’t help matters that ClamWin’s scan engine moves at a snail’s pace. Oh, and it won’t bother analyzing files larger than 100MB unless you change the default setting, nor is it configured to actually delete or even quarantine malware by default.
Actually, we should be careful of using the term “malware.” ClamWin cowers under the blanket when you surf the web, leaving you susceptible to spyware, phishing attacks, browser hijacks, adware, worms, and anything else that requires a real-time scanner. And despite the developer’s claims that “you will be as safe as with a commercial antivirus” so long as you scan suspicious files before opening them, ClamWin gave a handful of our virus samples a clean bill of health. Grrr!
If you insist on using ClamWin, if only to support the open-source community, supplement it with Clam Sentinel (free, http://bit.ly/fayEdZ), an add-on that sits in the system tray and offers basic real-time scanning. You also better be rocking Windows Defender or some other antispyware program so you’re not naked on the web.
No on-access scanning; doesn’t protect against web-based threats; requires too much fiddling.
Free, www.clamwin.com
ZoneAlarm Extreme Security
Has all the right ingredients, but the recipe needs work
Sharing the spotlight with ZA’s well-known firewall is Kaspersky’s integrated scan engine. Kaspersky earned a 9 verdict and a Kick Ass award last year, and in our eyes, pairing its scan engine with ZA’s firewall is like hiring Chuck Norris and Bruce Lee as your personal bodyguards. If only they had come dressed for the job.

ZoneAlarm does a fantastic job managing its two-way firewall, which offers up a boatload of customizations for networking ninjas.
Getting acquainted with the text-heavy UI takes a little work. The main window consists of a center panel outlining the status of the firewall, antivirus/antispyware, antiphishing, and browser security modules. This is flanked by a column of options on the left-hand side and a right-justified panel housing additional services, each of which redirects you to a web page to download and configure. It’s not the worst interface in the world, nor is it particularly swank. To perform anything other than a Quick Scan, for example, you have to drill into the antivirus menu, select Advanced Options, highlight Scan Modes under Virus Management, and then select a new default option, which applies to both manual and scheduled scans.
The integration of ZoneAlarm’s ForceField software adds an additional layer of security while cruising the web, but only if you’re driving IE or Firefox. If you are, ZA will scan every download before it touches your desktop, as well as give you the option of loading your browser in a virtual filesystem. Doing so redirects unsolicited downloads away from the OS and encrypts keystrokes, effectively jamming keyloggers. Huzzah!
All this protection adds up to a slightly heavy package. PCMark performance took a hit, and boot times jumped all over the place, finally averaging plus-six seconds (compared to a clean install), but occasionally would take much longer.
We found downloading updates a sometimes laborious waiting game, though this is only a potential problem if you have reason to check for updated definitions rather than let ZA do it for you. As malware detection goes, Check Point’s decision to integrate Kaspersky predictably turned out to be a good one, though it’s not as hurried as the fastest-performing scanners.
ZoneAlarm caught our entire collection of malware, and Kaspersky’s antivirus engine continues to earn high marks from independent testing labs.
It’s too bad ZA discriminates against Chrome, which is quickly picking up market share. And we wish it were a little more nimble. Otherwise, the pairing of a powerful firewall along with one of the best AV scan engines is a winning combination.
Top-notch firewall and Kaspersky scan engine is a potent one-two combo.
Browser protection doesn’t extend to Chrome; text-heavy UI.
$60, (1 year, 3PCs), www.zonealarm.com
BullGuard Internet Security 10
Tough like McGruff, but puts leash on system performance
When you first install BullGuard, you’re prompted to select a notification level. One of the two choices clamps a muzzle on BullGuard, stifling alerts the program can figure out on its own. The other promises more notifications so you’ll always know what the mutt is up to. We say mutt because BullGuard is another security suite that builds on top of someone else’s scan engine. We saw this with ZoneAlarm, which chose to go with Kaspersky, while BullGuard fetched BitDefender’s scan engine, another solid choice.

Don’t pay any attention to BullGuard’s password strength meter, which gives all eight-character passwords a maximum strength rating.
Initially, however, we feared BullGuard’s bark would be worse than its bite. During the final stage of installation, you’re asked to create a username and password. The password shows up in plain view unless you uncheck the “Show password” box, but more disconcerting is the so-called “strength meter.” All this does is evaluate how many characters you’ve entered. We typed “Password” and registered a full five bars on the strength meter, even though that’s arguably the weakest eight-character password you could possibly choose. It’s a minor gripe, but the feature could give greenhorn users a false sense of security.
Surfing the web was another story. BullGuard went into attack mode and sank its teeth into malicious downloads, a credit to its behavioral-based scanning. And when we chucked our own collection of malware onto the desktop, we might as well have thrown BullGuard a meaty bone, because the outcome was the same.
We paid a heavy price for all this protection, and we’re not talking about skrilla. Startup time never seemed to settle down after several reboots, taking an additional 32 seconds over a clean install. BullGuard was one of the few AV programs to noticeably affect file transfers, and the low PCMark score is a concern. These issues drag down an otherwise well-trained security companion.
Excellent behavioral-based scanning; customizable alerts.
Slows down system performance.
$60 (1 year, 3 PCs), www.bullguard.com