Home › Choosing antivirus

How to choose antivirus software for a home desktop in Australia

A method that starts with your machine and your data, works outward to the feature list, and treats vendor marketing as a claim to be checked rather than a description to be trusted.

Reviewed by the Arcadia Group editorial team · Last reviewed 17 September 2026

Start from the machine, not from the product

The comparison pages that dominate this subject are organised around products because products are what they are selling. That order makes the decision harder, because every product looks reasonable in isolation and the differences between them are mostly differences of packaging. Turning the order around costs about twenty minutes and removes most of the difficulty.

Begin with four facts about the computer in front of you: its operating system and version, its age, how much memory it has, and how many people use it. Write them down. Almost every disagreement between two plausible-looking products resolves itself once those four facts are on paper, because they determine which products will run comfortably, which licence tier you need, and how much of the software's automatic intervention is worth paying for.

Take an inventory of what you would actually miss

Security spending is proportional to consequence, and consequence is specific to you. Work through the machine in categories rather than folders.

Irreplaceable files. Photographs, scanned documents, correspondence, creative work. If these exist only on this one drive, the most valuable thing you can buy is not antivirus software — it is a second copy, kept somewhere else.
Financial and identity material. Tax records, bank statements, copies of identity documents. These raise the cost of a compromise sharply, and they are the reason a shared household machine deserves separate user accounts.
Working credentials. Saved passwords in a browser, a work email account configured in a desktop client, remote access to an employer's systems. If the machine is used for work, your employer may have its own requirements that override anything decided here.
Replaceable convenience. Games, installed applications, media that can be downloaded again. Losing these is annoying rather than serious, and it should not drive the decision.

A machine that is entirely in the last category does not need the same arrangement as one holding the first three. Being honest about which one you have is the single most useful step in the process.

Backups sit underneath every other decision

Ransomware is the clearest case: software that encrypts files and demands payment is defeated far more reliably by a recent, disconnected backup than by any detection engine. The Australian Cyber Security Centre publishes practical guidance on backing up and on ransomware for individuals and families at cyber.gov.au. Treat a backup as the foundation and security software as a layer on top, not the other way around.

Decoding the feature list

Vendor feature lists mix genuinely distinct capabilities with renamed versions of the same capability and with tools that have nothing to do with malware at all. Here is what the common terms generally refer to, so you can tell which is which.

Real-time or on-access protection: The engine inspects files as they are opened, written or executed, instead of only during a scan you start. This is the core function; if a product has one thing, it has this.
On-demand and scheduled scanning: A sweep of the drive that you trigger or schedule. Useful for a second opinion and after an incident, but it is not what catches something at the moment it arrives.
Web or browsing protection: Blocks access to addresses known to host malicious content or to imitate a legitimate site. Effectiveness depends on how quickly the vendor's list is updated, which is not something a buyer can verify directly.
Email scanning: Inspects attachments in a desktop mail client. Largely redundant if you read mail in a browser, where the mail provider already filters.
Ransomware or folder shielding: Restricts which applications may write to nominated folders. Genuinely useful, and it is also a feature the major desktop operating systems now include in some form.
Firewall: Controls network connections to and from the machine. Every current desktop operating system includes one; a suite's firewall replaces rather than supplements it, and the practical gain is usually a friendlier interface.
Password manager: Stores and fills credentials. A real benefit if you will use it, and worth nothing if you will not. Compare the bundled one against dedicated alternatives rather than assuming parity.
VPN: Routes your traffic through the vendor's servers. This is a privacy and network-access tool, not a malware defence, and bundling it with antivirus is a commercial decision rather than a technical one.
Clean-up, tune-up and driver tools: Unrelated to security. Judge them on their own merits, and be sceptical of any tool that reports a large number of "issues" on a healthy machine.

Who tests these products, and how to read a test

Neither this site nor any vendor's own marketing is a substitute for independent laboratory testing. Two long-established European laboratories publish consumer antivirus test results in public: AV-TEST in Germany and AV-Comparatives in Austria. Both publish their methodology alongside their results, which is the part that matters.

When you read one, three habits will save you from over-reading it. Check the date, because results age quickly and a two-year-old chart describes software that no longer exists in that form. Check which product edition was tested, since vendors sell several and the tested one may not be the one on offer. And check what was measured — protection rate, false positives and performance impact are separate scores, and a product can look excellent on one while looking ordinary on another.

We do not reproduce those scores here. Test results change, and a number copied onto a third-party page in 2026 will be wrong by the time most people read it. Go to the source.

Testing the candidate on your own machine

Laboratory results describe detection. They cannot tell you how a product feels on your hardware, which is the thing most likely to make you uninstall it. Most vendors offer a trial period; use it deliberately.

Record the starting point. Before installing anything, note how long the machine takes to reach a usable desktop from cold, and how responsive your two or three heaviest applications feel.
Install one product at a time. Running two real-time engines together causes conflicts and slowdowns, and makes it impossible to tell which one is responsible for what.
Use the machine normally for a week. A first-day impression is dominated by the initial full scan, which is not representative of ordinary use.
Watch the interruptions. Count how often the product asks you something, warns you about something, or offers you an upgrade. Software you learn to dismiss without reading has stopped protecting you.
Re-measure the same things. Compare cold start and application responsiveness against the notes you took. A difference you can feel on a machine you use daily is a real cost.
Confirm the uninstall works cleanly before the trial converts to a paid subscription, and note the cancellation route at the same time.

What to watch out for while comparing

Introductory pricing presented as the price. The first-term figure and the renewal figure are frequently different. Both are usually stated somewhere; find the second one before you agree to the first.
Device counts you will never use. A ten-device licence is only better value than a three-device licence if you own ten devices you intend to cover.
Feature names that describe the same thing twice. Long lists are sometimes one capability split across several bullet points.
Comparison sites that do not say how they are paid. This one is paid by commission and says so on every page; not all of them do.
Any page that claims to have scanned your computer. A web page cannot do that. See fake alerts and support scams.

Licences, renewals and the paperwork

The commercial terms deserve as much attention as the technical ones, because they are where most complaints originate. Note the licence duration, how many devices it covers, whether those devices can be swapped during the term, the renewal price, the renewal date, and how cancellation is performed. Keep the confirmation email; it is the record that makes any later conversation straightforward.

Purchases made by consumers in Australia carry consumer guarantees that apply on top of the vendor's own policy, and the Australian Competition and Consumer Commission sets out what those are at accc.gov.au. Our guide to subscriptions, renewals and refunds covers the sequence to follow if something goes wrong.

Common questions

Do I need antivirus software if I am careful?

Care reduces exposure considerably, and it is the reason a single cautious adult on a well-maintained machine can reasonably run built-in protection alone. It does not eliminate exposure, because some compromises arrive through legitimate sites and updated software rather than through anything the user chose. The decision is about how much residual risk you want handled automatically, and how much data you would lose if the residual risk landed.

Can I run two antivirus products at once for extra coverage?

Two real-time engines inspecting the same files tend to interfere with each other, and the result is usually a slower machine rather than a safer one. A single real-time product plus an occasional manual scan from a second vendor is the arrangement that avoids the conflict.

Does buying security software satisfy any legal obligation in Australia?

Not for a household. There is no general legal requirement for an individual to run security software. Businesses may have obligations arising from their own circumstances — for example, obligations relating to personal information they hold, which the Office of the Australian Information Commissioner explains at oaic.gov.au — but that is a separate question from what a home user must buy.

How much should this cost?

Consumer antivirus subscriptions in Australia are priced in AUD per year and vary by tier, device count and whether extras are bundled. We do not publish prices, because they change and because introductory and renewal figures differ; the vendor's own site is the only reliable place to read the current figure.

What if my machine is already behaving strangely?

Slow performance, crashes and browser changes have many causes, most of them mundane — a failing drive, a full disk, an extension, or an operating system update mid-install. Installing security software is a reasonable diagnostic step, but if you suspect a compromise involving your accounts or money, the Australian Cyber Security Centre's reporting route at cyber.gov.au and Scamwatch at scamwatch.gov.au are the places to start.

Where this leaves you

A good decision here looks unremarkable: protection that matches what is actually on the machine, a licence that matches the number of computers you own, a renewal date you know about, and a backup sitting underneath the whole arrangement. If you have those four things, the choice between two reputable products is a smaller decision than the search results suggest.

If you want the mechanics behind the feature names, continue to how antivirus software works. If the question is whether to pay at all, free versus paid protection takes that apart. Avast is the product this site has a commercial relationship with, and the vendor profile states what that means and what we cannot verify.