SAFE BROWSING CHECK · DEVICE SECURITY Three layers. One guard each. Who has the third? Your blocker watches the web. Your VPN watches the network. The machine itself needs its own guard.

What Antivirus Actually Catches (That Your Other Tools Don't)

Marta Lane · Updated January 29, 2026 · 4 min read

You may already have an ad blocker. Maybe a VPN too. So when someone says you also need antivirus, it's a fair question: what's left for it to do?

One specific job. And it happens to be the one job the other tools can't reach.

The number everyone quotes

AV-TEST, an independent security lab in Germany, registers more than 450,000 new malicious programs and potentially unwanted apps every day.

The number is real. It's also close to useless for deciding anything, and the lab itself explains why: many of those samples circulate for only a short time, and few remain a lasting threat.

You will never face 450,000 threats. You face a handful of routes. CISA, the US government's cyber-defense agency, lists the usual ones: an email attachment, a link that downloads a file, a program that wasn't what it claimed to be, an infected USB drive.

So the useful question is smaller. Of those few routes, which ones is anything on your computer actually watching?

Three layers, one guard each

Your security tools don't all protect "the computer." Each one watches its own layer:

Each tool covers its own layer. None of them covers a neighbor's.

One bad download. Which layer sees it? A bad download your layers Device · scanner checks files on the device Web · ad blocker watches the browser Network · VPN watches traffic in transit Each guard watches one layer. Files on the machine are the scanner's.
One file, three guards — only the device layer looks at what's on the machine.

"But my computer came with protection"

It did, and that counts. Windows includes Microsoft Defender. Macs have a built-in checker called XProtect. That's the floor of the device layer: real protection, on by default.

The floor has two specific limits.

On a Mac, Apple's own documentation says XProtect checks an app at three moments: when it first launches, when it has changed, and when Apple updates its malware signatures. There's no button to press for a deep scan of everything on the disk.

On Windows, Defender steps aside when another security program registers as your antivirus (Microsoft documents this). If a trial program came with your computer and quietly expired, it's worth one minute to see who is actually on duty: open Windows Security, choose "Virus & threat protection," and look under "Who's protecting me?"

The built-in floor has two different limits Both real, both partial — per Apple's and Microsoft's own docs. macOS · XProtect Checks an app at 3 set moments: On first launch When the app changes When Apple updates signatures Deep-scan the disk No such button — full scans need a tool. Windows · Microsoft Defender Always on, and a full scan is there: Real-time protection: On Run a full scan But it steps aside for another AV A trial that shipped with the PC may hold the seat. Check “Who's protecting me?” THE MOVE — name the scanner watching your files. Either floor is real. Neither is the whole device layer.
Both limits per Apple's and Microsoft's own documentation — the floor is real; the ceiling isn't included.

A dedicated real-time scanner puts the whole device layer in one place. It watches new files and downloads as they arrive, checks the programs already running, runs a deep scan whenever you ask, and removes what it finds. That's the job Total Antivirus is built for: catching what already got onto the machine.

Claim the Total Antivirus deal and cover your device layer →

Not ready for the deal? Start with a free scan first and see what's already there.

What antivirus won't do

The limits matter as much as the strengths:

A tool that promises everything should worry you. One layer, done properly, is a claim a product can actually keep.

The sixty-second layer check

  1. Web: is an ad blocker installed in your browser?
  2. Network: do you know when you'd actually want a VPN?
  3. Device: name the program watching your files right now.

For most people, the third question is the one that wobbles. If your answer is "I think something came with the computer," your device layer is thinner than you thought. And it's the layer where malware actually ends up.

Get the deal — put a real-time scanner on duty from today →


Three layers, one of them watching the machine itself. That's the whole picture, and the part of it you can fix this afternoon.