Lightweight antivirus for an old PC: what you actually need

For most people, the best lightweight antivirus is the one already on the PC: Microsoft Defender, part of Windows Security in Windows 10 and 11. On an older PC, keeping Windows, your browser and your backups current does more for you than any extra security suite.

Last updated October 25, 2026 · Facts checked against Microsoft, AV-TEST and AV-Comparatives

The short version

Microsoft Defender Antivirus is built into Windows 10 and 11. In AV-TEST’s July–August 2026 Windows 11 test, it scored the maximum for protection and usability.
On Windows 10, Microsoft says Defender’s malware definitions will keep coming through at least October 2028. That doesn’t fix security holes in Windows itself. Only Extended Security Updates (ESU) do that, until October 12, 2027.
A third-party antivirus replaces Defender rather than adding to it. Don’t run two.
Updates, a current browser and a backup matter more than which antivirus you pick.

Is Microsoft Defender enough?

For most home users, yes. Windows Security is built into Windows 10 and 11 and includes Microsoft Defender Antivirus, a firewall, and app and browser protection. You don’t have to install or renew anything.

Independent labs rate it well. AV-TEST’s home-user test for July and August 2026 (Windows 11, 15 products) gave Defender 6 out of 6 for protection, 5.5 for performance and 6 for usability, which earned its “Top Product” label. AV-TEST’s results page lists the same protection score for every round from February 2025 to August 2026.

To check that Defender is on, open Windows Security, select Virus & threat protection, and under “Who’s protecting me?” select Manage providers. Microsoft’s documentation says you should see “Microsoft Defender Antivirus is turned on”.

Defender on Windows 10 after end of support

Windows 10 support ended on October 14, 2025. Two separate things now keep a Windows 10 PC protected, and it’s worth knowing the difference.

Defender’s malware definitions

In October 2024, Microsoft said it would keep providing Security Intelligence Updates for Microsoft Defender Antivirus on Windows 10 through at least October 2028. These are the definitions Defender uses to recognize malware. Microsoft’s announcement doesn’t spell out whether this depends on ESU enrollment.

Security fixes for Windows itself

Fixes for holes in Windows come only through ESU. The consumer program delivers critical and important security updates for Windows 10 version 22H2 until October 12, 2027. It doesn’t include new features, non-security fixes or technical support, and it doesn’t mention antivirus. See our Windows 10 ESU guide for how to enroll.

The catch: Microsoft is direct about this. Its end-of-support page says antivirus software, whether Defender or a third-party tool, can help, but “it’s not enough on its own” without Windows security updates. An up-to-date antivirus can’t patch a hole in an unpatched system.

So a Windows 10 PC without ESU still gets fresh Defender definitions, but it’s more exposed every month. If your PC can’t run Windows 11, enroll in ESU and plan your next step. Our Windows 10 end of support guide covers the options.

Do you need a third-party antivirus?

Usually not, but some people prefer one for its extra tools or interface. Before you install one, know these trade-offs:

It replaces Defender. On a home PC, Microsoft says Defender switches itself off automatically when you install another antivirus. If that product expires or is uninstalled, Defender can turn itself back on.
Never run two at once. Microsoft warns that two products both providing real-time protection can conflict, which hurts performance and isn’t supported.
Install only what you need. If setup offers optional extras, skip the ones you won’t use. On a PC with little memory, every background program counts.
Read what the free tier covers. Free and paid versions of the same brand can include different features, so check before you rely on one.

Which antivirus is lightest on an old PC?

The most useful independent data comes from AV-Comparatives. Its Spring 2026 performance test, published April 22, 2026, deliberately used a low-end machine: an Intel Core i3 with 8 GB of RAM and an SSD, running Windows 11. It measured how 20 consumer products slowed down everyday tasks such as copying files, installing and launching apps, downloading and browsing.

Ten products earned the top “Advanced+” award, including two free ones: Avast Free Antivirus and AVG AntiVirus Free. The others in that group were paid products, including Norton Antivirus Plus, ESET HOME Security Essential and Bitdefender Total Security.
Microsoft Defender earned “Advanced”, the middle award.
Three products received the lowest award, “Standard”.

Treat these results with care. AV-Comparatives says the scores only indicate impact, apply to the exact versions tested, and say nothing about how well a product protects you. Your own PC may behave differently. AV-TEST’s July–August 2026 results show how close most products are: 13 of the 15 products scored a full 6 for performance.

With results this close, Defender’s performance cost alone is a weak reason to switch. If your PC feels slow, look at startup apps, storage and memory first. Our startup apps guide is a quick place to start.

Habits that matter more than your antivirus

Install updates. Microsoft’s ransomware advice starts with keeping Windows current and restarting at least once a week.
Keep your browser current. Microsoft says Edge will keep getting updates on Windows 10 22H2 until at least October 2028, with no ESU required. Our browser guide covers the lightest options.
Back up. A backup is your way back from ransomware or a dead drive. Microsoft recommends backing up important files, for example to OneDrive, which keeps earlier versions.
Turn on controlled folder access. This Windows Security feature stops unknown programs from changing files in protected folders.
Be wary of attachments and links. Microsoft advises against opening unexpected attachments and clicking suspicious links.

Linux and ChromeOS Flex: a different security model

If you move an old PC to Linux Mint, the project’s own advice puts updates first. Its Update Manager installs security fixes for the system and your apps, and Timeshift can take snapshots so you can undo a bad update. Linux Mint’s team has warned that many users install updates too slowly.

ChromeOS Flex checks for updates automatically and follows the same release cycle as ChromeOS. It encrypts user data automatically. Google is open about what it lacks compared with a Chromebook:

No Google security chip, so ChromeOS verified boot isn’t available. Google recommends turning on UEFI Secure Boot instead.
Not every PC has a supported TPM to protect encryption keys. Without one, data is still encrypted but may be more vulnerable to attack.
Firmware (BIOS/UEFI) updates don’t install automatically; they come from the PC’s maker.

Frequently asked questions

Does Windows Defender still work on Windows 10 after end of support?

Yes. Microsoft said it would keep providing Security Intelligence Updates for Defender Antivirus through at least October 2028. Those updates help Defender recognize new malware, but they don’t fix weaknesses in Windows itself. For that, you need ESU until October 12, 2027.

What’s the best free antivirus for Windows 10 after end of support?

For most people, it’s Defender, which is already installed and free. In AV-Comparatives’ April 2026 low-end test, Avast Free Antivirus and AVG AntiVirus Free had lower performance impact than Defender. No antivirus replaces Windows security updates, so enroll in ESU as well.

Is Norton antivirus lightweight?

Norton Antivirus Plus earned AV-Comparatives’ top Advanced+ award in the April 2026 performance test on a low-end Core i3 PC with 8 GB of RAM. That result applies to the version tested. It also says nothing about protection, which the lab tests separately.

Is Windows 10 safe with just an antivirus?

Not for long. Microsoft says antivirus alone isn’t enough without Windows security updates, because known holes in the system stay open. Enroll in ESU, keep your browser updated, and plan a move to Windows 11, Linux or ChromeOS Flex.