Entry № 041-3 / V-462 · 0:00 synced

I Ran Every Antivirus At Once

Linus Tech Tips@LinusTechTips1.8M viewsMay 3, 202519:03
Source
YT
Views
1.8M
Subscribers
16.8M
Critic
?
Audience
?

0 up · 0 down · 0 ratings

Promos

Proactively secure your business with ThreatLocker! Block ransomware, unknown applications, and more with their Zero Trust approach. Get started today using our link: threatlocker.com It started out as idle speculation. How many Anti-Virus programs could we cram onto a Windows PC without it crashing? More than we thought, it turns out. But once we’ve got a dozen or so installed, do we really WANT to use the system anymore? Discuss on the forum: linustechtips.com ► GET OUR MERCH: lttstore.com ► GET EXCLUSIVE CONTENT ON FLOATPLANE: lmg.gg ► GET A VPN: piavpn.com ► SPONSORS, AFFILIATES, AND PARTNERS: lmg.gg Purchases made through some store links may provide some compensation to Linus Media Group. CHAPTERS --------------------------------------------------- 0:00 Intro 1:18 Boot Test 2:44 Shutdown Test 3:53 Windows 7:35 Flash Drives 11:15 Gaming 12:25 Linus' GPU Adventure 13:35 More Gaming 16:53 Malware Detection 18:54 Outro

Start
AI OverviewDefault language

In this experiment centered on the question can you safely run multiple antivirus programs at the same time, Linus and the crew set up two nearly identical Windows 11 rigs to compare performance when Defender sits alongside a dozen or more third party AV tools. The video opens with a playful premise about adding more antivirus software to a PC, then quickly transitions to a boot-time test between a Defender-only machine and one crammed with various AV suites. Early on, they note the interlinked ownership among major antivirus brands and establish that Threat Locker is not a direct replacement for consumer AV but a different security approach for businesses. The team proceeds to install around fourteen antivirus programs, monitors boot times, and records the impact on system responsiveness, including popups, tray icons, and startup delays. They observe that many AV programs slow the machine in subtle, background ways, especially when users initiate activity rather than when the software is idle. The narrative moves from boot tests to real-world usage, including USB drive scans and game performance, where the extra overhead becomes more noticeable under load, not just in launch times but in sustained CPU and GPU pressure. The discussion then pivots to historical context, tracing antivirus evolution from signature-based detection to heuristic and cloud-based approaches, and how Defender has evolved to compete with third-party tools. The videos’ verdict is practical and pragmatic: more AV software isn’t inherently better, and for most users a single solid tool with cautious supplemental scans is sufficient. The host also highlights Threat Locker’s zero-trust approach for business networks and stresses that in a real-world enterprise context, a granular, policy-driven security model can provide protection without overwhelming endpoints. The closing segments emphasize that users should prioritize a single reliable security solution for daily use while recognizing Defender’s capability to detect threats, with Threat Locker presented as an enterprise-grade complement for more specialized needs. The takeaway is that antivirus software is not a magic shield and that strategic defense, software design, and system performance should guide security choices rather than the number of programs installed.

Topics · technology · computer_security · software_testing · hardware_performance

Questions answered

Why is Defender considered enough for many users, according to the video?
Because Defender provides real-time protection and can detect threats, and for typical users it is often sufficient without the extra overhead caused by running multiple third-party AV tools.
What does Threat Locker offer in contrast to consumer antivirus?
Threat Locker offers a zero-trust security model for businesses, blocking unapproved applications by default and enforcing policies with fast response times, independent of an active internet connection.