Antivirus software is one of those tools people install once and then forget about. That is exactly how it stops protecting anything. Nothing dramatic happens when it fails — no alarm, no error message you would notice. The subscription quietly lapses, the definitions fall months behind, or a second security program fights the first one in the background, and the computer keeps humming along looking perfectly healthy.
The fixes are mostly small and mostly free. Here are the mistakes worth checking for, roughly in the order they cause real trouble.
The subscription expired months ago
Renewal prompts are easy to swipe away when you're in the middle of something. A laptop bought two years ago may still be running the free trial that shipped with it, and that trial ended about 700 days ago. The icon is still sitting in the tray, which is why so many people assume everything is fine.
An expired suite often keeps running its background services and keeps scanning, but it stops receiving new definitions. That is the worst combination: the impression of protection with none of the substance.
Open the app and look for a status line that says "subscription", "license" or "protection status". On Windows, the built-in Windows Security window also shows which antivirus is currently registered and whether it is active — a quick way to catch a lapsed program you forgot about. Then pick a direction: renew it, replace it with a paid product you actually chose, or uninstall it and rely on Microsoft Defender, which is a perfectly reasonable option for most home users as long as you keep Windows updated.
You're running two real-time antivirus programs
Two locks on a door sounds safer. Two antivirus programs actively scanning the same files causes conflicts instead. Both hook into the file system, both intercept the same downloads, and they start quarantining each other's components or one another's files. The usual symptoms are a machine that gets slower every week, random scan errors, and occasional false alarms on legitimate software.
It is worth knowing what counts as "two". Microsoft Defender steps aside automatically when a third-party antivirus registers itself, so Defender plus one suite is normally fine. Two separate third-party suites running real-time protection at the same time is the problem.
What to do instead
- Keep exactly one program doing real-time scanning.
- If you want a second opinion, use an on-demand scanner you run manually and close afterwards — that is a legitimate approach; just don't leave its real-time shield switched on.
- Before uninstalling a security suite, use its own uninstaller and reboot. Leftover drivers from an old antivirus can cause odd behaviour for months.
Updates aren't happening, even though they're set to automatic
Automatic updates fail more often than people expect. The license expired, the PC wasn't on long enough, the update service was disabled by an optimiser tool, or a corporate VPN blocked the update server for weeks. The setting says "automatic", so nobody checks.
Open your antivirus, find the update screen, and read the date next to the definitions. If it isn't from the last day or two, click the manual update button and watch what happens. A failure message here tells you something useful.
While you're at it, remember that antivirus is one layer. An up-to-date browser, an up-to-date operating system and patched office software close far more doors than a scan ever will. A suite cannot protect a browser that has been sitting on a version from two years ago.
A clean scan is not a clean bill of health
"Nothing found" feels final. It isn't. A scan compares files against known signatures and heuristics, so it can only report what it recognised:
- Browser extensions, hijacked notification settings and scripts that ran once and disappeared leave nothing to scan.
- Stolen session cookies, phishing pages and fake login screens never touch your disk.
- Anything you excluded from scanning — often added months ago to stop a false positive — is invisible to the scanner.
- New malware that no vendor has catalogued yet will simply pass through.
A scan can only tell you what it recognised. It cannot tell you what it missed.
Treat a clean result as "nothing known was found", not "this machine is safe". Keep backups of anything you would hate to lose, and stay sceptical of unexpected attachments, shortened links and messages that push you to act fast.
The settings nobody revisits
Default settings are a starting point, not a plan. Ten minutes in the settings screen is worth more than another scan. Check these in particular: scheduled scans set for a time the computer is usually off (move them, or switch on the "run a missed scan" option), notifications muted years ago so warnings never reach you, and quarantine lists nobody has looked at. Also confirm your exclusions list is short and that you know why each entry is there.
If your suite offers ransomware protection, controlled folder access or similar, turn it on and add your documents folders. It takes a minute and blocks a very common attack path.
Pop-ups pretending to be your antivirus
A browser tab announcing "5 threats found — call this number now" is not your antivirus. Real security software does not ask you to phone a support line, and it does not lock your browser to do it. Close the tab, or force-quit the browser if it refuses. Never call the number, never install the "cleaner" it offers, and afterwards check your browser's notification permissions for sites you don't recognise.
The same caution applies to email: an invoice, delivery notice or scanned document asking you to open a compressed file or enable macros is a routine trick. When in doubt, confirm with the sender through a channel you already trust.
A short routine that keeps it working
Once a month, run through this in order:
- Open your antivirus and confirm the license is valid and the definitions are recent.
- Install pending operating system, browser and app updates.
- Check your exclusions list and clear anything you don't recognise.
- Run a full scan at a time the machine will be switched on.
- Verify your backups actually ran — an untested backup is a rumour.
That is it. A few minutes a month keeps the software doing the job you paid for, and it keeps you honest about what a scan can and cannot do. If you handle other people's data as part of a business, or you have legal or compliance obligations around security, it is worth getting advice from a qualified IT or security professional rather than relying on a consumer antivirus and a monthly checklist.
Photo: StartupStockPhotos / Pixabay