Best Antivirus Software for Windows 11 PCs With Limited Resources

Sixty megabytes. That's roughly the idle memory footprint of the lightest antivirus suite I've run across three machines — about a third of what a single browser tab eats just sitting there doing nothing. If you think a security suite needs to grind your Windows 11 PC into mud to actually be protecting it, that one number should start wrecking the assumption before we get anywhere else. I've tested eleven different suites since the week our office network got ransomwared back in 2022, split across a work laptop, a Mac mini media box, and a home gaming rig that's a few specs behind current and resource-constrained in its own right — and "heavier means safer" is the single worst piece of folk wisdom floating around antivirus comparisons.

Quick disclosure before anything else: some of the links below are affiliate links, and if you buy a subscription through one, I earn a commission at no extra cost to you. I only point people toward suites I've bought with my own money and run on my own hardware — not something a vendor mailed me a review copy of. That's the whole arrangement, and it's the only reason I bother writing any of this down.

Windows 11 is not a lightweight operating system to begin with. Between the Trusted Platform Module (TPM) 2.0 requirement and a baseline of 4 GB of RAM, it already runs close to the edge on a budget laptop or an aging gaming rig. As the IT admin who got burned once already, I don't trust marketing claims about resource efficiency on top of that — I trust a stopwatch and Task Manager.

The Myth About 'Heavy' Protection on a Resource-Limited PC

The assumption goes like this: if a suite isn't visibly chewing CPU or throwing scan notifications at you, it can't be doing much. I used to think that way too, like judging a lock by how loud it clicks when it turns. It's backward. Suites that lean on heuristic analysis and cloud lookups — checking a file's behavior against a server instead of hauling around a multi-gigabyte local list of known threats — carry almost nothing locally, and that's a different thing entirely from being weak. The usable rule I give anyone who asks: judge a suite by its RAM-at-idle and its CPU load during a full scan, not by how loudly it announces itself.

What Actually Determines the Footprint

A few technical choices separate the suites that vanish from the ones that fight you for every CPU cycle. Real-time protection — scanning files the instant they're touched — costs more continuously than a scheduled scan that only runs once a day while you're away from the keyboard, and that distinction matters more on a resource-limited PC than almost anything buried in the settings menu. Whether a suite hooks deep into the kernel or mostly stays in user space also shifts how much it drags on disk access. And if you're gaming on that same limited rig, check whether the suite has an actual throttle that defers scans and updates while a fullscreen app is running, rather than a checkbox labeled "gaming mode" that does little else. Those three settings explain most of the gap between suites that feel invisible and the ones that don't.

ESET HOME Security: The Lightest Footprint I've Tested

ESET HOME Security is the suite that gave me that sixty-megabyte number, and it held steady there through months of testing on a gaming rig that doesn't have room to spare. It stayed almost entirely out of the way during a full scan — I've run it in the background through video calls without a single stutter, which is more than I can say for suites that only look lightweight on a spec sheet. It doesn't nag you with system-tune-up upsells either, which matters more to my sanity than it probably should. Its false-positive rate during my testing stayed low enough that I never had to second-guess a file it blocked. The interface is plain, almost utilitarian, and if you want it to hold your hand through every setting, it won't.

Disable the Extras Before You Judge Norton 360's Weight

Norton 360 is a different animal entirely — a full-service suite bundling a VPN, cloud backup, and a password manager alongside the actual antivirus engine. Install everything on a machine with only 4 GB of RAM and yes, it feels heavy; that's not a myth, that's just math. Strip it down to the core protection engine and disable what you don't need, though, and it runs leaner than its reputation suggests. It's been running on my main work machine for months, and its web protection has caught phishing redirects that Windows Defender let straight through — not a small thing given how my 2022 incident started. One real caution: the renewal price jumps hard after the first term, enough that it's worth a calendar reminder so it doesn't catch you off guard. Whether the bundled password manager deserves the same trust as the antivirus engine sitting next to it is a separate question, and I'd evaluate it on its own rather than assume bundled means vetted.

Avast Premium Security and the Free-Tier Trap

Avast Premium Security is where I've got a genuinely mixed relationship with a vendor. Its heuristic engine — the part that judges a file by what it does rather than what it is — is excellent, and CPU usage during a full scan barely moved the needle on an older quad-core chip I keep around specifically for this kind of testing. Here's the part that actually burned me: I ran the free tier for a while, before my 2022 incident sharpened my paranoia, and it waved through a potentially unwanted program that had hitched a ride inside an otherwise legitimate installer. Nothing catastrophic — a browser toolbar and some junk processes I had to dig out by hand — but it's exactly the kind of miss that makes "free" a false economy once you've watched what a single phishing link can do to a network. The paid tier closed that gap for me. If you're going to run Avast Premium Security at all on a resource-limited PC, the premium version earns its place specifically because of that free-tier blind spot.

Why Does My Scan Still Interrupt a Call?

Friends who've just moved an older machine onto Windows 11 ask me this a lot: if the suite is supposedly lightweight, why does a scan still manage to tank a video call? I've had a Teams call drop mid-sentence because a scheduled scan picked that exact window to start — glanced at the tray, and there was the scan queue, grinding through files while my audio cut out around me. The antivirus usually isn't the only suspect. Sometimes it's a scheduling setting that let a scan run during active hours instead of idle time. Sometimes it's the suite's own cloud-lookup traffic competing for the same upload bandwidth your call needs, which has nothing to do with malware detection and everything to do with two processes assuming they each own the pipe. Check your scan schedule first, and check what else is chewing bandwidth second, before you blame the antivirus for every stutter.

If you want the deeper dive on whether Windows Defender alone covers a resource-limited PC, I've written that up separately in Is Free Antivirus Enough? The short version: Defender's footprint is light because Microsoft already owns the operating system it's scanning, but light and sufficient aren't the same question.

Fortect Is Not a Substitute for Real-Time Protection

I also keep Fortect in the toolkit, though it's not a traditional real-time antivirus and I don't pretend it is. When a machine feels sluggish, or I suspect some leftover junk from a minor infection has mucked up the Windows registry, Fortect handles the cleanup side of things — the system-repair work that most antivirus suites simply ignore once the malware itself is gone. There's a longer version of this in why I use Fortect to repair Windows system files regularly, if you want it. The mistake I see people make is treating a repair tool as if it's doing the job of real-time protection. Scope matters here: one tool handles the break-in, the other handles the mess left behind once you've already kicked the break-in out.

Comparing the Load, Not Just the Brand

Think of resource impact less as a brand question and more like physical security gear. ESET is the discreet camera system that records everything without anyone noticing the hardware. Norton is the heavy iron gate: seriously secure, but it takes visible effort to swing open every time. McAfee, from what I've seen testing it, is closer to a security guard who checks your ID on the way to the kitchen — thorough, but a lot for a small house.

A friend of mine who spends his weekends grinding through a disc golf league out in the SouthEnd district asked me recently why I even bother running antivirus on a Mac mini. "Macs don't get viruses," he said, the line every IT guy hears eventually. After 2022, I stopped buying that argument completely. Putting antivirus on my Mac mini isn't really about protecting the Mac itself — it's about protecting everything connected to it. A Mac can carry a Windows-targeted payload on a shared drive without ever getting sick itself, just waiting for the moment that drive gets plugged into something that will.

So Which One Should You Actually Run?

If your Windows 11 machine is already struggling to breathe, don't make it worse with a suite trying to do five jobs at once. Focus on the one job that actually matters: stopping malicious code before it does what it did to my old office network. For pure efficiency, ESET wins outright. For the strongest overall protection, provided you're willing to manage a few extra settings, Norton 360 is the stronger shield. Pricing and introductory offers shift often enough on both vendor pages that checking current terms there beats trusting any number I quote today.

Security isn't about which suite has the loudest dashboard or the most notifications. It's about which one holds the line without making your Windows 11 PC feel like it's wading through mud — and the sixty-megabyte number from the start of this piece is still the best one-line test I've got for telling the two apart.

Ready to stop guessing? I'd start with Norton 360 if you want the broadest shield and don't mind tuning out the extras it ships with, or ESET if every spare megabyte on your rig is precious.