AVG Internet Security is a paid security suite for Windows PCs. It combines real-time antivirus protection with a firewall, ransomware and webcam controls. It also includes tools that guard saved passwords, private documents and remote access to the computer. It runs on the same engine as the free AVG AntiVirus and adds premium protections on top. A separate Mac version exists, and the multi-device subscription also covers Android and iOS. Licenses are for personal and family use, and a free trial is available.
Background shields and quarantine
Most of the protection in AVG Internet Security comes from four Core Shields that work without user input. File Shield checks each file when it is opened, run, changed or saved. Behavior Shield watches running programs for suspicious actions, which lets it catch threats not yet in the virus definitions. Web Shield inspects data arriving while browsing, and Email Shield scans mail handled by a desktop email client.
CyberCapture locks rare files with no reputation and analyzes them in a virtual environment before they can run normally. Detected items go to Quarantine, an isolated area where they cannot run or touch the system.
Scan types for different jobs
AVG Internet Security also offers on-demand scans. Smart Scan, the broad check on the main screen, looks for malware, outdated software, poorly rated browser add-ons, network threats and performance problems in one pass. Deep Scan goes through drives and memory in detail, including a search for rootkits, while other scans check chosen folders or removable media.
Boot-Time Scan targets malware that is hard to remove while Windows is running; it runs at the next startup, before Windows services load. For a PC that will not start cleanly, Rescue Disk creates a bootable scanner on a USB drive or CD.
Enhanced Firewall rules
The Enhanced Firewall monitors traffic between the PC and the internet and treats networks by trust. The firewall trusts a private home or office network and allows communication inside it. It treats a public hotspot as untrusted and blocks incoming connections.
The firewall creates a default rule for each application the first time it starts. Users can block any program or switch it to Ask me Mode, which prompts at every connection attempt. Experienced users can also edit network and application rules.
Three firewall features belong only to the paid suite and switch on when the PC is on an untrusted network:
- Leak Protection stops details such as credentials, the computer name and the email address from leaking onto the public network.
- Port Scan Alerts warn when something probes the PC for open ports.
- ARP Spoofing Alerts warn about attempts to intercept traffic by impersonating another device.
Network Inspector scans the local network for weak points, including connected devices and router settings. Remote Access Shield blocks unauthorized remote connections, including those from high-risk IP addresses, BlueKeep-type exploits and brute-force attempts to guess login details.
Protected folders against ransomware
Ransomware Protection limits which applications may change personal files. It covers folders such as Documents and their subfolders. Users can add more folders. In Smart Mode, the default, trusted programs can modify these files and anything else needs permission. Strict Mode asks about every program not already on the allowed or blocked list.
Webcam, documents and saved passwords
Webcam Protection blocks untrusted applications from using the camera and microphone. Smart Mode lets trusted apps through and asks about the rest; Strict Mode asks every time, and a third mode blocks all access.
Sensitive Data Shield scans the PC for documents that contain personal information and offers to protect them. When an untrusted application, malware or another Windows user tries to open one, the shield blocks access or asks for confirmation.
Browser Defense controls which applications can read passwords and cookies stored in web browsers. Hack Alerts warns when login details linked to the user’s email address appear in a leak on the dark web.
Fake Website Shield and file shredding
Fake Website Shield in AVG Internet Security counters DNS hijacking by resolving addresses through an encrypted connection to AVG’s own DNS server. As a result, the browser reaches the genuine site rather than a convincing copy. Data Shredder overwrites chosen files or whole drives several times before removing them, so the content cannot be recovered.
Compared with AVG AntiVirus Free
| Function | AVG AntiVirus Free | AVG Internet Security |
|---|---|---|
| Core Shields, CyberCapture and scans | Yes | Yes |
| Ransomware Protection and Hack Alerts | Yes | Yes |
| Firewall Leak Protection and attack alerts | No | Yes |
| Remote Access Shield and Fake Website Shield | No | Yes |
| Webcam Protection and Sensitive Data Shield | No | Yes |
| Browser Defense and Data Shredder | No | Yes |
| Round-the-clock customer support | No | Yes |
AVG Secure VPN and AVG TuneUp appear inside the app but need their own paid subscriptions.
A single-device subscription covers one computer. The multi-device subscription covers up to ten devices across Windows, Mac, Android and iOS. On the Mac, AVG Internet Security provides File, Web and Email Shield, Ransomware Protection, Fake Website Shield, Network Inspector and Phishing Net.
