Anti virus are not magic, all they do is maintain a database of virus names/files, and when you download/execute a file, it scans that file through their database to see if it recognize it as a virus. If yes, it will block it.
Thats all.
PAid anti virus are a bit better b ecause their data base are updated daily and faster