Virus app performance is 'highly variable'