It's a good video but... See what happens when you don't format your virtual machine. After doing the link test, he should restore the VM and continue with the exe samples. The links that actually downloaded the payload and weren't aborted have some nice possibilities of damaging the antivirus he's testing. If we're talking about how well can Norton protect us from executable malware, then after the link test he should restart and restore the virtual machine and start with the other part. To have a 100% accurate test he would have to do this after testing every sample, because even a scan can activate malware and damage the rest of the test, but I think restoring the VM between both parts of testing would at least make it a bit more clear. Good video though.