New Update Norton, Avira, Avast browser extensions

  • Thread starter ForgottenSeer 92963
  • Start date
F

ForgottenSeer 92963

Thread author
A kind request to @Evjl's Rain to put Avast Online Security & Privacy, Avira Browser Safety and Norton DNS to a test. A few years ago Norton announced that its Browser Extension would be discontinued, but the Norton DNS service on which this extension was based exists until today. With the Norton-Avast-Avira merger I am curious on how the synergy of combining URL Blacklist services, since Norton used to have a decent one, Avira cloud and Avast are decent .

The easiest synergy would be to forward all bad URL's (of Avira and Avast) to Norton's DNS service, and feed all new catches of teh DNS service back in the cloud systems of Norton, Avast and Avira AntiVirus.

I hope Evjl can find some time to put these URL services to the test, to see whether they are indeed leveraging the combined intelligence of Avast, Avira and Norton.

Regards Kees
 
Last edited by a moderator:
F

ForgottenSeer 92963

Thread author
3 times the list of URLs = 3 times the false positives, resource usage and performance impact, hence why I dont think Norton will incorporate any signature/technology into their products.
View this binary search explanation (link to video) to understand that 3x volume increase is not an issue for the performance impact. Because an URL contains so little data and data can be organized in separate indexed baskets (e.g. on domain name and on file name) the storage/memory resource impact of a cloud based URL blacklist is minimal. Since all AV-s have some sort of FP filtering build-in, I assume they would only share clean data which still will be checked by the receiving AV on FP's (like any other malware input source). Using three (slightly) different FP detection methods, probably reduces the total amount of FP's in stead of increasing them.
 
Last edited by a moderator:

Moonhorse

Level 37
Verified
Top Poster
Content Creator
Well-known
May 29, 2018
2,602
Would make sense that they would send all urls to their triple engines and have much better results catching fraud sites

Even norton bought them , they probably continue as before

We just need new browser extension/dns tests if @Evjl's Rain has time for it... or just someone that will post url pack and hub guys/ anyone bit experienced person can test them for us

Only thing i have noticed is just that avast web extension is blocking sites before avast mobile antivirus
 

silversurfer

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
Aug 17, 2014
10,057

Gandalf_The_Grey

Level 76
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,506
According to Norton the DNS service was retired in 2018:
Remove Norton ConnectSafe settings:
On November 15, 2018, Norton ConnectSafe service was retired meaning that the free service will no longer be available. Because the service is discontinued, current users could experience disruption(s) in their browsing experience.
If you are a current Norton ConnectSafe user, we recommend that you complete the following actions before the ConnectSafe service termination. You can configure the network adapter settings and remove the Norton ConnectSafe DNS server addresses.
 

SeriousHoax

Level 47
Well-known
Mar 16, 2019
3,630
What are the addresses of Norton DNS
Here:
Norton was among the first free public DNS providers to give some level of security. They had three policies:

A — Security (virus, phishing sites, and scam sites): 199.85.126.10

B — Security + Pornography: 199.85.126.20

C — Security + Pornography + Other: 199.85.126.30
Source:
I checked one malicious host only and it worked. The host is blocked by Norton Safe Web extension as well as Norton DNS. The blocked page showed Neustar logo. So currently Norton DNS = Neustar DNS?
1.png
 

Gandalf_The_Grey

Level 76
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,506
So it was the other way around? DNS service discontinued, but extension was kept alive? Like @SeriousHoax I checked the DNS service (probably the reason why I mixed it up)
Yes, all three Norton, Avira, and Avast/AVG use an extension now.
Like @SeriousHoax noticed the Norton DNS addresses are now used/owned by Neustar.
 

SeriousHoax

Level 47
Well-known
Mar 16, 2019
3,630
IMO, NextDNS with OISD blocklist list and other features in the Security section like Threat Intelligence Feeds, AI-Driven Threat Detection, Google Safe Browsing, Cryptojacking Protection, IDN Homograph Attacks Protection, Typosquatting Protection, Domain Generation Algorithms (DGAs) Protection, Block Newly Registered Domains (NRDs), Block Parked Domains do a brilliant job at blocking malicious and phishing sites at DNS level.
If I talk about the extensions then in my experience, Avast/AVG Online Security & Privacy is not as effective as Avast/AVG AV, Avira Browser Safety extension is resource hungry, Norton Safe Web is extremely buggy. It' stops working after a while/a couple of browsing sessions in any Chromium browser (Works fine in Firefox).
 

Evjl's Rain

Level 47
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Apr 18, 2016
3,684
IMO, NextDNS with OISD blocklist list and other features in the Security section like Threat Intelligence Feeds, AI-Driven Threat Detection, Google Safe Browsing, Cryptojacking Protection, IDN Homograph Attacks Protection, Typosquatting Protection, Domain Generation Algorithms (DGAs) Protection, Block Newly Registered Domains (NRDs), Block Parked Domains do a brilliant job at blocking malicious and phishing sites at DNS level.
If I talk about the extensions then in my experience, Avast/AVG Online Security & Privacy is not as effective as Avast/AVG AV, Avira Browser Safety extension is resource hungry, Norton Safe Web is extremely buggy. It' stops working after a while/a couple of browsing sessions in any Chromium browser (Works fine in Firefox).
I second that
Norton safe web: too weak
Avast online security: only blocks phishing, 0% on malware by design
Avira: too heavy, consumes CPU on every click
Neustar DNS/Norton DNS: aggressive, great but no whitelisting option when useful websites are falsely blocked
NextDNS: too slow for me with default DNS server. A client is required to connect to the closest server -> fast. There is a quota. Google safe browsing is redundant by my browser
 
Last edited:

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top