Q&A [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings

Evjl's Rain

Level 47
Verified
Trusted
Content Creator
Malware Hunter
Apr 18, 2016
3,604
28,273
Comparison between browser extensions

Test 29/12
Q&A - [Updated 29/12/2018] Browser extension comparison: Malwares and Phishings


Test 24/11
Q&A - [Updated 24/11/2018] Browser extension comparison: Malwares and Phishings


Test 12/11
Q&A - [Updated 12/11/2018] Browser extension comparison: Malwares and Phishings


Test 7/11
Q&A - [Updated 7/11/2018] Browser extension comparison: Malwares and Phishings


Test 6/9
Q&A - [Updated 3/9/2018] Browser extension comparison: Malwares and Phishings


Test 3/9
Q&A - [Updated 3/9/2018] Browser extension comparison: Malwares and Phishings


Test 2/9
Q&A - [Updated 25/7/2018] Browser extension comparison: Malwares and Phishings


Test, quick 1/9
Q&A - [Updated 25/7/2018] Browser extension comparison: Malwares and Phishings


Fun test 25/7/2018
Q&A - [Updated 24/7/2018] Browser extension comparison: Malwares and Phishings


Updated 24/7/2018 (most comprehensive, as possible)
Q&A - [Updated 24/7/2018] Browser extension comparison: Malwares and Phishings


Updated 19/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings


Updated 18/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings


Updated 10/7/2018
Q&A - [Updated 10/7/2018] Browser extension comparison: Malwares and Phishings


Updated 7/6/2018
Q&A - [Updated 7/6/2018] Browser extension comparison: Malwares and Phishings


Updated 3/6/2018
Q&A - [Updated 3/6/18] Browser extension comparison: Malwares and Phishings


Updated 25/4/2018
Poll - [Updated 25/4/18] Browser extension comparison: Malwares and Phishings


Update: 23/3/2018
Poll - [Updated 23/3/18] Browser extension comparison: Malwares and Phishings



Browser: Google Chrome 65 x64
Malware and phishing links: 10 malc0de, 10 vxvault, 10 openphish, 10 verified phishtank, 10 unverified phishtank
Total: 50 links
Extensions: recently downloaded from Chrome Web Store
- Google Safe Browsing (built-in chrome's protection)
- AdGuard AdBlocker: default settings, uses Google Safe Browsing (delayed) and their own database
- Avira browser safety: default settings
- Norton Safe Web: default settings
- Bitdefender Trafficlight: default settings, it rarely blocks any malware links, just old ones
- Avast Online Security: default settings, only has phishing protection, expected to score 0 against malwares
- Netcraft Extension: default settings, only has phishing protection, expected to score 0 against malwares
- uBlock Origin with some additional filters

NOTE: the result can vary from day-to-day. Tomorrow with different links, the result can be very different. All are live links but they can be dead a few minutes after the test. No duplication

Results:
result.png


Winner: Google Safe Browsing
 
Last edited:

Evjl's Rain

Level 47
Verified
Trusted
Content Creator
Malware Hunter
Apr 18, 2016
3,604
28,273
Link test 10/7/2018

chrome: 27/29
norton: 4/29!!!
Avira: 24/29
WDBP: 24/29 -> warned still downloaded
malwarebytes: 26/29
squidblacklist (ublock filter): 17/29
comodo: 27/29
Edge: 27/29

resource usage:
Norton < comodo < WDBP < ublock < malwarebytes < avira

comodo for safe websites is really really fast but when it detected malwares, it will redirect to a comodo page, which extremely slow to load (n)

WDBP needs respawn/recovery time, at least 1-2 seconds
 
Last edited:

Evjl's Rain

Level 47
Verified
Trusted
Content Creator
Malware Hunter
Apr 18, 2016
3,604
28,273
No more uBlock Origin? :cry:
yes ublock is included, squidblacklist is a filter of ublock origin
besides hphosts (malwarebytes) and squidblacklist, other filters are useless and do poorly in my tests

p/s: I also included the resource usage in the previous post
 
Last edited:

Yellowing

Level 5
Verified
Jun 7, 2018
223
440
Oh, really? :eek: That's bad. :cry: But you did the newest tests with all available uBlock filters too, just to be sure that that is still the case, right? :giggle::notworthy:
Did you also make test with multiple at the same time? For example I have uBlock, WDBP and use Chrome, so it's also SafeBrowsing enabled. This sounds like it would block everything.
 

Evjl's Rain

Level 47
Verified
Trusted
Content Creator
Malware Hunter
Apr 18, 2016
3,604
28,273
I
Oh, really? :eek: That's bad. :cry: But you did the newest tests with all available uBlock filters too, just to be sure that that is still the case, right? :giggle::notworthy:
Did you also make test with multiple at the same time? For example I have uBlock, WDBP and use Chrome, so it's also SafeBrowsing enabled. This sounds like it would block everything.
I have done some combinations before
I end up with Norton safe web + WDBP + comodo + google safe browsing
the first 3 are the lightest and yet quite effective
malwatebytes comsumes more resources and I also had a problem with a website

I did combine all ublock filters but they are not good enough compared to extensions
too many filters will slow down ublock more than using extensions
the best filters are squidblacklist and hphosts. The rest are average or almost useless
 

Brie

Level 9
Verified
Jan 1, 2018
449
1,229
which comodo? there are 3.

Comodo Online Security
Comodo
Protects against phishing and malicious websites.

--------------------------------------------------------------------------------------------------------------


COMODO Cloud Antivirus
offered by www.comodo.com
COMODO Cloud Antivirus
-
-------------------------------------------------------------------------------------------------------------



Comodo AdBlocker
offered by www.comodo.com
Based on the same open source codebase used by over 50 million people, improved by blocking malware, tracking & ALL display ads
 

goodjohnjr

Level 2
Jul 11, 2018
58
282
Link test 10/7/2018

chrome: 27/29
norton: 4/29!!!
Avira: 24/29
WDBP: 24/29 -> warned still downloaded
malwarebytes: 26/29
squidblacklist (ublock filter): 17/29
comodo: 27/29
Edge: 27/29

resource usage:
Norton < comodo < WDBP < ublock < malwarebytes < avira

comodo for safe websites is really really fast but when it detected malwares, it will redirect to a comodo page, which extremely slow to load (n)

WDBP needs respawn/recovery time, at least 1-2 seconds


Hello Evjl's Rain,

Thank you very much for creating this thread, this is my current favorite thread that I have been following for awhile now almost every day, and I finally created an account here at MalwareTips so that I can finally comment sometimes.

This thread is very helpful for those of us who try to keep our security setups updated especially at the browser / internet level, which is not only helpful for us, but is also helpful for people we know and people we help so that we can also help them stay updated security-wise.

Is there any chance that you and / or someone else on this thread will also start testing some of the removed browser extensions that used to be in the previous tests and some that were never tested here yet like: Bitdefender TrafficLight, Avast Online Security, Web Of Trust (WOT), AdGuard AdBlocker (Extension), and maybe just maybe a McAfee extension and / or Dr. Web extension and / or Panda Safe Web (if any of these last few are even worth adding)?

I would be curious to know if any of them have improved or not and / or if any of them require a recovery time like Windows Defender Browser Protection currently does.

Also it would be nice if some of the people here who use Forticlient, K9 Web Protection, Kaspersky, Sophos / HitmanPro, maybe Emsisoft, et cetera could try to convince and / or ask them to release browser extensions because their web detection seems / is said to be good; and so that those of us who do not use their other products could use their browser extensions.

Thank you very much,
-John Jr
 
Last edited:

Evjl's Rain

Level 47
Verified
Trusted
Content Creator
Malware Hunter
Apr 18, 2016
3,604
28,273
Is there any chance that you and / or someone else on this thread will also start testing some of the removed browser extensions that used to be in the previous tests and some that were never tested here yet like: Bitdefender TrafficLight, Avast Online Security, Web Of Trust (WOT), AdGuard AdBlocker (Extension), and maybe just maybe a McAfee extension and / or Dr. Web extension and / or Panda Safe Web (if any of these last few are even worth adding)?
hello thank you for comment. I really appreciate that
for these extensions, I probably won't include them in the future because they have been proven to be ineffective against malwares. In the past, I didn't test them simultaneously, I tested each link 1 by 1, so no need for more recovery time
some of them are not designed to block malwares: avast, WOT
some of them only block a link when the link is fully loaded -> too late to intercept download malwares: avast, bitdefender
Panda maliciously changes your search engine to mystart -> no one wants to use it
DrWeb: only works when you right-click on the link-> scan with drweb => so it doesn't block links when you browse
mcafee: only warns but doesn't block

Also it would be nice if some of the people here who use Forticlient, K9 Web Protection, Kaspersky, Sophos / HitmanPro, maybe Emsisoft, et cetera could try to convince and / or ask them to release browser extensions because their web detection seems / is said to be good; and so that those of us who do not use their other products could use their browser extensions.
I don't think they would, they don't want to give their products for free
BD has an extension but it is crap
avast released their extension to block phishings because avast antivirus has a weak phishing filter
norton has close to useless web filter so they have to use extension for that purpose and to supplement download insight
 
Last edited:

cryogent

Level 5
Verified
Oct 1, 2016
224
821
Red: I recommend
Blue: effective but I don't use, up to you
Orange: I don't like because they are large

Ad/tracker/widget
English filter or easylist
Fanboy’s Enhanced Tracking List

https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
https://raw.githubusercontent.com/Hubird-au/Adversity/master/Adversity.txt
https://raw.githubusercontent.com/zpacman/Blockzilla/master/Blockzilla.txt

Adguard’s Annoyance List
http://www.jabcreations.com/downloads/adblock-filters.php
https://raw.githubusercontent.com/I...k-Filters-Plus/master/uBlock-Filters-Plus.txt


optional ad/tracking:
http://1hosts.cf/
very large: https://hosts-file.net/ad_servers.txt

Malwares, ransomwares, cryptojacking, PUPs, hijacks, phishing
https://www.squidblacklist.org/downloads/dg-malicious.acl

Optional, very heavy, hphosts malwares, ransomware (emd), phishing (fsa), exploits (exp), hijack (hjk)
https://hosts-file.net/emd.txt
https://hosts-file.net/exp.txt
https://hosts-file.net/fsa.txt
https://hosts-file.net/hjk.txt


cryptojacking
https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/nocoin.txt
https://raw.githubusercontent.com/ZeroDot1/CoinBlockerLists/master/list.txt
https://raw.githubusercontent.com/ZeroDot1/CoinBlockerLists/master/list_optional.txt

alternative: EasyPrivacy

PUPs
https://hosts-file.net/pup.txt

ransomwares (optional)
https://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_IPBL.txt
https://ransomwaretracker.abuse.ch/downloads/RW_URLBL.txt


Hi Evjl's Rain, i understand that the others filters inside uBlock is not enabled and only that custom filters (Red - recomended) ?
 

Evjl's Rain

Level 47
Verified
Trusted
Content Creator
Malware Hunter
Apr 18, 2016
3,604
28,273
Hi Evjl's Rain, i understand that the others filters inside uBlock is not enabled and only that custom filters (Red - recomended) ?
I recommend you use only the red and blue filters
you may keep or disable the default filters. Up to you but disable some default and keep some to reduce the number of filters
 

Yellowing

Level 5
Verified
Jun 7, 2018
223
440
Can you make a list with the same color coding, but for the included options? Also are some of these already in uBlock?
If I understand you correctly only two of these are already in uBlock, right?
 

Evjl's Rain

Level 47
Verified
Trusted
Content Creator
Malware Hunter
Apr 18, 2016
3,604
28,273
Can you make a list with the same color coding, but for the included options? Also are some of these already in uBlock?
If I understand you correctly only two of these are already in uBlock, right?
I will try to find a way to do that because MT automatically converts them into links, which removes the color
easylist
fanboy enhanced
easyprivacy
adguard annoyance
these are the default filters in ublock, enabled or not enabled by default
 
Top