Three Years of Norton I Cannot Get Back
Three years of Norton I cannot get back. That is roughly 7,500 rupees spent on antivirus software that was, for all practical purposes, duplicating what my laptop already did for free. Every year the renewal email came in, I paid without questioning it, and Norton kept running in the background doing whatever it does. I never checked whether it actually caught anything. I never compared it to alternatives. I just paid because it felt like the responsible thing to do, like keeping a fire extinguisher in the kitchen. You do not think about whether it works until you need it, and by then you have already spent the money.
The thing is, I never needed it.
A colleague in Bangalore watched me close a Norton notification during a video call and asked why I was still paying for that. He works in IT security at a startup and had opinions. He pointed out that every Windows 10 and Windows 11 computer comes with Microsoft Defender already installed, that Defender scores almost identically to Norton in independent lab tests, and that my Norton subscription was mostly paying for a bundled VPN I had never opened, a password manager worse than the free one I was already using, and a system optimiser that was probably slowing my machine down rather than speeding it up. I had been paying 2,500 rupees a year for a product whose core function was already covered by my operating system.
I wasted that money. Saying it out loud still bothers me, but it is true. I could have spent that 7,500 rupees on a three-year VPN subscription that actually did something my computer could not do on its own, or on a Bitwarden premium account with years of runway, or on literally anything else. Instead it went to Norton for a service I did not need. That irritation is what motivated me to actually research antivirus software properly for the first time, and what I found was equal parts reassuring and infuriating.
Windows Defender in 2025
Microsoft Defender has a reputation problem. Ten years ago, it was genuinely bad. Security researchers ranked it at the bottom of antivirus products. It missed common threats. It was slow to update its definitions. If you were running Windows 7 or early Windows 8, relying on Defender alone was a risk. That reputation cemented itself in the minds of an entire generation of computer users, and it has stuck around even though the product itself has changed dramatically.
The current version of Microsoft Defender, which comes pre-installed on every Windows 10 and Windows 11 machine, is a different product from what it was a decade ago. In the most recent round of testing by AV-TEST, one of the two most respected independent antivirus testing labs in the world, Defender scored 6 out of 6 in protection, 5.5 out of 6 in performance, and 6 out of 6 in usability. Its malware detection rate sits between 99 and 100 percent across consecutive test periods. That score puts it level with Norton 360, which costs about 2,500 rupees a year for Indian users, and ahead of several other paid products. AV-Comparatives, the other major testing lab, rated Defender as an Advanced+ product in their Real-World Protection Test, the highest tier.
What does Defender actually include? Real-time scanning that checks files as they are downloaded or opened. Cloud-delivered protection that sends suspicious files to Microsoft's servers for analysis against a database updated multiple times per day. Controlled Folder Access, which blocks ransomware from encrypting your documents by restricting which programs can modify files in protected folders. A built-in firewall. SmartScreen filtering in Edge that warns you before you download known malicious files or visit known phishing websites. All of it updates silently through Windows Update. No pop-ups asking you to renew. No banners telling you to upgrade to a premium tier. No system tray icons demanding attention.
Where Defender falls short is browser protection outside of Edge. The SmartScreen filter only works in Microsoft Edge. If you use Chrome or Firefox, you lose that layer of web protection. But uBlock Origin, a free browser extension, fills this gap by blocking malicious advertising networks, phishing domains, and known malware distribution sites. Defender handling the file-level threats plus uBlock Origin handling the browser-level threats gives you a combination that matches or beats most paid antivirus suites. I have been running this exact setup for over a year now. Zero infections. Zero scares. Zero rupees spent.
The performance difference is worth mentioning too. Norton, McAfee, and Kaspersky all add measurable overhead to your system. They scan files, they monitor network traffic, they run background processes. On a new, powerful machine you might not notice. On a three or four-year-old laptop, the kind that is common in Indian households and small offices, the slowdown is real. Defender is built into the operating system and optimised to run alongside Windows without the same performance penalty. My six-year-old HP laptop runs noticeably smoother since I uninstalled Norton and let Defender take over.
Other Free Options Worth Knowing About
After cancelling Norton, I tested several free antivirus products over about six weeks to see if any of them offered something Defender did not. The short answer is that most did not. The longer answer involves some interesting trade-offs.
Kaspersky Free (rebranded a few times, currently called Kaspersky Security Cloud Free in some regions) uses the same detection engine as Kaspersky's paid products. In AV-TEST results, Kaspersky consistently scores 6 out of 6 across all categories, matching or beating every other product on the market. The free version includes real-time protection, email scanning, and web protection that works in Chrome and Firefox, which is something Defender does not offer. For anyone who primarily uses Chrome and wants browser-level threat blocking without installing uBlock Origin, Kaspersky Free is a genuine option.
But Kaspersky comes with baggage.
In June 2024, the United States government banned the sale and distribution of Kaspersky software within the US, citing concerns about the Russian government's ability to compel Kaspersky to hand over user data or use its software for cyber operations. The ban gave existing users until September 2024 to find alternatives. Kaspersky denied the allegations and challenged the decision. For Indian users, the ban does not apply directly. Kaspersky products remain available for purchase in India, and there is no equivalent restriction from the Indian government. The thing is, the concern is not that Kaspersky's software is bad at detecting malware. It is excellent at that. The concern is about what the Russian government could theoretically require the company to do with its access to user systems. For a home user in Mumbai or Delhi checking email and shopping online, this is likely a theoretical risk rather than a practical one. But it is worth knowing about before you install it, and you should make that decision with your eyes open.
Bitdefender Free is another option that scores well in lab tests, typically hitting 99 to 100 percent detection rates. The free version is stripped down to the basics: real-time scanning, web protection, and anti-phishing. It runs lighter than Kaspersky and does not nag as much about upgrading, though it does show occasional prompts. Bitdefender's paid product, Bitdefender Total Security, costs around 2,000 to 3,000 rupees per year in India for three devices and adds features like a VPN, parental controls, and a password manager. The free version lacks all of those but handles the core antivirus job well.
Avast Free has solid detection rates but a damaged reputation. In 2020, a joint investigation by Motherboard and PCMag revealed that Avast was selling detailed user browsing data through a subsidiary called Jumpshot. The data included every URL visited, search queries, GPS coordinates, and shopping behaviour, tied to device identifiers that could potentially be linked back to individual users. Avast shut down Jumpshot and apologised. The Czech data protection authority fined them. But installing an antivirus product whose parent company was caught selling user data is a hard sell, especially when Defender does the same job without the privacy concerns. Avast also constantly pushes upgrade notifications, which gets tiresome quickly.
I used each of these for about two weeks. Kaspersky Free had the best browser protection. Bitdefender Free was the lightest on system resources. Avast was the most annoying. All three detected the same test files Defender detected. In daily use, I could not tell a difference in protection between any of them and Defender. I went back to Defender because it runs invisibly, costs nothing, and does not add another company's background processes to my already slow laptop.
When Paid Antivirus Actually Makes Sense
I wasted money on Norton. That does not mean everyone who pays for antivirus is wasting money. There are specific situations where a paid product adds genuine value that free options cannot match.
Small businesses are the clearest example. If you run an office with four or five or twenty Windows machines, you need centralised management. You need to be able to see the security status of all your machines from one dashboard, push updates to all of them at once, set policies about what employees can install, and get alerts when something goes wrong on any machine. Free antivirus products do not offer any of this. Bitdefender GravityZone, Kaspersky Endpoint Security, and Norton Small Business all provide central management consoles. Bitdefender GravityZone starts at around 10,000 to 15,000 rupees per year for a small office. Kaspersky Endpoint Security is in a similar range. For a business, that cost is reasonable relative to the damage a single ransomware attack could cause.
Parental controls are another area where paid products have an edge. Microsoft Family Safety, the free option built into Windows, offers basic screen time limits and content filtering. But Kaspersky Safe Kids and Norton Family provide more granular controls: app-specific time limits, YouTube monitoring, social media activity tracking, location tracking through the child's phone, and detailed usage reports. Kaspersky Safe Kids premium costs around 1,500 rupees per year in India. Norton Family comes bundled with some Norton 360 plans. If you have children with their own devices and you want detailed control over what they access and when, these paid tools do more than the free alternative.
For individual home users who browse, shop, bank, stream, and work from one laptop or one phone, the value proposition of paid antivirus collapses. I looked at what my 2,500 rupees per year to Norton had been buying. The core malware engine was functionally identical to what Defender provides for free. The bundled VPN was capped at a few hundred megabytes per day, which is useless for anything beyond checking email. The password manager was weaker than Bitwarden's free tier. The firewall duplicated what Windows already has. The system optimiser, in my experience, made things slower rather than faster. The “identity theft monitoring” had minimal coverage in India. I was paying for a bundle of tools I did not use wrapped around a malware scanner I did not need.
Here is a comparison of what major paid products cost in India as of 2025. Norton 360 Standard runs about 2,500 to 3,000 rupees per year for one device. Bitdefender Total Security costs approximately 2,000 to 3,000 rupees per year for three devices. Kaspersky Standard costs around 1,500 to 2,000 rupees per year for one device. Quick Heal Total Security, an Indian company, charges roughly 1,500 rupees per year for one device. McAfee Total Protection sits around 2,000 to 2,500 rupees per year for five devices. Every single one of these products scores within a few percentage points of Microsoft Defender in independent lab tests. The extra money buys convenience features and add-ons, not meaningfully better malware detection.
The Scareware Problem: Fake Virus Warnings
This section exists because it affects an enormous number of Indian internet users, especially older people and anyone not deeply familiar with how browsers work.
You are browsing the web. Suddenly your screen fills with a pop-up saying your computer is infected with 47 viruses. The message looks like a Windows system alert. It might play an alarm sound. It might show a fake progress bar scanning your system. It tells you to call a phone number immediately or download a specific program to clean the infection. Sometimes it locks your browser in full-screen mode so you cannot close the tab easily. Sometimes it vibrates your phone repeatedly if you are on mobile.
This is scareware. It is not a real virus warning. Your computer is not infected. Nothing is scanning your system. The entire thing is a web page designed to look like a system alert, and its only purpose is to get you to call a fake support number, where someone will charge you 3,000 to 10,000 rupees to “fix” a problem that does not exist, or to install a program that is itself malware.
These pop-ups are extremely common on Indian websites. They appear frequently on free movie streaming sites, on piracy portals, in pop-ups from ad networks on news sites, and sometimes even as Google Ads appearing in search results. The phone numbers in these fake alerts often connect to call centres that impersonate Microsoft, Norton, or McAfee support. The person on the phone will ask for remote access to your computer using tools like TeamViewer or AnyDesk. Once they have remote access, they can install actual malware, steal files, or charge your credit card for services you do not need. The Cyber Crime cells in Mumbai, Delhi, and Bangalore regularly receive complaints about this exact scam.
How to recognise fake virus warnings. Legitimate antivirus software, including Windows Defender, does not use your web browser to display virus alerts. If a warning appears as a web page inside Chrome, Firefox, Edge, or any other browser, it is fake. Always. No exceptions. Real antivirus notifications come from the Windows notification area in the bottom right of your screen, from the system tray, or from the antivirus application window itself. They never play alarm sounds through your browser. They never tell you to call a phone number. They never ask you to download something from a link in the pop-up.
If you encounter a scareware pop-up, close the browser tab. If the pop-up has locked your browser in full-screen, press F11 to exit full-screen mode or press Ctrl+W to close the tab. If the browser is frozen entirely, press Ctrl+Alt+Delete, open Task Manager, find your browser in the list, and click End Task. On a phone, close the browser app and clear its recent data. Do not call the number. Do not download anything. Do not give anyone remote access to your device. The pop-up is a web page. Closing it is all you need to do.
I mention this because I have personally helped three relatives deal with scareware incidents in the past year. My uncle in Lucknow called the number and paid 5,000 rupees for a “virus removal” that involved the scammer running the Windows Disk Cleanup tool, which is a free built-in utility, while pretending it was a specialised cleaning process. My aunt in Indore downloaded a “free antivirus” from a scareware link that turned out to be adware, filling her browser with pop-up ads for weeks until I uninstalled it remotely. These scams target people who do not know that their computer already has working antivirus built in. Installing uBlock Origin in the browser blocks most scareware pop-ups before they even load, which is another reason I recommend it to everyone.
My Current Setup
After three years of paying Norton and six weeks of testing alternatives, this is my current setup and what it costs.
Microsoft Defender handles all malware detection, real-time scanning, firewall protection, and ransomware protection through Controlled Folder Access. It came with Windows. It updates silently. It never asks me to pay for anything. Cost: zero rupees.
uBlock Origin runs in Firefox and blocks malicious advertising networks, phishing sites, and scareware pop-ups at the browser level. This fills the gap left by Defender's SmartScreen only working in Edge. Cost: zero rupees.
Bitwarden manages all my passwords. Every account has a unique, randomly generated password stored in an encrypted vault. The browser extension auto-fills login forms. I use the free plan. Cost: zero rupees.
HTTPS-Only Mode is turned on in Firefox, forcing encrypted connections on every website. This is a browser setting, not an extension. It takes ten seconds to enable. Cost: zero rupees.
I back up my important files to an external hard drive once a week and keep a copy of critical documents on Google Drive, which gives 15 GB of free storage. If ransomware ever encrypts my laptop, I lose at most a week of work. I wipe the system, reinstall Windows, restore from backup, and move on. The external hard drive cost about 3,500 rupees three years ago. The Google Drive storage is free. The backup habit is worth more than any antivirus subscription because no antivirus catches 100 percent of ransomware, but a backup makes ransomware irrelevant.
Total annual cost of my security setup: zero rupees. Compare that to the 2,500 rupees per year I was paying Norton to do roughly the same thing Defender does for free, bundled with a collection of tools I never used. Over three years, I spent 7,500 rupees on nothing. That number still annoys me, and writing about it has not made it less annoying.
For most people reading this, Windows Defender plus common sense is enough. For business machines or anyone managing other people's devices, a paid option like Kaspersky or Bitdefender makes the admin tools worth it. But if you are just one person with one laptop, save your money.
Comments (0)