From 039df4fe1d853c40f98e777bb98de6fe9c7b2073 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Wed, 21 Oct 2020 07:36:15 +0200 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 11 ++++++++--- .../AntiMalwareAdGuard.txt | 13 +++++++++---- .../AntiMalwareAdGuardHome.txt | 11 ++++++++--- .../AntiMalwareDomains.txt | 10 +++++++--- .../AntiMalwareHosts.txt | 10 +++++++--- .../AntiMalwarePrivoxy.action | 10 +++++++--- .../AntiMalwareTPL.tpl | 11 ++++++++--- 7 files changed, 54 insertions(+), 22 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index e38458d75..e24c20c14 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.4] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 13October2020v1-Beta +! Version: 21October2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -26,6 +26,7 @@ ||gdn^ ||bid^ ||top^ +||club^ ! β€”β€”β€” Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) β€”β€”β€” @@ -72,9 +73,13 @@ ||dreamlinux.info^ ||hacktolive.org^ ||mandriva.com^ -! Other +! Fraudulent browser extensions ||ublock.org^ ||138.68.252.54^ +||jspenguin2017.github.io^ +||useragentswitch.com^ +||dev-nano.com^ +/socket.io^ ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” ||funeducation.com^ @@ -311,7 +316,6 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ! https://github.com/AdguardTeam/AdguardFilters/issues/61743 /://(www\.)?cunt[a-z]{3,8}\.com(/|$)/ ! https://github.com/easylist/easylist/issues/6111 -||gridserver.com^ ||watch-video.net^ ||findmedia.biz^ ||whiteclick.biz^ @@ -403,6 +407,7 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ! β€”β€”β€” Temp hotfix for https://github.com/AdguardTeam/AdGuardHome/issues/1835 β€”β€”β€” /\\/ @@/_udp\.\\/ +@@/_udp\..*\\/ ! Oddly enough, there seems to be no need to couple it with "@@/:\\/", since web browsers convert Windows filenames from backwards to forwards slashes. ! β€”β€”β€” User-submitted entries β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index ced177802..57f2b283a 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard β‰₯6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 13October2020v1-Beta +! Version: 21October2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -26,6 +26,7 @@ ||gdn^$doc ||bid^$doc ||top^$doc +||club^$doc ! β€”β€”β€” Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) β€”β€”β€” google.*##.rc:has(a[href*=".tk/"]:not([href*="coolcmd.tk"]):not([href*="budterence.tk"]):not([href*="google.tk"]):not([href*="transportnews.tk"]):not([href*="c0d3c.tk"]):not([href*="anonytext.tk"]):not([href*="tokelau-info.tk"]):not([href*="fakaofo.tk"]):not([href*="loljp-wiki.tk"]):not([href*="ninetail.tk"]):not([href*="goshujin.tk"]):not([href*="graph.tk"]):not([href*="haopro.tk"]):not([href*="ps2online.tk"]):not([href*="nolfrevival.tk"]):not([href*="steamroller.tk"])) @@ -99,9 +100,13 @@ google.*#?#*:has(> * > a[oncontextmenu][href^="https://books.google."]) ||dreamlinux.info^$doc ||hacktolive.org^$doc ||mandriva.com^$doc -! Other +! Fraudulent browser extensions ||ublock.org^$doc 138.68.252.54$network +||jspenguin2017.github.io^$doc +||useragentswitch.com^$empty,important +||dev-nano.com^$empty,important +/socket.io^$empty,important ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” ||funeducation.com^$doc @@ -339,7 +344,6 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ! https://github.com/AdguardTeam/AdguardFilters/issues/61743 /://(www\.)?cunt[a-z]{3,8}\.com(/|$)/ ! https://github.com/easylist/easylist/issues/6111 -||gridserver.com^ ||watch-video.net^$empty,important ||findmedia.biz^$empty,important ||whiteclick.biz^$empty,important @@ -355,7 +359,7 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ||hardreset.info^$doc ! β€”β€”β€” If you run a webserver of any sort, and you get incoming requests to resolve these domains, that's rarely a good sign for that requestor's intentions β€”β€”β€” -!#if no +!#if false ||version.bind^ |pizzaseo.com^ ||version.server^ @@ -433,6 +437,7 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ! β€”β€”β€” Temp hotfix for https://github.com/AdguardTeam/AdGuardHome/issues/1835 β€”β€”β€” /\\/$doc @@/_udp\.\\/ +@@/_udp\..*\\/ ! Oddly enough, there seems to be no need to couple it with "@@/:\\/", since web browsers convert Windows filenames from backwards to forwards slashes. ! β€”β€”β€” User-submitted entries β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 0bb6c333f..b312019f4 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.4] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home) -! Version: 13October2020v1-Beta +! Version: 21October2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -63,6 +63,7 @@ ||gdn^ ||bid^ ||top^ +||club^ ! β€”β€”β€” Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) β€”β€”β€” @@ -109,9 +110,13 @@ ||dreamlinux.info^ ||hacktolive.org^ ||mandriva.com^ -! Other +! Fraudulent browser extensions ||ublock.org^ 138.68.252.54 +||jspenguin2017.github.io^ +||useragentswitch.com^ +||dev-nano.com^ +/socket.io^ ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” ||funeducation.com^ @@ -273,7 +278,6 @@ ! https://github.com/AdguardTeam/AdguardFilters/issues/61743 /://(www\.)?cunt[a-z]{3,8}\.com(/|$)/ ! https://github.com/easylist/easylist/issues/6111 -||gridserver.com^ ||watch-video.net^ ||findmedia.biz^ ||whiteclick.biz^ @@ -367,6 +371,7 @@ ! β€”β€”β€” Temp hotfix for https://github.com/AdguardTeam/AdGuardHome/issues/1835 β€”β€”β€” /\\/ @@/_udp\.\\/ +@@/_udp\..*\\/ ! Oddly enough, there seems to be no need to couple it with "@@/:\\/", since web browsers convert Windows filenames from backwards to forwards slashes. ! β€”β€”β€” User-submitted entries β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 664d34e4e..22c12970a 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 13October2020v1-Beta +# Version: 21October2020v1-Beta # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -24,6 +24,7 @@ + # β€”β€”β€” Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) β€”β€”β€” # β€”β€”β€” You know those ultra-fraudulent auto-generated things that clutter up Google searches? These entries should remove some of them. β€”β€”β€” @@ -68,9 +69,13 @@ dreamlinux.net dreamlinux.info hacktolive.org mandriva.com -# Other +# Fraudulent browser extensions ublock.org 138.68.252.54 +jspenguin2017.github.io +useragentswitch.com +dev-nano.com + # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” funeducation.com @@ -199,7 +204,6 @@ ttnrd.com deviuser.com -gridserver.com watch-video.net findmedia.biz whiteclick.biz diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index bf55eb32a..378214bc4 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 13October2020v1-Alpha +# Version: 21October2020v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -24,6 +24,7 @@ + # β€”β€”β€” Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) β€”β€”β€” # β€”β€”β€” You know those ultra-fraudulent auto-generated things that clutter up Google searches? These entries should remove some of them. β€”β€”β€” @@ -68,9 +69,13 @@ 127.0.0.1 dreamlinux.info 127.0.0.1 hacktolive.org 127.0.0.1 mandriva.com -# Other +# Fraudulent browser extensions 127.0.0.1 ublock.org www.ublock.org demo.ublock.org 127.0.0.1 138.68.252.54 +127.0.0.1 jspenguin2017.github.io +127.0.0.1 useragentswitch.com +127.0.0.1 dev-nano.com + # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” 127.0.0.1 funeducation.com @@ -199,7 +204,6 @@ 127.0.0.1 deviuser.com -127.0.0.1 gridserver.com 127.0.0.1 watch-video.net 127.0.0.1 findmedia.biz 127.0.0.1 whiteclick.biz diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 303d92069..50c359827 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 13October2020v1-Alpha +# Version: 21October2020v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -25,6 +25,7 @@ .gdn .bid .top +.club {+block} # β€”β€”β€” Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) β€”β€”β€” @@ -74,9 +75,13 @@ .dreamlinux.info .hacktolive.org .mandriva.com -# Other +# Fraudulent browser extensions .ublock.org .138.68.252.54 +.jspenguin2017.github.io +.useragentswitch.com +.dev-nano.com +/socket.io {+block} # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” @@ -221,7 +226,6 @@ # β€”β€”β€” Found in random witness reports online β€”β€”β€” .deviuser.com /scan-update-and-protect-your-browser.html -.gridserver.com .watch-video.net .findmedia.biz .whiteclick.biz diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 5dc749000..0d9d62b4b 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 13October2020v1-Beta +# Version: 21October2020v1-Beta : expires = 5 # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -58,6 +58,7 @@ msFilterList + # β€”β€”β€” Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) β€”β€”β€” # β€”β€”β€” You know those ultra-fraudulent auto-generated things that clutter up Google searches? These entries should remove some of them. β€”β€”β€” @@ -103,9 +104,13 @@ msFilterList -d dreamlinux.info -d hacktolive.org -d mandriva.com -# Other +# Fraudulent browser extensions -d ublock.org -d 138.68.252.54 +-d jspenguin2017.github.io +-d useragentswitch.com +-d dev-nano.com +- socket.io # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” -d funeducation.com @@ -267,7 +272,6 @@ msFilterList # https://github.com/AdguardTeam/AdguardFilters/issues/61743 - ://(www\.)?cunt[a-z]{3,8}\.com(/ # https://github.com/easylist/easylist/issues/6111 --d gridserver.com -d watch-video.net -d findmedia.biz -d whiteclick.biz @@ -313,6 +317,7 @@ msFilterList # β€”β€”β€” Temp hotfix for https://github.com/AdguardTeam/AdGuardHome/issues/1835/β€”β€”β€” - \\ + # Oddly enough, there seems to be no need to couple it with "@@ :\\ ", since web browsers convert Windows filenames from backwards to forwards slashes. # β€”β€”β€” User-submitted entries β€”β€”β€”