starred/adfilt
1
0
Fork 0
mirror of https://github.com/DandelionSprout/adfilt.git synced 2026-09-24 22:03:36 +01:00
Code Issues Packages Projects Releases 4 Wiki Activity

Add files via upload

Browse Source
This commit is contained in:
Imre Kristoffer Eilertsen
2022-03-19 18:43:34 +01:00
committed by GitHub
parent a1538dd7d0
commit 07e1fd02bd
7 changed files with 66 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Alternate versions Anti-Malware List/AntiMalwareABP.txt
+16 -3
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.6]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
! Version: 07March2022v2
! Version: 16March2022v1
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -289,8 +289,8 @@ azdll.net##.dllhelper-banner
! Common scam domain patterns
/^http://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$~third-party
/^https://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$~third-party
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}/$match-case,domain=com|fun|guru|life|online|pw|site|space|top
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?u=[0-9a-z]{7}&o=[0-9a-z]{7}/$match-case,domain=com|fun|guru|life|online|pw|site|space|top
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}/$domain=com|fun|guru|life|online|pw|site|space|top
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?u=[0-9a-z]{7}&o=[0-9a-z]{7}/$domain=com|fun|guru|life|online|pw|site|space|top
! https://github.com/AdguardTeam/AdguardFilters/issues/58737
/^https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php/$domain=biz|fun|live
@@ -3313,6 +3313,19 @@ zombooru.com##a[href="http://www.hard55.com"]
||sites.google.com/mytv/maintenance^$popup
! https://github.com/AdguardTeam/AdguardFilters/issues/111970
/(^|\.|://)[a-z0-9-]{2,}trk\.xyz(/|$)/$popup
! https://bazaar.abuse.ch/sample/d7308dab0110ae3bc79fd15024f5ccfcbd6e676b7c42b27a0112506e8357a6dc/ --> https://app.any.run/tasks/bc53e7a9-5fd7-4682-894d-11e48e9ea89a#
||pccrackworld.com^
||pccrackworld.com^$popup
||calsign.xyz^
||calsign.xyz^$popup
||jwq98u.xyz^
||jwq98u.xyz^$popup
||nhskuhiuscja.xyz^
||nhskuhiuscja.xyz^$popup
||mediafire.com/file/y65v1rk0zy7ot4a/The__Setup__With__File.zip/file^
||mediafire.com/file/y65v1rk0zy7ot4a/The__Setup__With__File.zip/file^$popup
||download2340.mediafire.com/eift3ac9qmig/y65v1rk0zy7ot4a/The__Setup__With__File.zip^
||download2340.mediafire.com/eift3ac9qmig/y65v1rk0zy7ot4a/The__Setup__With__File.zip^$popup
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt
+8 -1
View File
@@ -1,6 +1,6 @@
[AdGuard versions from 2019 onwards]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
! Version: 07March2022v2
! Version: 16March2022v1
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -2100,6 +2100,13 @@ zombooru.com##a[href="http://www.hard55.com"]
||sites.google.com/mytv/maintenance^$empty,important
! https://github.com/AdguardTeam/AdguardFilters/issues/111970
/(^|\.|://)[a-z0-9-]{2,}trk\.xyz(/|$)/$document,popup
! https://bazaar.abuse.ch/sample/d7308dab0110ae3bc79fd15024f5ccfcbd6e676b7c42b27a0112506e8357a6dc/ --> https://app.any.run/tasks/bc53e7a9-5fd7-4682-894d-11e48e9ea89a#
||pccrackworld.com^$empty,important
||calsign.xyz^$empty,important
||jwq98u.xyz^$empty,important
||nhskuhiuscja.xyz^$empty,important
||mediafire.com/file/y65v1rk0zy7ot4a/The__Setup__With__File.zip/file^$empty,important
||download2340.mediafire.com/eift3ac9qmig/y65v1rk0zy7ot4a/The__Setup__With__File.zip^$empty,important
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt
+13 -6
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.6]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering)
! Version: 07March2022v2
! Version: 16March2022v1
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -142,7 +142,7 @@
! ¤¤¤ "Driver" download sites that instead download PUP tools ¤¤¤
||driver-soft.com^
! ¤¤¤ Outbyte ¤¤¤
/img/pcrepairkit.png^$wikidll.com|dllfile.net|fix4dll.com|dll-files.org
||outbyte.com^
||testedforyou.net^
! ¤¤¤ PC Reviver ¤¤¤
@@ -152,10 +152,10 @@
! Common scam domain patterns
/^http://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/
/^https://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}/match-case,com|fun|guru|life|online|pw|site|space|top
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?u=[0-9a-z]{7}&o=[0-9a-z]{7}/match-case,com|fun|guru|life|online|pw|site|space|top
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}$match-case,com|fun|guru|life|online|pw|site|space|top
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?u=[0-9a-z]{7}&o=[0-9a-z]{7}$match-case,com|fun|guru|life|online|pw|site|space|top
! https://github.com/AdguardTeam/AdguardFilters/issues/58737
/^https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php/biz|fun|live
! ——— Banner for "MSN New Tab" ———
@@ -663,7 +663,7 @@
/^(https?://)?[0-9]{1,2}\.[a-z0-9-]{1,}\.biz(/|$)/
! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-428333
||safe-offers.net^
/bitcoinrevolution/lp.php^
! https://github.com/DandelionSprout/adfilt/issues/188
||gogle.net^
||quatrefeuillepolonaise.xyz^
@@ -1916,6 +1916,13 @@
! https://github.com/AdguardTeam/AdguardFilters/issues/111970
/(^|\.|://)[a-z0-9-]{2,}trk\.xyz(/|$)/
! https://bazaar.abuse.ch/sample/d7308dab0110ae3bc79fd15024f5ccfcbd6e676b7c42b27a0112506e8357a6dc/ --> https://app.any.run/tasks/bc53e7a9-5fd7-4682-894d-11e48e9ea89a#
||pccrackworld.com^
||calsign.xyz^
||jwq98u.xyz^
||nhskuhiuscja.xyz^
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
Alternate versions Anti-Malware List/AntiMalwareDomains.txt
+7 -1
View File
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
# Version: 07March2022v2
# Version: 16March2022v1
# Expires: 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -1666,6 +1666,12 @@ gluegames.xyz
pccrackworld.com
calsign.xyz
jwq98u.xyz
nhskuhiuscja.xyz
# ——— Standard malware that I stumbled upon on my own ———
downloadprovider.me
Alternate versions Anti-Malware List/AntiMalwareHosts.txt
+7 -1
View File
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
# Version: 07March2022v2
# Version: 16March2022v1
# Expires: 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -1666,6 +1666,12 @@
127.0.0.1 pccrackworld.com
127.0.0.1 calsign.xyz
127.0.0.1 jwq98u.xyz
127.0.0.1 nhskuhiuscja.xyz
# ——— Standard malware that I stumbled upon on my own ———
127.0.0.1 downloadprovider.me
Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action
+7 -1
View File
@@ -1,6 +1,6 @@
{+block}
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
# Version: 07March2022v2
# Version: 16March2022v1
# Expires: 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -1687,6 +1687,12 @@
{+block}
# ——— Standard malware that I stumbled upon on my own ———
Alternate versions Anti-Malware List/AntiMalwareTPL.tpl
+8 -1
View File
@@ -1,6 +1,6 @@
msFilterList
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
# Version: 07March2022v2
# Version: 16March2022v1
: expires = 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -1972,6 +1972,13 @@ msFilterList
-d sites.google.com mytv maintenance
# https://github.com/AdguardTeam/AdguardFilters/issues/111970
- (|\.|://)[a-z0-9-]{2,}trk\.xyz(/
# https://bazaar.abuse.ch/sample/d7308dab0110ae3bc79fd15024f5ccfcbd6e676b7c42b27a0112506e8357a6dc/ --> https://app.any.run/tasks/bc53e7a9-5fd7-4682-894d-11e48e9ea89a#
-d pccrackworld.com
-d calsign.xyz
-d jwq98u.xyz
-d nhskuhiuscja.xyz
-d mediafire.com file y65v1rk0zy7ot4a The__Setup__With__File.zip file
-d download2340.mediafire.com eift3ac9qmig y65v1rk0zy7ot4a The__Setup__With__File.zip
# ——— Standard malware that I stumbled upon on my own ———
# http://www.toorgle.net/results.php?q=fetishkitsch&security=666