From 0a80b8b1cfe973344a65ac06dfa211cbf1d4f065 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Wed, 7 Jul 2021 03:21:36 +0200 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 19 ++++++++++-- .../AntiMalwareAdGuard.txt | 19 ++++++++++-- .../AntiMalwareAdGuardHome.txt | 31 +++++++++++++------ .../AntiMalwareDomains.txt | 16 ++++++++-- .../AntiMalwareHosts.txt | 16 ++++++++-- .../AntiMalwarePrivoxy.action | 18 +++++++++-- .../AntiMalwareTPL.tpl | 19 ++++++++++-- 7 files changed, 114 insertions(+), 24 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index f8578d12e..9cbc7beeb 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 30June2021v1-Beta +! Version: 06July2021v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -295,8 +295,6 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ||speedtest.com^ ||kelkoogroup.net^ ||kelkoogroup.net^$popup -! https://github.com/DandelionSprout/adfilt/issues/210 -||whynotwin11.com^ ! β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ||ppc.netnet44.net^ @@ -1230,6 +1228,15 @@ toorgle.net##.join ||viaarena.com^$popup ! https://fx-onlinee.blogspot.com/2021/06/?r=Bergens-Tidende-Flertallet-av-fastlegene-i-Trondheim-sier-nei-til-Janssen-vaksinen-Umulig-%C3%A5-ta-det-ansvaret-seo+aj ||blogspot.com/*/?r=*-seo+aj +! Fake security sites that think every single domain is a supervirus and which try to make you install PUP (Most commonly SpyHunter) +||malwarecleanerpro.com^ +||howtofix.guide^ +||malwaresecure.com^ +||combo-fix.com^ +||regrunreanimator.com^ +||cleanpcinfections.com^ +||defeatpcvirus.com^ +||malware-remove.com^ ! β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. @@ -1339,6 +1346,12 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu| ! β€”β€”β€” Good sites used to scan domains for malware or ads, and which should/must be allowlisted to avoid having entries in various filterlists interfere with their scanning β€”β€”β€” @@||siteadvisor.com/sitereport.html^ +! β€”β€”β€” Offline-only apps trying to phone home β€”β€”β€” + +! https://fosspost.org/audacity-is-now-a-spyware/ +*$app=audacity.exe|audacity.app + + ! β€”β€”β€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) β€”β€”β€” ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index de0dc07e3..dcd363255 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from β‰₯2019] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 30June2021v1-Beta +! Version: 06July2021v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -291,8 +291,6 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) 103.224.212.249$network ||speedtest.com^$document ||kelkoogroup.net^$empty,important -! https://github.com/DandelionSprout/adfilt/issues/210 -||whynotwin11.com^$document ! β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ||ppc.netnet44.net^$document @@ -859,6 +857,15 @@ toorgle.net##.join ||viaarena.com^$empty,important ! https://fx-onlinee.blogspot.com/2021/06/?r=Bergens-Tidende-Flertallet-av-fastlegene-i-Trondheim-sier-nei-til-Janssen-vaksinen-Umulig-%C3%A5-ta-det-ansvaret-seo+aj ||blogspot.com/*/?r=*-seo+aj$document +! Fake security sites that think every single domain is a supervirus and which try to make you install PUP (Most commonly SpyHunter) +||malwarecleanerpro.com^$document +||howtofix.guide^$document +||malwaresecure.com^$document +||combo-fix.com^$document +||regrunreanimator.com^$document +||cleanpcinfections.com^$document +||defeatpcvirus.com^$document +||malware-remove.com^$document ! β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. @@ -970,6 +977,12 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu| ! β€”β€”β€” Good sites used to scan domains for malware or ads, and which should/must be allowlisted to avoid having entries in various filterlists interfere with their scanning β€”β€”β€” @@||siteadvisor.com/sitereport.html^ +! β€”β€”β€” Offline-only apps trying to phone home β€”β€”β€” +!#if adguard +! https://fosspost.org/audacity-is-now-a-spyware/ +*$app=audacity.exe|audacity.app +!#endif + ! β€”β€”β€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) β€”β€”β€” ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^$document diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 6edb0cf41..29951ae8a 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home) -! Version: 30June2021v1-Beta +! Version: 06July2021v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -144,7 +144,7 @@ ! https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/ ! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10 ! https://www.majorgeeks.com/files/details/patch_my_pc.html -||majorgeeks.com/images/icons/red_icon_18x17px.png + ! https://www.2-spyware.com/remove-redirector-gvt1-com.html ! ScanUtilities ! https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/ @@ -227,8 +227,6 @@ 103.224.212.249 ||speedtest.com^ ||kelkoogroup.net^ -! https://github.com/DandelionSprout/adfilt/issues/210 -||whynotwin11.com^ ! β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ||ppc.netnet44.net^ @@ -304,9 +302,9 @@ ! Adblock Plus list maintainer weekly reports ||pinoy-offers.com^ ||googleboost.xyz^ -||bemobtracks.com^popup -||bemobtrk.com^popup -||bemobpath.com^popup +||bemobtracks.com^ +||bemobtrk.com^ +||bemobpath.com^ ||couponbybox.com^ 34.204.214.165 54.85.113.62 @@ -789,7 +787,16 @@ ||inside3d.com^ ||viaarena.com^ ! https://fx-onlinee.blogspot.com/2021/06/?r=Bergens-Tidende-Flertallet-av-fastlegene-i-Trondheim-sier-nei-til-Janssen-vaksinen-Umulig-%C3%A5-ta-det-ansvaret-seo+aj -||blogspot.com/*/?r=*-seo+aj + +! Fake security sites that think every single domain is a supervirus and which try to make you install PUP (Most commonly SpyHunter) +||malwarecleanerpro.com^ +||howtofix.guide^ +||malwaresecure.com^ +||combo-fix.com^ +||regrunreanimator.com^ +||cleanpcinfections.com^ +||defeatpcvirus.com^ +||malware-remove.com^ ! β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. @@ -906,7 +913,13 @@ ! β€”β€”β€” Good sites used to scan domains for malware or ads, and which should/must be allowlisted to avoid having entries in various filterlists interfere with their scanning β€”β€”β€” -@@||siteadvisor.com/sitereport.html^ + + +! β€”β€”β€” Offline-only apps trying to phone home β€”β€”β€” + +! https://fosspost.org/audacity-is-now-a-spyware/ +*$app=audacity.exe|audacity.app + ! β€”β€”β€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) β€”β€”β€” ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index ddb44c832..f7884fcb4 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 30June2021v1-Beta +# Version: 06July2021v1-Beta # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -160,7 +160,6 @@ dwarffortresswiki.com 103.224.212.249 speedtest.com kelkoogroup.net -whynotwin11.com # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ppc.netnet44.net @@ -671,6 +670,15 @@ messium.info inside3d.com viaarena.com +# Fake security sites that think every single domain is a supervirus and which try to make you install PUP (Most commonly SpyHunter) +malwarecleanerpro.com +howtofix.guide +malwaresecure.com +combo-fix.com +regrunreanimator.com +cleanpcinfections.com +defeatpcvirus.com +malware-remove.com # β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. @@ -722,6 +730,10 @@ githubnt.com # β€”β€”β€” Good sites used to scan domains for malware or ads, and which should/must be allowlisted to avoid having entries in various filterlists interfere with their scanning β€”β€”β€” +# β€”β€”β€” Offline-only apps trying to phone home β€”β€”β€” + + + # β€”β€”β€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) β€”β€”β€” if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 4818dd292..5489acb79 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 30June2021v1-Alpha +# Version: 06July2021v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -160,7 +160,6 @@ 127.0.0.1 103.224.212.249 127.0.0.1 speedtest.com 127.0.0.1 kelkoogroup.net -127.0.0.1 whynotwin11.com # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” 127.0.0.1 ppc.netnet44.net @@ -671,6 +670,15 @@ 127.0.0.1 inside3d.com 127.0.0.1 viaarena.com +# Fake security sites that think every single domain is a supervirus and which try to make you install PUP (Most commonly SpyHunter) +127.0.0.1 malwarecleanerpro.com +127.0.0.1 howtofix.guide +127.0.0.1 malwaresecure.com +127.0.0.1 combo-fix.com +127.0.0.1 regrunreanimator.com +127.0.0.1 cleanpcinfections.com +127.0.0.1 defeatpcvirus.com +127.0.0.1 malware-remove.com # β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. @@ -722,6 +730,10 @@ # β€”β€”β€” Good sites used to scan domains for malware or ads, and which should/must be allowlisted to avoid having entries in various filterlists interfere with their scanning β€”β€”β€” +# β€”β€”β€” Offline-only apps trying to phone home β€”β€”β€” + + + # β€”β€”β€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) β€”β€”β€” 127.0.0.1 if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 107ef712b..d6a88cc16 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 30June2021v1-Alpha +# Version: 06July2021v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -171,7 +171,6 @@ .103.224.212.249 .speedtest.com .kelkoogroup.net -.whynotwin11.com {+block} # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” @@ -693,6 +692,15 @@ .inside3d.com .viaarena.com .blogspot.com/*/?r=*-seo+aj +# Fake security sites that think every single domain is a supervirus and which try to make you install PUP (Most commonly SpyHunter) +.malwarecleanerpro.com +.howtofix.guide +.malwaresecure.com +.combo-fix.com +.regrunreanimator.com +.cleanpcinfections.com +.defeatpcvirus.com +.malware-remove.com {+block} # β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” @@ -754,6 +762,12 @@ {+block} # β€”β€”β€” Good sites used to scan domains for malware or ads, and which should/must be allowlisted to avoid having entries in various filterlists interfere with their scanning β€”β€”β€” +{+block} +# β€”β€”β€” Offline-only apps trying to phone home β€”β€”β€” +# +* +# + {+block} # β€”β€”β€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) β€”β€”β€” .if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 1f36b2e56..72518ed19 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 30June2021v1-Beta +# Version: 06July2021v1-Beta : expires = 5 # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -221,8 +221,6 @@ msFilterList -d 103.224.212.249 -d speedtest.com -d kelkoogroup.net -# https://github.com/DandelionSprout/adfilt/issues/210 --d whynotwin11.com # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” -d ppc.netnet44.net @@ -783,6 +781,15 @@ msFilterList -d viaarena.com # https://fx-onlinee.blogspot.com/2021/06/?r=Bergens-Tidende-Flertallet-av-fastlegene-i-Trondheim-sier-nei-til-Janssen-vaksinen-Umulig-%C3%A5-ta-det-ansvaret-seo+aj -d blogspot.com * ?r=*-seo+aj +# Fake security sites that think every single domain is a supervirus and which try to make you install PUP (Most commonly SpyHunter) +-d malwarecleanerpro.com +-d howtofix.guide +-d malwaresecure.com +-d combo-fix.com +-d regrunreanimator.com +-d cleanpcinfections.com +-d defeatpcvirus.com +-d malware-remove.com # β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and or bricking the phone. @@ -839,6 +846,12 @@ msFilterList # β€”β€”β€” Good sites used to scan domains for malware or ads, and which should must be allowlisted to avoid having entries in various filterlists interfere with their scanning β€”β€”β€” +# β€”β€”β€” Offline-only apps trying to phone home β€”β€”β€” + +# https://fosspost.org/audacity-is-now-a-spyware/ +* + + # β€”β€”β€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) β€”β€”β€” -d if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data