diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 985f0e774..f8cb07cd1 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 20December2021v1-Beta +! Version: 03January2022v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -238,6 +238,21 @@ howtoremove.guide#?#.entry-content > div:-abp-contains(Special Offer) ! https://www.2-spyware.com/remove-redirector-gvt1-com.html 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list_w > .ar_block_description 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(SpyHunter) +guide##a[href*="download.enigmasoftware.com/spyhunter-free-download/stpl_94/SpyHunter-Installer.exe"] +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-968070041 +howtoremove.guide##[id*="newage"] +howtoremove.guide#?#.wp-block-table:-abp-has(.banner) +malwareguide112.com##.tdb-block-inner > div:-abp-contains(Best Offer) +virusresearch.org##.virus-before-content +virusresearch.org##.q2w3-fixed-widget-container +virusresearch.org##.virus-after-fourth-h2 +virusresearch.org##.virus-after-content +! https://www.cyclonis.com/how-to-create-gmail-account-without-phone-number/ +cyclonis.com##div.rotatead-container:-abp-has(.download[data-params*="dl.enigmasoftware.com"]) +! https://www.2-viruses.com/remove-ad-spam-press-allow-to-continue +2-viruses.com##.active.prods-win.prod-download +||2-viruses.com/downloads/spyhunter2^ +||2-viruses.com/downloads/spyhunter2^$popup ! ¤¤¤ Restoro ¤¤¤ ! https://www.windowsdispatch.com/fix-system-restore-0x81000203-error-code/ windowsdispatch.com##strong @@ -485,6 +500,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||newpage.in^ ||digitalantivirus.org^ ||digitalantivirus.org^$popup +*/mcaf04/ ||34.204.214.165^ ||54.85.113.62^ ||54.205.83.61^ @@ -2669,6 +2685,98 @@ zombooru.com##a[href="http://www.hard55.com"] ||d13pxqgp3ixdbh.cloudfront.net^$frame ||systemupdatecontrol.com^ ||systemupdatecontrol.com^$popup +! https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ +||mozicrack.com^ +||mozicrack.com^$popup +||download-srvr.xyz^ +||download-srvr.xyz^$popup +||134.122.115.190^ +||134.122.115.190^$popup +||cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com^ +||cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com^$popup +! https://github.com/uBlockOrigin/uBlock-issues/issues/1774#issuecomment-1000722777 +||viewty.xyz^ +||viewty.xyz^$popup +||landing.marketstm.com^ +! https://scammer.info/t/airdrop-discord-nitro-with-steam-scam-7-977-525-68-47/86156 +||discrode-app.com^ +||discrode-app.com^$popup +! https://scammer.info/t/1-month-nitro-for-free-take-it-scam/86166 +||discrode-gifte.club^ +||discrode-gifte.club^$popup +! fake MediaFire scam domains +||overeverything.co^ +||wrappdt.cloudcircuit.co^ +||blacknumbers.co^ +||hunterbid.exacad.co^ +||songlos.com^ +||lorweo.info^ +||lorweo.info^$popup +||royaltees.co^ +||royaltees.co^$popup + + +||qilihi.correctwantserve.top^$popup +||hunterrandom.latabledusanglier.com^ +||hunterrandom.latabledusanglier.com^$popup +||insload.bainisgaingeals.com^ +||viahunter.lafabricagourmet.co^ +||findes.co^ +||vitafox.findes.co^ +||ooload.qualitywatches.co^ +||locatorblog.sukabumitoday.co^ +||locatorblog.sukabumitoday.co^$popup +||sukabumitoday.co^ + +||supersong.nl/upload/6277.rar^ +||supersong.nl/upload/6277.rar^$popup +||nlnvan.garydouglasnewell.co^ +||nlnvan.garydouglasnewell.co^$popup +||garydouglasnewell.co^ +||partdate.yaspiq.co^ +||jmtrading.co^ +||monkeyselite.tonick.co^ +||rappersonal.paradisedestination.co^ +||rappersonal.paradisedestination.co^$popup + +||kqnpcp.friendmagnetcool.top^$popup +||contactalliance.mbogi.co^ +||contactalliance.mbogi.co^$popup +||kitago.info^ +! https://bazaar.abuse.ch/sample/84d93b2fd2597da5d611165cbad0b252569a837c56a94a42849f2bedc8af033a/ +||freeprosoftz.com^ +||freeprosoftz.com^$popup +||9oi6khy8.xyz^ +||9oi6khy8.xyz^$popup +||kjgfj.xyz^ +||kjgfj.xyz^$popup +||9oijgkh.xyz^ +||9oijgkh.xyz^$popup +||uyyd.xyz^ +||uyyd.xyz^$popup +||oiiuuyjk.xyz^ +||oiiuuyjk.xyz^$popup +||mediafire.com/file/pu0m2luacc3fh8h/file-password___2345.rar/file +||mediafire.com/file/pu0m2luacc3fh8h/file-password___2345.rar/file$popup +||mediafire.com/coe39m9f9tyg/pu0m2luacc3fh8h/file-password___2345%282%29.rar +||mediafire.com/coe39m9f9tyg/pu0m2luacc3fh8h/file-password___2345%282%29.rar$popup +! fake Flash Player +||lekms.com^ +||restorehighlyadvancedthefile.vip^ +||restorehighlyadvancedthefile.vip^$popup +||restorecurrenthighlythefile.vip^ +||restorecurrenthighlythefile.vip^$popup +||microsoftedge.microsoft.com/addons/detail/ecosia-the-search-engin/fhfidmlnclkepgapcephbaciajegheco^ +||new-meet-dating.life^ +||wellhello.com^ +! https://github.com/uBlockOrigin/uAssets/pull/11161 +||flashplayer-cn.com^ +||flashplayer-cn.com^$popup +! https://github.com/AdguardTeam/AdguardFilters/issues/103475 +||ru.com^ +||ru.com^$popup +||141.8.226.34^ +||141.8.226.34^$popup ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 1d249efd2..aa35c9161 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from ≥2019] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 20December2021v1-Beta +! Version: 03January2022v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -235,6 +235,20 @@ howtoremove.guide#?#.entry-content > div:-abp-contains(Special Offer) ! https://www.2-spyware.com/remove-redirector-gvt1-com.html 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list_w > .ar_block_description 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(SpyHunter) +guide##a[href*="download.enigmasoftware.com/spyhunter-free-download/stpl_94/SpyHunter-Installer.exe"] +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-968070041 +howtoremove.guide##[id*="newage"] +howtoremove.guide#?#.wp-block-table:-abp-has(.banner) +malwareguide112.com##.tdb-block-inner > div:has-text(Best Offer) +virusresearch.org##.virus-before-content +virusresearch.org##.q2w3-fixed-widget-container +virusresearch.org##.virus-after-fourth-h2 +virusresearch.org##.virus-after-content +! https://www.cyclonis.com/how-to-create-gmail-account-without-phone-number/ +cyclonis.com##div.rotatead-container:has(.download[data-params*="dl.enigmasoftware.com"]) +! https://www.2-viruses.com/remove-ad-spam-press-allow-to-continue +2-viruses.com##.active.prods-win.prod-download +||2-viruses.com/downloads/spyhunter2^$empty,important ! ¤¤¤ Restoro ¤¤¤ ! https://www.windowsdispatch.com/fix-system-restore-0x81000203-error-code/ windowsdispatch.com##strong @@ -454,6 +468,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||couponbybox.com^$document ||newpage.in^$document ||digitalantivirus.org^$empty,important +*/mcaf04/$document 34.204.214.165$network 54.85.113.62$network 54.205.83.61$network @@ -1742,6 +1757,68 @@ zombooru.com##a[href="http://www.hard55.com"] ||dgu9g3a2kzqx2.cloudfront.net^$document,frame ||d13pxqgp3ixdbh.cloudfront.net^$document,frame ||systemupdatecontrol.com^$empty,important +! https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ +||mozicrack.com^$empty,important +||download-srvr.xyz^$empty,important +134.122.115.190$network +||cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com^$empty,important +! https://github.com/uBlockOrigin/uBlock-issues/issues/1774#issuecomment-1000722777 +||viewty.xyz^$empty,important +||landing.marketstm.com^$document +! https://scammer.info/t/airdrop-discord-nitro-with-steam-scam-7-977-525-68-47/86156 +||discrode-app.com^$empty,important +! https://scammer.info/t/1-month-nitro-for-free-take-it-scam/86166 +||discrode-gifte.club^$empty,important +! fake MediaFire scam domains +||overeverything.co^$document +||wrappdt.cloudcircuit.co^$document +||blacknumbers.co^$document +||hunterbid.exacad.co^$document +||songlos.com^$document +||lorweo.info^$empty,important +||royaltees.co^$empty,important + + +||hunterrandom.latabledusanglier.com^$empty,important +||insload.bainisgaingeals.com^$document +||viahunter.lafabricagourmet.co^$document +||findes.co^$document +||vitafox.findes.co^$document +||ooload.qualitywatches.co^$document +||locatorblog.sukabumitoday.co^$empty,important +||sukabumitoday.co^$document + +||supersong.nl/upload/6277.rar^$empty,important +||nlnvan.garydouglasnewell.co^$empty,important +||garydouglasnewell.co^$document +||partdate.yaspiq.co^$document +||jmtrading.co^$document +||monkeyselite.tonick.co^$document +||rappersonal.paradisedestination.co^$empty,important + +||contactalliance.mbogi.co^$empty,important +||kitago.info^$document +! https://bazaar.abuse.ch/sample/84d93b2fd2597da5d611165cbad0b252569a837c56a94a42849f2bedc8af033a/ +||freeprosoftz.com^$empty,important +||9oi6khy8.xyz^$empty,important +||kjgfj.xyz^$empty,important +||9oijgkh.xyz^$empty,important +||uyyd.xyz^$empty,important +||oiiuuyjk.xyz^$empty,important +||mediafire.com/file/pu0m2luacc3fh8h/file-password___2345.rar/file$empty,important +||mediafire.com/coe39m9f9tyg/pu0m2luacc3fh8h/file-password___2345%282%29.rar$empty,important +! fake Flash Player +||lekms.com^$document +||restorehighlyadvancedthefile.vip^$empty,important +||restorecurrenthighlythefile.vip^$empty,important +||microsoftedge.microsoft.com/addons/detail/ecosia-the-search-engin/fhfidmlnclkepgapcephbaciajegheco^$document +||new-meet-dating.life^$document +||wellhello.com^$document +! https://github.com/uBlockOrigin/uAssets/pull/11161 +||flashplayer-cn.com^$empty,important +! https://github.com/AdguardTeam/AdguardFilters/issues/103475 +||ru.com^$empty,important +141.8.226.34$network ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 2b2b96fcf..dc438486d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 20December2021v1-Beta +! Version: 03January2022v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -129,6 +129,10 @@ ! ¤¤¤ SpyHunter links ¤¤¤ ! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/ ! https://www.2-spyware.com/remove-redirector-gvt1-com.html +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-968070041 +! https://www.cyclonis.com/how-to-create-gmail-account-without-phone-number/ +! https://www.2-viruses.com/remove-ad-spam-press-allow-to-continue + ! ¤¤¤ Restoro ¤¤¤ ! https://www.windowsdispatch.com/fix-system-restore-0x81000203-error-code/ ! https://dlldownloads.com/xlive-dll/ @@ -280,6 +284,7 @@ ||couponbybox.com^ ||newpage.in^ ||digitalantivirus.org^ +*/mcaf04/ 34.204.214.165 54.85.113.62 54.205.83.61 @@ -1568,6 +1573,68 @@ ||dgu9g3a2kzqx2.cloudfront.net^frame ||d13pxqgp3ixdbh.cloudfront.net^frame ||systemupdatecontrol.com^ +! https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ +||mozicrack.com^ +||download-srvr.xyz^ +134.122.115.190 +||cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com^ +! https://github.com/uBlockOrigin/uBlock-issues/issues/1774#issuecomment-1000722777 +||viewty.xyz^ +||landing.marketstm.com^ +! https://scammer.info/t/airdrop-discord-nitro-with-steam-scam-7-977-525-68-47/86156 +||discrode-app.com^ +! https://scammer.info/t/1-month-nitro-for-free-take-it-scam/86166 +||discrode-gifte.club^ +! fake MediaFire scam domains +||overeverything.co^ +||wrappdt.cloudcircuit.co^ +||blacknumbers.co^ +||hunterbid.exacad.co^ +||songlos.com^ +||lorweo.info^ +||royaltees.co^ + + +||hunterrandom.latabledusanglier.com^ +||insload.bainisgaingeals.com^ +||viahunter.lafabricagourmet.co^ +||findes.co^ +||vitafox.findes.co^ +||ooload.qualitywatches.co^ +||locatorblog.sukabumitoday.co^ +||sukabumitoday.co^ + + +||nlnvan.garydouglasnewell.co^ +||garydouglasnewell.co^ +||partdate.yaspiq.co^ +||jmtrading.co^ +||monkeyselite.tonick.co^ +||rappersonal.paradisedestination.co^ + +||contactalliance.mbogi.co^ +||kitago.info^ +! https://bazaar.abuse.ch/sample/84d93b2fd2597da5d611165cbad0b252569a837c56a94a42849f2bedc8af033a/ +||freeprosoftz.com^ +||9oi6khy8.xyz^ +||kjgfj.xyz^ +||9oijgkh.xyz^ +||uyyd.xyz^ +||oiiuuyjk.xyz^ + + +! fake Flash Player +||lekms.com^ +||restorehighlyadvancedthefile.vip^ +||restorecurrenthighlythefile.vip^ + +||new-meet-dating.life^ +||wellhello.com^ +! https://github.com/uBlockOrigin/uAssets/pull/11161 +||flashplayer-cn.com^ +! https://github.com/AdguardTeam/AdguardFilters/issues/103475 +||ru.com^ +141.8.226.34 ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index ac1056641..406b3fbcf 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 20December2021v1-Beta +# Version: 03January2022v1-Beta # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -110,6 +110,7 @@ officialiqtests.com # ¤¤¤ Driverpack Online (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ¤¤¤ google-analytics.com # ¤¤¤ SpyHunter links ¤¤¤ + # ¤¤¤ Restoro ¤¤¤ # ¤¤¤ "Driver" download sites that instead download PUP tools ¤¤¤ driver-soft.com @@ -1333,6 +1334,61 @@ d13nu0oomnx5ti.cloudfront.net dgu9g3a2kzqx2.cloudfront.net d13pxqgp3ixdbh.cloudfront.net systemupdatecontrol.com +mozicrack.com +download-srvr.xyz +134.122.115.190 +cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com +viewty.xyz +landing.marketstm.com +discrode-app.com +discrode-gifte.club +# fake MediaFire scam domains +overeverything.co +wrappdt.cloudcircuit.co +blacknumbers.co +hunterbid.exacad.co +songlos.com +lorweo.info +royaltees.co +correctwantserve.top +qilihi.correctwantserve.top +hunterrandom.latabledusanglier.com +insload.bainisgaingeals.com +viahunter.lafabricagourmet.co +findes.co +vitafox.findes.co +ooload.qualitywatches.co +locatorblog.sukabumitoday.co +sukabumitoday.co +glofwy.sugarfinehot.top + +nlnvan.garydouglasnewell.co +garydouglasnewell.co +partdate.yaspiq.co +jmtrading.co +monkeyselite.tonick.co +rappersonal.paradisedestination.co +kqnpcp.friendmagnetcool.top +contactalliance.mbogi.co +kitago.info +freeprosoftz.com +9oi6khy8.xyz +kjgfj.xyz +9oijgkh.xyz +uyyd.xyz +oiiuuyjk.xyz + + +# fake Flash Player +lekms.com +restorehighlyadvancedthefile.vip +restorecurrenthighlythefile.vip + +new-meet-dating.life +wellhello.com +flashplayer-cn.com +ru.com +141.8.226.34 # ——— Standard malware that I stumbled upon on my own ——— downloadprovider.me diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index ac9cb02fa..318d67f80 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 20December2021v1-Alpha +# Version: 03January2022v1-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -110,6 +110,7 @@ # ¤¤¤ Driverpack Online (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ¤¤¤ 127.0.0.1 google-analytics.com # ¤¤¤ SpyHunter links ¤¤¤ + # ¤¤¤ Restoro ¤¤¤ # ¤¤¤ "Driver" download sites that instead download PUP tools ¤¤¤ 127.0.0.1 driver-soft.com @@ -1333,6 +1334,61 @@ 127.0.0.1 dgu9g3a2kzqx2.cloudfront.net 127.0.0.1 d13pxqgp3ixdbh.cloudfront.net 127.0.0.1 systemupdatecontrol.com +127.0.0.1 mozicrack.com +127.0.0.1 download-srvr.xyz +127.0.0.1 134.122.115.190 +127.0.0.1 cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com +127.0.0.1 viewty.xyz +127.0.0.1 landing.marketstm.com +127.0.0.1 discrode-app.com +127.0.0.1 discrode-gifte.club +# fake MediaFire scam domains +127.0.0.1 overeverything.co +127.0.0.1 wrappdt.cloudcircuit.co +127.0.0.1 blacknumbers.co +127.0.0.1 hunterbid.exacad.co +127.0.0.1 songlos.com +127.0.0.1 lorweo.info +127.0.0.1 royaltees.co +127.0.0.1 correctwantserve.top +127.0.0.1 qilihi.correctwantserve.top +127.0.0.1 hunterrandom.latabledusanglier.com +127.0.0.1 insload.bainisgaingeals.com +127.0.0.1 viahunter.lafabricagourmet.co +127.0.0.1 findes.co +127.0.0.1 vitafox.findes.co +127.0.0.1 ooload.qualitywatches.co +127.0.0.1 locatorblog.sukabumitoday.co +127.0.0.1 sukabumitoday.co +127.0.0.1 glofwy.sugarfinehot.top + +127.0.0.1 nlnvan.garydouglasnewell.co +127.0.0.1 garydouglasnewell.co +127.0.0.1 partdate.yaspiq.co +127.0.0.1 jmtrading.co +127.0.0.1 monkeyselite.tonick.co +127.0.0.1 rappersonal.paradisedestination.co +127.0.0.1 kqnpcp.friendmagnetcool.top +127.0.0.1 contactalliance.mbogi.co +127.0.0.1 kitago.info +127.0.0.1 freeprosoftz.com +127.0.0.1 9oi6khy8.xyz +127.0.0.1 kjgfj.xyz +127.0.0.1 9oijgkh.xyz +127.0.0.1 uyyd.xyz +127.0.0.1 oiiuuyjk.xyz + + +# fake Flash Player +127.0.0.1 lekms.com +127.0.0.1 restorehighlyadvancedthefile.vip +127.0.0.1 restorecurrenthighlythefile.vip + +127.0.0.1 new-meet-dating.life +127.0.0.1 wellhello.com +127.0.0.1 flashplayer-cn.com +127.0.0.1 ru.com +127.0.0.1 141.8.226.34 # ——— Standard malware that I stumbled upon on my own ——— 127.0.0.1 downloadprovider.me diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index b4168a1b1..c83afcbf5 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 20December2021v1-Alpha +# Version: 03January2022v1-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -120,6 +120,7 @@ # ¤¤¤ Driverpack Online (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ¤¤¤ # ¤¤¤ SpyHunter links ¤¤¤ + # ¤¤¤ Restoro ¤¤¤ # ¤¤¤ "Driver" download sites that instead download PUP tools ¤¤¤ @@ -272,6 +273,7 @@ +*/mcaf04/ @@ -1345,6 +1347,61 @@ + + + + + + + + + + + + + + + + + +# fake MediaFire scam domains + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +# fake Flash Player diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 3711668eb..c671317c4 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 20December2021v1-Beta +# Version: 03January2022v1-Beta : expires = 5 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -186,6 +186,10 @@ msFilterList # ¤¤¤ SpyHunter links ¤¤¤ # https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/ # https://www.2-spyware.com/remove-redirector-gvt1-com.html +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-968070041 +# https://www.cyclonis.com/how-to-create-gmail-account-without-phone-number/ +# https://www.2-viruses.com/remove-ad-spam-press-allow-to-continue +-d 2-viruses.com downloads spyhunter2 # ¤¤¤ Restoro ¤¤¤ # https://www.windowsdispatch.com/fix-system-restore-0x81000203-error-code/ # https://dlldownloads.com/xlive-dll/ @@ -337,6 +341,7 @@ msFilterList -d couponbybox.com -d newpage.in -d digitalantivirus.org +* mcaf04 -d 34.204.214.165 -d 54.85.113.62 -d 54.205.83.61 @@ -1621,6 +1626,68 @@ msFilterList -d dgu9g3a2kzqx2.cloudfront.net -d d13pxqgp3ixdbh.cloudfront.net -d systemupdatecontrol.com +# https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ +-d mozicrack.com +-d download-srvr.xyz +-d 134.122.115.190 +-d cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com +# https://github.com/uBlockOrigin/uBlock-issues/issues/1774#issuecomment-1000722777 +-d viewty.xyz +-d landing.marketstm.com +# https://scammer.info/t/airdrop-discord-nitro-with-steam-scam-7-977-525-68-47/86156 +-d discrode-app.com +# https://scammer.info/t/1-month-nitro-for-free-take-it-scam/86166 +-d discrode-gifte.club +# fake MediaFire scam domains +-d overeverything.co +-d wrappdt.cloudcircuit.co +-d blacknumbers.co +-d hunterbid.exacad.co +-d songlos.com +-d lorweo.info +-d royaltees.co +-d correctwantserve.top +-d qilihi.correctwantserve.top +-d hunterrandom.latabledusanglier.com +-d insload.bainisgaingeals.com +-d viahunter.lafabricagourmet.co +-d findes.co +-d vitafox.findes.co +-d ooload.qualitywatches.co +-d locatorblog.sukabumitoday.co +-d sukabumitoday.co +-d glofwy.sugarfinehot.top +-d supersong.nl upload 6277.rar +-d nlnvan.garydouglasnewell.co +-d garydouglasnewell.co +-d partdate.yaspiq.co +-d jmtrading.co +-d monkeyselite.tonick.co +-d rappersonal.paradisedestination.co +-d kqnpcp.friendmagnetcool.top +-d contactalliance.mbogi.co +-d kitago.info +# https://bazaar.abuse.ch/sample/84d93b2fd2597da5d611165cbad0b252569a837c56a94a42849f2bedc8af033a/ +-d freeprosoftz.com +-d 9oi6khy8.xyz +-d kjgfj.xyz +-d 9oijgkh.xyz +-d uyyd.xyz +-d oiiuuyjk.xyz +-d mediafire.com file pu0m2luacc3fh8h file-password___2345.rar file +-d mediafire.com coe39m9f9tyg pu0m2luacc3fh8h file-password___2345%282%29.rar +# fake Flash Player +-d lekms.com +-d restorehighlyadvancedthefile.vip +-d restorecurrenthighlythefile.vip +-d microsoftedge.microsoft.com addons detail ecosia-the-search-engin fhfidmlnclkepgapcephbaciajegheco +-d new-meet-dating.life +-d wellhello.com +# https://github.com/uBlockOrigin/uAssets/pull/11161 +-d flashplayer-cn.com +# https://github.com/AdguardTeam/AdguardFilters/issues/103475 +-d ru.com +-d 141.8.226.34 # ——— Standard malware that I stumbled upon on my own ——— # http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 774f880b9..cf9b29577 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -1,5 +1,5 @@ # Title: Dandelion Sprout's and other adblocker lists' IPs -# Version: 17December2021v2-Beta +# Version: 20December2021v1-Beta # Expires: 5 days # Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish. # For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english