From 266b73f7767d341d463dc8031f9294cf8752b5be Mon Sep 17 00:00:00 2001 From: iam-py-test <84232764+iam-py-test@users.noreply.github.com> Date: Fri, 16 Dec 2022 17:14:33 -0500 Subject: [PATCH] I saw this popup on an infected VM --- Dandelion Sprout's Anti-Malware List.txt | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index 75e5ebe35..d8b15eb0c 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List -! Version: 08December2022v1 +! Version: 16December2022v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -393,6 +393,8 @@ chrome.google.com#?#.webstore-test-wall-tile:has-text(Adresist) chrome.google.com#?#.webstore-test-wall-tile:has-text(otih-oith.us.to) chrome.google.com#?#.webstore-test-wall-tile:has-text(/Adblock adblock/i) chrome.google.com#?#.webstore-test-wall-tile:has-text(/Adblock Origin/i) +chrome.google.com#?#.webstore-test-wall-tile:has-text(/Adblocker for Browser/i) +chrome.google.com#?#.webstore-test-wall-tile:has-text(/Total Adblock/i) ! Mozilla Add-ons ! These entries can be used in Firefox with regular browser extensions (uBO|AdGuard Browser Extension|ABP) by opening about:config, removing the "addons.mozilla.com" part from "extensions.webextensions.restrictedDomains", and then creating a new string called "privacy.resistFingerprinting.block_mozAddonManager" (That exact capitalisation must be used) set to (Boolean) true. addons.mozilla.org#?#li.SearchResult:has-text(uBlock, LLC) @@ -5073,6 +5075,8 @@ zombooru.com##a[href="http://www.hard55.com"] ||139.45.197.239^$all,~inline-font,~inline-script ! https://github.com/AdguardTeam/AdguardFilters/issues/136390 ||glthub.$document,popup +! https://app.any.run/tasks/67907c11-6877-4c38-932f-2cf09ee4e434 +||adblock-chrome.net^$all,~inline-font,~inline-script ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666