starred/adfilt
1
0
Fork 0
mirror of https://github.com/DandelionSprout/adfilt.git synced 2026-09-24 22:03:36 +01:00
Code Issues Packages Projects Releases 4 Wiki Activity

Add files via upload

Browse Source
This commit is contained in:
Imre Kristoffer Eilertsen
2021-10-25 13:07:03 +02:00
committed by GitHub
parent 3ddb6cdc06
commit 66e53e27ec
8 changed files with 67 additions and 113 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Alternate versions Anti-Malware List/AntiMalwareABP.txt
+11 -16
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.6]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
! Version: 21October2021v2-Beta
! Version: 25October2021v1-Beta
! Expires: 5 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -2095,6 +2095,13 @@ zombooru.com##a[href="http://www.hard55.com"]
! https://twitter.com/soranker0/status/1449491402409185283
://disordgift.
://disordgift.$popup
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114
||free-softs.net^
||free-softs.net^$popup
! https://github.com/iam-py-test/investigations/blob/main/2021/10/24/1.md#html-capture
||google-yandex.
||cloud-apps.store^
/(^|://|\.)[a-z]{5,}-[a-z]{5,}-[a-z]{5,}\.xyz($|/)/
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -12566,25 +12573,13 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|
! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^
! ——— Anti-'Norton and McAfee' ———
! Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications
||appcloud.mcafee.com^
||mmfiles.amp.mcafee.com^
! ——— Anti-PUP (WIP) ———
! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
||webadvisorc.rest.gti.mcafee.com^
||mip.api.mcafeewebadvisor.com^
||sadownload.mcafee.com^
||websecurity.norton.com^
||dns.norton.com^
||stats.norton.com^
||vss.norton.com^
||shasta-rrs.norton.com^
||norton-app.quantummetric.com^
||static.nortoncdn.com^
||oms.norton.com^
||norton.ehosts.net^
! https://get.adobe.com/no/reader/
get.adobe.com###offersInformationPane
! Gigabyte APP Center (May require «AdGuard for Windows»)
! Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows»)
||mb.download.gigabyte.com/FileList/Swhttp/DriverUpd/ANTIVIRUS^
Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt
+10 -16
View File
@@ -1,6 +1,6 @@
[AdGuard versions from ≥2019]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
! Version: 21October2021v2-Beta
! Version: 25October2021v1-Beta
! Expires: 5 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -1374,6 +1374,12 @@ zombooru.com##a[href="http://www.hard55.com"]
||sherence.ru^$empty,important
! https://twitter.com/soranker0/status/1449491402409185283
://disordgift.$empty,important
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114
||free-softs.net^$empty,important
! https://github.com/iam-py-test/investigations/blob/main/2021/10/24/1.md#html-capture
||google-yandex.$document
||cloud-apps.store^$document
/(^|://|\.)[a-z]{5,}-[a-z]{5,}-[a-z]{5,}\.xyz($|/)/$document
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6692,25 +6698,13 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|
! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^$document
! ——— Anti-'Norton and McAfee' ———
! Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications
||appcloud.mcafee.com^
||mmfiles.amp.mcafee.com^
! ——— Anti-PUP (WIP) ———
! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
||webadvisorc.rest.gti.mcafee.com^
||mip.api.mcafeewebadvisor.com^
||sadownload.mcafee.com^
||websecurity.norton.com^
||dns.norton.com^
||stats.norton.com^
||vss.norton.com^
||shasta-rrs.norton.com^
||norton-app.quantummetric.com^
||static.nortoncdn.com^
||oms.norton.com^
||norton.ehosts.net^
! https://get.adobe.com/no/reader/
get.adobe.com###offersInformationPane
! Gigabyte APP Center (May require «AdGuard for Windows»)
! Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows»)
||mb.download.gigabyte.com/FileList/Swhttp/DriverUpd/ANTIVIRUS^
!#if !adguard
Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt
+10 -16
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.6]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering)
! Version: 21October2021v2-Beta
! Version: 25October2021v1-Beta
! Expires: 5 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -1291,6 +1291,12 @@
||sherence.ru^
! https://twitter.com/soranker0/status/1449491402409185283
://disordgift.
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114
||free-softs.net^
! https://github.com/iam-py-test/investigations/blob/main/2021/10/24/1.md#html-capture
||google-yandex.
||cloud-apps.store^
/(^|://|\.)[a-z]{5,}-[a-z]{5,}-[a-z]{5,}\.xyz($|/)/
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6608,24 +6614,12 @@
! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^
! ——— Anti-'Norton and McAfee' ———
! Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications
||appcloud.mcafee.com^
||mmfiles.amp.mcafee.com^
! ——— Anti-PUP (WIP) ———
! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
||webadvisorc.rest.gti.mcafee.com^
||mip.api.mcafeewebadvisor.com^
||sadownload.mcafee.com^
||websecurity.norton.com^
||dns.norton.com^
||stats.norton.com^
||vss.norton.com^
||shasta-rrs.norton.com^
||norton-app.quantummetric.com^
||static.nortoncdn.com^
||oms.norton.com^
||norton.ehosts.net^
! https://get.adobe.com/no/reader/
! Gigabyte APP Center (May require «AdGuard for Windows»)
! Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows»)
Alternate versions Anti-Malware List/AntiMalwareDomains.txt
+8 -16
View File
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
# Version: 21October2021v2-Beta
# Version: 25October2021v1-Beta
# Expires: 5 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -1073,6 +1073,10 @@ eposcardokubo.serveftp.com
45.148.120.171
sherence.ru
free-softs.net
cloud-apps.store
# ——— Standard malware that I stumbled upon on my own ———
downloadprovider.me
@@ -6356,23 +6360,11 @@ githubnt.com
# ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data
# ——— Anti-'Norton and McAfee' ———
# Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications
appcloud.mcafee.com
mmfiles.amp.mcafee.com
# ——— Anti-PUP (WIP) ———
# This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
webadvisorc.rest.gti.mcafee.com
mip.api.mcafeewebadvisor.com
sadownload.mcafee.com
websecurity.norton.com
dns.norton.com
stats.norton.com
vss.norton.com
shasta-rrs.norton.com
norton-app.quantummetric.com
static.nortoncdn.com
oms.norton.com
norton.ehosts.net
# Gigabyte APP Center (May require «AdGuard for Windows»)
# Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows»)
Alternate versions Anti-Malware List/AntiMalwareHosts.txt
+8 -16
View File
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
# Version: 21October2021v2-Alpha
# Version: 25October2021v1-Alpha
# Expires: 5 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -1073,6 +1073,10 @@
127.0.0.1 45.148.120.171
127.0.0.1 sherence.ru
127.0.0.1 free-softs.net
127.0.0.1 cloud-apps.store
# ——— Standard malware that I stumbled upon on my own ———
127.0.0.1 downloadprovider.me
@@ -6356,23 +6360,11 @@
# ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
127.0.0.1 if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data
# ——— Anti-'Norton and McAfee' ———
# Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications
127.0.0.1 appcloud.mcafee.com
127.0.0.1 mmfiles.amp.mcafee.com
# ——— Anti-PUP (WIP) ———
# This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
127.0.0.1 webadvisorc.rest.gti.mcafee.com
127.0.0.1 mip.api.mcafeewebadvisor.com
127.0.0.1 sadownload.mcafee.com
127.0.0.1 websecurity.norton.com
127.0.0.1 dns.norton.com
127.0.0.1 stats.norton.com
127.0.0.1 vss.norton.com
127.0.0.1 shasta-rrs.norton.com
127.0.0.1 norton-app.quantummetric.com
127.0.0.1 static.nortoncdn.com
127.0.0.1 oms.norton.com
127.0.0.1 norton.ehosts.net
# Gigabyte APP Center (May require «AdGuard for Windows»)
# Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows»)
Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action
+7 -16
View File
@@ -1,6 +1,6 @@
{+block}
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
# Version: 21October2021v2-Alpha
# Version: 25October2021v1-Alpha
# Expires: 5 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -1099,6 +1099,9 @@
{+block}
@@ -6357,23 +6360,11 @@
{+block}
# ——— Anti-'Norton and McAfee' ———
# Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications
# ——— Anti-PUP (WIP) ———
# This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
# Gigabyte APP Center (May require «AdGuard for Windows»)
# Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows»)
#
Alternate versions Anti-Malware List/AntiMalwareTPL.tpl
+10 -16
View File
@@ -1,6 +1,6 @@
msFilterList
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
# Version: 21October2021v2-Beta
# Version: 25October2021v1-Beta
: expires = 5
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -1279,6 +1279,12 @@ msFilterList
# http://vxvault.net/ViriFiche.php?ID=44058
-d sherence.ru
# https://twitter.com/soranker0/status/1449491402409185283
# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114
-d free-softs.net
# https://github.com/iam-py-test/investigations/blob/main/2021/10 24 1.md#html-capture
-d google-yandex.
-d cloud-apps.store
- (|://|\.)[a-z]{5,}-[a-z]{5,}-[a-z]{5,}\.xyz(
# ——— Standard malware that I stumbled upon on my own ———
# http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6534,24 +6540,12 @@ msFilterList
# ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
-d if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data
# ——— Anti-'Norton and McAfee' ———
# Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications
-d appcloud.mcafee.com
-d mmfiles.amp.mcafee.com
# ——— Anti-PUP (WIP) ———
# This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
-d webadvisorc.rest.gti.mcafee.com
-d mip.api.mcafeewebadvisor.com
-d sadownload.mcafee.com
-d websecurity.norton.com
-d dns.norton.com
-d stats.norton.com
-d vss.norton.com
-d shasta-rrs.norton.com
-d norton-app.quantummetric.com
-d static.nortoncdn.com
-d oms.norton.com
-d norton.ehosts.net
# https://get.adobe.com/no/reader/
# Gigabyte APP Center (May require «AdGuard for Windows»)
# Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows»)
-d mb.download.gigabyte.com FileList Swhttp DriverUpd ANTIVIRUS
Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset
+3 -1
View File
@@ -1,5 +1,5 @@
# Title: Dandelion Sprout's and other adblocker lists' IPs
# Version: 19October2021v1-Beta
# Version: 21October2021v2-Beta
# Expires: 5 days
# Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish.
# For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
@@ -153,6 +153,8 @@
194.226.139.7
95.181.157.36
95.181.172.204
# Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications
# Gigabyte APP Center (May require «AdGuard for Windows»)
3.248.18.175
13.49.35.236
35.227.231.163