diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index e39ea58e4..fc9b91820 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 21October2021v2-Beta +! Version: 25October2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -2095,6 +2095,13 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://twitter.com/soranker0/status/1449491402409185283 ://disordgift. ://disordgift.$popup +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114 +||free-softs.net^ +||free-softs.net^$popup +! https://github.com/iam-py-test/investigations/blob/main/2021/10/24/1.md#html-capture +||google-yandex. +||cloud-apps.store^ +/(^|://|\.)[a-z]{5,}-[a-z]{5,}-[a-z]{5,}\.xyz($|/)/ ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -12566,25 +12573,13 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu| ! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ——— ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^ -! ——— Anti-'Norton and McAfee' ——— -! Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications -||appcloud.mcafee.com^ -||mmfiles.amp.mcafee.com^ +! ——— Anti-PUP (WIP) ——— +! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) ||webadvisorc.rest.gti.mcafee.com^ ||mip.api.mcafeewebadvisor.com^ -||sadownload.mcafee.com^ -||websecurity.norton.com^ -||dns.norton.com^ -||stats.norton.com^ -||vss.norton.com^ -||shasta-rrs.norton.com^ -||norton-app.quantummetric.com^ -||static.nortoncdn.com^ -||oms.norton.com^ -||norton.ehosts.net^ ! https://get.adobe.com/no/reader/ get.adobe.com###offersInformationPane -! Gigabyte APP Center (May require «AdGuard for Windows») +! Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows») ||mb.download.gigabyte.com/FileList/Swhttp/DriverUpd/ANTIVIRUS^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 28fbfd611..df470eb38 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from ≥2019] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 21October2021v2-Beta +! Version: 25October2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1374,6 +1374,12 @@ zombooru.com##a[href="http://www.hard55.com"] ||sherence.ru^$empty,important ! https://twitter.com/soranker0/status/1449491402409185283 ://disordgift.$empty,important +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114 +||free-softs.net^$empty,important +! https://github.com/iam-py-test/investigations/blob/main/2021/10/24/1.md#html-capture +||google-yandex.$document +||cloud-apps.store^$document +/(^|://|\.)[a-z]{5,}-[a-z]{5,}-[a-z]{5,}\.xyz($|/)/$document ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6692,25 +6698,13 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu| ! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ——— ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^$document -! ——— Anti-'Norton and McAfee' ——— -! Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications -||appcloud.mcafee.com^ -||mmfiles.amp.mcafee.com^ +! ——— Anti-PUP (WIP) ——— +! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) ||webadvisorc.rest.gti.mcafee.com^ ||mip.api.mcafeewebadvisor.com^ -||sadownload.mcafee.com^ -||websecurity.norton.com^ -||dns.norton.com^ -||stats.norton.com^ -||vss.norton.com^ -||shasta-rrs.norton.com^ -||norton-app.quantummetric.com^ -||static.nortoncdn.com^ -||oms.norton.com^ -||norton.ehosts.net^ ! https://get.adobe.com/no/reader/ get.adobe.com###offersInformationPane -! Gigabyte APP Center (May require «AdGuard for Windows») +! Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows») ||mb.download.gigabyte.com/FileList/Swhttp/DriverUpd/ANTIVIRUS^ !#if !adguard diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index b34236fdd..ac57420fe 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 21October2021v2-Beta +! Version: 25October2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1291,6 +1291,12 @@ ||sherence.ru^ ! https://twitter.com/soranker0/status/1449491402409185283 ://disordgift. +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114 +||free-softs.net^ +! https://github.com/iam-py-test/investigations/blob/main/2021/10/24/1.md#html-capture +||google-yandex. +||cloud-apps.store^ +/(^|://|\.)[a-z]{5,}-[a-z]{5,}-[a-z]{5,}\.xyz($|/)/ ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6608,24 +6614,12 @@ ! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ——— ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^ -! ——— Anti-'Norton and McAfee' ——— -! Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications -||appcloud.mcafee.com^ -||mmfiles.amp.mcafee.com^ +! ——— Anti-PUP (WIP) ——— +! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) ||webadvisorc.rest.gti.mcafee.com^ ||mip.api.mcafeewebadvisor.com^ -||sadownload.mcafee.com^ -||websecurity.norton.com^ -||dns.norton.com^ -||stats.norton.com^ -||vss.norton.com^ -||shasta-rrs.norton.com^ -||norton-app.quantummetric.com^ -||static.nortoncdn.com^ -||oms.norton.com^ -||norton.ehosts.net^ ! https://get.adobe.com/no/reader/ -! Gigabyte APP Center (May require «AdGuard for Windows») +! Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows») diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index ef9ad9d74..75cecd064 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 21October2021v2-Beta +# Version: 25October2021v1-Beta # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -1073,6 +1073,10 @@ eposcardokubo.serveftp.com 45.148.120.171 sherence.ru +free-softs.net + +cloud-apps.store + # ——— Standard malware that I stumbled upon on my own ——— downloadprovider.me @@ -6356,23 +6360,11 @@ githubnt.com # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ——— if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data -# ——— Anti-'Norton and McAfee' ——— -# Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications -appcloud.mcafee.com -mmfiles.amp.mcafee.com +# ——— Anti-PUP (WIP) ——— +# This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) webadvisorc.rest.gti.mcafee.com mip.api.mcafeewebadvisor.com -sadownload.mcafee.com -websecurity.norton.com -dns.norton.com -stats.norton.com -vss.norton.com -shasta-rrs.norton.com -norton-app.quantummetric.com -static.nortoncdn.com -oms.norton.com -norton.ehosts.net -# Gigabyte APP Center (May require «AdGuard for Windows») +# Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows») diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 1ac537300..d9990eea8 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 21October2021v2-Alpha +# Version: 25October2021v1-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -1073,6 +1073,10 @@ 127.0.0.1 45.148.120.171 127.0.0.1 sherence.ru +127.0.0.1 free-softs.net + +127.0.0.1 cloud-apps.store + # ——— Standard malware that I stumbled upon on my own ——— 127.0.0.1 downloadprovider.me @@ -6356,23 +6360,11 @@ # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ——— 127.0.0.1 if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data -# ——— Anti-'Norton and McAfee' ——— -# Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications -127.0.0.1 appcloud.mcafee.com -127.0.0.1 mmfiles.amp.mcafee.com +# ——— Anti-PUP (WIP) ——— +# This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) 127.0.0.1 webadvisorc.rest.gti.mcafee.com 127.0.0.1 mip.api.mcafeewebadvisor.com -127.0.0.1 sadownload.mcafee.com -127.0.0.1 websecurity.norton.com -127.0.0.1 dns.norton.com -127.0.0.1 stats.norton.com -127.0.0.1 vss.norton.com -127.0.0.1 shasta-rrs.norton.com -127.0.0.1 norton-app.quantummetric.com -127.0.0.1 static.nortoncdn.com -127.0.0.1 oms.norton.com -127.0.0.1 norton.ehosts.net -# Gigabyte APP Center (May require «AdGuard for Windows») +# Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows») diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 0ce814770..d35841bc8 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 21October2021v2-Alpha +# Version: 25October2021v1-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -1099,6 +1099,9 @@ + + + {+block} @@ -6357,23 +6360,11 @@ {+block} -# ——— Anti-'Norton and McAfee' ——— -# Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications +# ——— Anti-PUP (WIP) ——— +# This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) - - - - - - - - - - - - -# Gigabyte APP Center (May require «AdGuard for Windows») +# Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows») # diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 85aea9381..eacc28033 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 21October2021v2-Beta +# Version: 25October2021v1-Beta : expires = 5 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1279,6 +1279,12 @@ msFilterList # http://vxvault.net/ViriFiche.php?ID=44058 -d sherence.ru # https://twitter.com/soranker0/status/1449491402409185283 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114 +-d free-softs.net +# https://github.com/iam-py-test/investigations/blob/main/2021/10 24 1.md#html-capture +-d google-yandex. +-d cloud-apps.store +- (|://|\.)[a-z]{5,}-[a-z]{5,}-[a-z]{5,}\.xyz( # ——— Standard malware that I stumbled upon on my own ——— # http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6534,24 +6540,12 @@ msFilterList # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ——— -d if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data -# ——— Anti-'Norton and McAfee' ——— -# Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications --d appcloud.mcafee.com --d mmfiles.amp.mcafee.com +# ——— Anti-PUP (WIP) ——— +# This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) -d webadvisorc.rest.gti.mcafee.com -d mip.api.mcafeewebadvisor.com --d sadownload.mcafee.com --d websecurity.norton.com --d dns.norton.com --d stats.norton.com --d vss.norton.com --d shasta-rrs.norton.com --d norton-app.quantummetric.com --d static.nortoncdn.com --d oms.norton.com --d norton.ehosts.net # https://get.adobe.com/no/reader/ -# Gigabyte APP Center (May require «AdGuard for Windows») +# Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows») -d mb.download.gigabyte.com FileList Swhttp DriverUpd ANTIVIRUS diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 5cc6fe310..bb0d81edd 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -1,5 +1,5 @@ # Title: Dandelion Sprout's and other adblocker lists' IPs -# Version: 19October2021v1-Beta +# Version: 21October2021v2-Beta # Expires: 5 days # Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish. # For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -153,6 +153,8 @@ 194.226.139.7 95.181.157.36 95.181.172.204 +# Let's be honest: Everyone in the world hate these two invasive nagwares that scream at the top of lungs with their notifications +# Gigabyte APP Center (May require «AdGuard for Windows») 3.248.18.175 13.49.35.236 35.227.231.163