From 912fbd6710930a9df7e15bd13d2d014ecc240434 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Fri, 15 Jul 2022 18:31:16 +0200 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 36 +++- .../AntiMalwareAdGuard.txt | 197 ++++++++++-------- .../AntiMalwareAdGuardHome.txt | 23 +- .../AntiMalwareDomains.txt | 17 +- .../AntiMalwareHosts.txt | 17 +- .../AntiMalwarePrivoxy.action | 19 +- .../AntiMalwareTPL.tpl | 21 +- 7 files changed, 233 insertions(+), 97 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index f138681c0..864827b56 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ -[Adblock Plus 3.6] +[Adblock Plus 3.13] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 08July2022v1 +! Version: 14July2022v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -3560,6 +3560,38 @@ zombooru.com##a[href="http://www.hard55.com"] ||amazon-security-info.lnk.to^$popup ||verif-caseid9871-verizonrview.com^ ||verif-caseid9871-verizonrview.com^$popup +! https://github.com/AdguardTeam/AdguardFilters/issues/123968 +178.253.36.*$network +178.253.37.*$network +! https://kommunikasjon.ntb.no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583 +||bzsx.link^ +||bzsx.link^$popup +||dfvd.link^ +||dfvd.link^$popup +||dsvs.link^ +||dsvs.link^$popup +||frbj.link^ +||frbj.link^$popup +||iobj.me^ +||iobj.me^$popup +||jlea.link^ +||jlea.link^$popup +||jtaa.link^ +||jtaa.link^$popup +||lurr.link^ +||lurr.link^$popup +||rbas.link^ +||rbas.link^$popup +||sinv.link^ +||sinv.link^$popup +||szxo.link^ +||szxo.link^$popup +||ujtj.link^ +||ujtj.link^$popup +||wznp.link^ +||wznp.link^$popup +||158.247.212.220^ +||165.227.168.212^ ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 71cefc04f..fcfe8c048 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from 2019 onwards] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 08July2022v1 +! Version: 14July2022v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -147,16 +147,16 @@ bing.com##.b_algo:has(a[href*=".top/"]:not([href*="corriente.top"], [href*="gdto ||useragentswitch.com^$all ||dev-nano.com^$all ! Presumed to be fraudulent antivirus extensions on app/extension sites where it's perfectly probable that everyday people could install them. -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*=antivirus][href*=free]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*=antivirus][href*=clean]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*=antivirus][href*=boost]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*=boost][href*=clean]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*=antivirus][href*=gratis]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*=antivirus][href*="201"]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*=antivirus][href*=security]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*="anti.virus"]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*="scanguard"]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*=".totalav."]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=free]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=clean]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=boost]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=boost][href*=clean]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=gratis]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*="201"]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=security]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*="anti.virus"]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*="scanguard"]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=".totalav."]) ! Page links previously found on PCGamingWiki pages ||inside3d.com^$all ||viaarena.com^$all @@ -188,54 +188,54 @@ ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.sidebar_download_ ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.primary_download ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.download_button_info_texts ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.js-download_button_additional_links -ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#.ga-download:-abp-contains(/^Reimage$/) +ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#.ga-download:has-text(/^Reimage$/) ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.download-button-offer-header -ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:-abp-contains(/^Repair your Errors automatically$/i) -ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:-abp-contains(/^Repair your Errors automatically$/i) + p +ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:has-text(/^Repair your Errors automatically$/i) +ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:has-text(/^Repair your Errors automatically$/i) + p ! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10 -thewindowsclub.com#?#.entry-content > div > strong:-abp-contains(find & fix Windows error) +thewindowsclub.com#?#.entry-content > div > strong:has-text(find & fix Windows error) thewindowsclub.com##div[style^="float: none; margin:10px "] ! https://www.majorgeeks.com/files/details/patch_my_pc.html -majorgeeks.com#?#b:-abp-has(a[target^=reimage]) +majorgeeks.com#?#b:has(a[target^=reimage]) ||majorgeeks.com/images/icons/red_icon_18x17px.png$image ! https://www.2-spyware.com/remove-redirector-gvt1-com.html -2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.attention-button-wrap:-abp-contains(Reimage) +2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.attention-button-wrap:has-text(Reimage) 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.ui-content > .win 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.sidebar_download_inner > :not(.voting-box, .colorbg-grey) -2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:-abp-contains(/^Detection$/) -2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:-abp-contains(/^Detection$/) + td +2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:has-text(/^Detection$/) +2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:has-text(/^Detection$/) + td 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.js-download_button_offer 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.primary_download 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-placeholder -2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.nfc-bottom-right:-abp-contains(Reimage) -2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(Reimage) +2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.nfc-bottom-right:has-text(Reimage) +2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:has-text(Reimage) 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-text ! https://github.com/AdguardTeam/AdguardFilters/issues/111843 ||loadware.org^$document,popup ! €€€ ScanUtilities €€€ ! https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/ bynarycodes.com##div[class^=bynar-content_] -bynarycodes.com#?#.panel:-abp-contains(a[href*="scanutilities.com"]) +bynarycodes.com#?#.panel:has-text(a[href*="scanutilities.com"]) ! €€€ Driver Easy €€€ ! https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/ -drivereasy.com#?#.pakb-content ol:-abp-contains(Download and install Driver Easy) -drivereasy.com#?#.pakb-content p:-abp-contains(Driver Easy) -drivereasy.com#?#.pakb-content div.info.note:-abp-contains(drivereasy.com) +drivereasy.com#?#.pakb-content ol:has-text(Download and install Driver Easy) +drivereasy.com#?#.pakb-content p:has-text(Driver Easy) +drivereasy.com#?#.pakb-content div.info.note:has-text(drivereasy.com) ! https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/ drivereasy.com#?#.pakb-content img[sizes^="(max-width: 80"] -drivereasy.com#?#.pakb-content p:-abp-contains(the FREE version) -drivereasy.com#?#.pakb-content p:-abp-contains(the Pro version) +drivereasy.com#?#.pakb-content p:has-text(the FREE version) +drivereasy.com#?#.pakb-content p:has-text(the Pro version) ! https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/ drivereasy.com#?#.pakb-content img[sizes^="(max-width: 79"] -drivereasy.com#?#.pakb-content span[id^=i-]:-abp-contains(Automatically update your) -drivereasy.com#?#.pakb-content li:-abp-has(a[href="#automatically"]) +drivereasy.com#?#.pakb-content span[id^=i-]:has-text(Automatically update your) +drivereasy.com#?#.pakb-content li:has(a[href="#automatically"]) ! https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/ -drivereasy.com#?#.pakb-content span[id^=i-]:-abp-contains(Update drivers with Driver Easy) -drivereasy.com#?#.pakb-content figcaption:-abp-contains(for free if you like) -drivereasy.com#?#.pakb-content li:-abp-has(a:-abp-contains(Update drivers with Driver Easy)) +drivereasy.com#?#.pakb-content span[id^=i-]:has-text(Update drivers with Driver Easy) +drivereasy.com#?#.pakb-content figcaption:has-text(for free if you like) +drivereasy.com#?#.pakb-content li:has(a:has-text(Update drivers with Driver Easy)) ! https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/ -drivereasy.com#?#.pakb-content p:-abp-contains(click Update All) +drivereasy.com#?#.pakb-content p:has-text(click Update All) ! €€€ Slimware DriverUpdate €€€ ! https://forums.windowscentral.com/ forums.windowscentral.com###navbar_notice_33 @@ -244,14 +244,14 @@ forums.windowscentral.com###navbar_notice_33 ! €€€ SpyHunter links €€€ ! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/ howtoremove.guide##div[style^="border:2px"] -howtoremove.guide#?#.entry-content > div:-abp-contains(Special Offer) +howtoremove.guide#?#.entry-content > div:has-text(Special Offer) ! https://www.2-spyware.com/remove-redirector-gvt1-com.html 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list_w > .ar_block_description -2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(SpyHunter) +2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:has-text(SpyHunter) guide##a[href*="download.enigmasoftware.com/spyhunter-free-download/stpl_94/SpyHunter-Installer.exe"] ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-968070041 howtoremove.guide##[id*="newage"] -howtoremove.guide#?#.wp-block-table:-abp-has(.banner) +howtoremove.guide#?#.wp-block-table:has(.banner) malwareguide112.com##.tdb-block-inner > div:has-text(Best Offer) virusresearch.org##.virus-before-content virusresearch.org##.q2w3-fixed-widget-container @@ -271,15 +271,15 @@ dlldownloads.com##.page-container > p windowsreport.com##.bnr-block ! https://appuals.com/pr-connect-reset-error/ appuals.com##.wptp -appuals.com#?#h3:-abp-has(+ p:-abp-contains(Download and run Restoro )) -appuals.com#?#p:-abp-contains(Download and run Restoro ) +appuals.com#?#h3:has(+ p:has-text(Download and run Restoro )) +appuals.com#?#p:has-text(Download and run Restoro ) appuals.com##p + div > div:first-of-type ! €€€ "Driver" download sites that instead download PUP tools €€€ ||driver-soft.com^$document ! €€€ Outbyte €€€ wikidll.com,dllfile.net,dll-files.org##.detection-os wikidll.com,dllfile.net,dll-files.org##.detection-desc -wikidll.com,dllfile.net,dll-files.org#?#.method:-abp-contains(Outbyte) +wikidll.com,dllfile.net,dll-files.org#?#.method:has-text(Outbyte) wikidll.com,dllfile.net,fix4dll.com,dll-files.org##.inner > .text wikidll.com,dllfile.net,fix4dll.com,dll-files.org##.btn-download wikidll.com,dllfile.net,fix4dll.com,dll-files.org##.product > .title-line @@ -289,14 +289,14 @@ windll.com##.download-block windll.com##.dll > p dllfile.net##.sticky-link fix4dll.com##.file__download -fix4dll.com#?#.sidebar__block:-abp-contains(Outbyte) +fix4dll.com#?#.sidebar__block:has-text(Outbyte) winaero.com##.entry-content > div:has([href="/fix-classic-issues-performance/"]) ||outbyte.com^$document ||testedforyou.net^$all ! €€€ PC Reviver €€€ -dll4free.com#?#.leftdiv:-abp-contains(PC Reviver) +dll4free.com#?#.leftdiv:has-text(PC Reviver) ! €€€ FixMyPC €€€ -dll-found.com#?#p:-abp-has(a[href*=tweakbit]) +dll-found.com#?#p:has(a[href*=tweakbit]) ! €€€ "DLL Helper" €€€ azdll.net##.container > .dllhelper-banner azdll.net##.dllhelper-banner @@ -353,41 +353,41 @@ coolrom.com.au,coolrom.com##.download_link ! Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions. ! I offer a 10€ bounty to anyone who know how to make the entries work within their intended browsers with regular browser extensions (e.g. Chrome Web Store in Chrome with (uBO|AdGuard Browser Extension|ABP); Mozilla Add-ons in Firefox) ! Chrome Web Store -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(www.ublock.org) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlock Plus Adblocker) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker for ) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Plus) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Genesis Plus) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker HARDLINE) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlock Pro) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(ADZbuzz uBlock) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker DEFENSE) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Professional) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker CRM) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlocker) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(AdFilter) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(AdBlock Inc.) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Genius PRO) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Easy AdBlock) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(radventsolutions) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains( & AdBlock) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblock for WebSites) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(ADBlock) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker.Global) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(/best ?ad ?block/i) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(/(^| )1 ?adblock/i) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adbear) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adresist) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(otih-oith.us.to) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(/Adblock adblock/i) -chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(/Adblock Origin/i) +chrome.google.com#?#.webstore-test-wall-tile:has-text(www.ublock.org) +chrome.google.com#?#.webstore-test-wall-tile:has-text(uBlock Plus Adblocker) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adblocker for ) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adblocker Plus) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adblocker Genesis Plus) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adblocker HARDLINE) +chrome.google.com#?#.webstore-test-wall-tile:has-text(uBlock Pro) +chrome.google.com#?#.webstore-test-wall-tile:has-text(ADZbuzz uBlock) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adblocker DEFENSE) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adblocker Professional) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adblocker CRM) +chrome.google.com#?#.webstore-test-wall-tile:has-text(uBlocker) +chrome.google.com#?#.webstore-test-wall-tile:has-text(AdFilter) +chrome.google.com#?#.webstore-test-wall-tile:has-text(AdBlock Inc.) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adblocker Genius PRO) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Easy AdBlock) +chrome.google.com#?#.webstore-test-wall-tile:has-text(radventsolutions) +chrome.google.com#?#.webstore-test-wall-tile:has-text( & AdBlock) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adblock for WebSites) +chrome.google.com#?#.webstore-test-wall-tile:has-text(ADBlock) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adblocker.Global) +chrome.google.com#?#.webstore-test-wall-tile:has-text(/best ?ad ?block/i) +chrome.google.com#?#.webstore-test-wall-tile:has-text(/(^| )1 ?adblock/i) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adbear) +chrome.google.com#?#.webstore-test-wall-tile:has-text(Adresist) +chrome.google.com#?#.webstore-test-wall-tile:has-text(otih-oith.us.to) +chrome.google.com#?#.webstore-test-wall-tile:has-text(/Adblock adblock/i) +chrome.google.com#?#.webstore-test-wall-tile:has-text(/Adblock Origin/i) ! Mozilla Add-ons -addons.mozilla.org#?#li.SearchResult:-abp-contains(uBlock, LLC) -addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker for Firefox) -addons.mozilla.org#?#li.SearchResult:-abp-contains(AdsBlocker) -addons.mozilla.org#?#li.SearchResult:-abp-contains(Easy AdBlock) -addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker Genius Pro) -addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) +addons.mozilla.org#?#li.SearchResult:has-text(uBlock, LLC) +addons.mozilla.org#?#li.SearchResult:has-text(Adblocker for Firefox) +addons.mozilla.org#?#li.SearchResult:has-text(AdsBlocker) +addons.mozilla.org#?#li.SearchResult:has-text(Easy AdBlock) +addons.mozilla.org#?#li.SearchResult:has-text(Adblocker Genius Pro) +addons.mozilla.org#?#li.SearchResult:has-text(Adblocker.Global) ! Homepages ||adblock.biz^$document ||the1adblocker.com^$document @@ -398,13 +398,13 @@ softonic.*,softonic-ar.com,softonic-th.com##a[href*="://adskiper."] softonic.*,softonic-ar.com,softonic-th.com##a[href*="://ublock-firefox."] softonic.*,softonic-ar.com,softonic-th.com##a[href*="://ublock-chrome."] softonic.*,softonic-ar.com,softonic-th.com##a[href*="://adblock."] -download.cnet.com#?#.c-globalCard:-abp-has(a[href*="/Sir-AdGuard/"]) -download.cnet.com#?#.c-globalCard:-abp-has(a[href*="/Ad-Smasher/"]) -download.cnet.com#?#.c-globalCard:-abp-has(a[href*="/AdsCleaner/"]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*=adblocker]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*=".adblock."]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href*=adsblock]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([href$=".adblock"]) +download.cnet.com#?#.c-globalCard:has(a[href*="/Sir-AdGuard/"]) +download.cnet.com#?#.c-globalCard:has(a[href*="/Ad-Smasher/"]) +download.cnet.com#?#.c-globalCard:has(a[href*="/AdsCleaner/"]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=adblocker]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=".adblock."]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=adsblock]) +play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href$=".adblock"]) ||apps.apple.com/*/app/*/id1564900435^$document ! β€”β€”β€” Wrong TLDs of legitimate sites β€”β€”β€” @@ -2249,6 +2249,25 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://twitter.com/iam_py_test/status/1545164642346930176 ||amazon-security-info.lnk.to^$all ||verif-caseid9871-verizonrview.com^$all +! https://github.com/AdguardTeam/AdguardFilters/issues/123968 +178.253.36.*$network +178.253.37.*$network +! https://kommunikasjon.ntb.no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583 +||bzsx.link^$all +||dfvd.link^$all +||dsvs.link^$all +||frbj.link^$all +||iobj.me^$all +||jlea.link^$all +||jtaa.link^$all +||lurr.link^$all +||rbas.link^$all +||sinv.link^$all +||szxo.link^$all +||ujtj.link^$all +||wznp.link^$all +158.247.212.220$network +165.227.168.212$network ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -8696,12 +8715,12 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ! Oddly enough, there seems to be no need to couple it with "@@/:\\/", since web browsers convert Windows filenames from backwards to forwards slashes. ! β€”β€”β€” Spam in comment sections across the internet about "working" from "home" β€”β€”β€” -facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(↓↓↓↓COPY) -facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/job online from home/i) -facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/online work from home/i) -facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/working from home by doing/i) -facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/work at home opportunity/i) -facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne) +facebook.com#?#div[class*=ImageBlockContent] .clearfix:has-text(↓↓↓↓COPY) +facebook.com#?#div[class*=ImageBlockContent] .clearfix:has-text(/job online from home/i) +facebook.com#?#div[class*=ImageBlockContent] .clearfix:has-text(/online work from home/i) +facebook.com#?#div[class*=ImageBlockContent] .clearfix:has-text(/working from home by doing/i) +facebook.com#?#div[class*=ImageBlockContent] .clearfix:has-text(/work at home opportunity/i) +facebook.com#?#div[class*=ImageBlockContent] .clearfix:has-text(0nl!ne) ! β€”β€”β€” Upgrades HTTP requests to HTTPS on sites that don't do it automatically β€”β€”β€” $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|ufl.edu|oecd.org|bu.edu|wikidot.com|alternativenation.net diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index a3e4a14a2..db3cd86c8 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ -[Adblock Plus 3.6] +[Adblock Plus 3.13] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 08July2022v1 +! Version: 14July2022v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -2059,6 +2059,25 @@ ! https://twitter.com/iam_py_test/status/1545164642346930176 ||amazon-security-info.lnk.to^ ||verif-caseid9871-verizonrview.com^ +! https://github.com/AdguardTeam/AdguardFilters/issues/123968 +178.253.36.0/24 +178.253.37.0/24 +! https://kommunikasjon.ntb.no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583 +||bzsx.link^ +||dfvd.link^ +||dsvs.link^ +||frbj.link^ +||iobj.me^ +||jlea.link^ +||jtaa.link^ +||lurr.link^ +||rbas.link^ +||sinv.link^ +||szxo.link^ +||ujtj.link^ +||wznp.link^ +158.247.212.220 +165.227.168.212 ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index a76f9fe55..ce83c42de 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 08July2022v1 +# Version: 14July2022v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -1796,6 +1796,21 @@ online-guard.com amazon-security-info.lnk.to verif-caseid9871-verizonrview.com +bzsx.link +dfvd.link +dsvs.link +frbj.link +iobj.me +jlea.link +jtaa.link +lurr.link +rbas.link +sinv.link +szxo.link +ujtj.link +wznp.link +158.247.212.220 +165.227.168.212 # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” downloadprovider.me diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 77e45047b..9061dc5ad 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 08July2022v1 +# Version: 14July2022v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -1796,6 +1796,21 @@ 127.0.0.1 amazon-security-info.lnk.to 127.0.0.1 verif-caseid9871-verizonrview.com +127.0.0.1 bzsx.link +127.0.0.1 dfvd.link +127.0.0.1 dsvs.link +127.0.0.1 frbj.link +127.0.0.1 iobj.me +127.0.0.1 jlea.link +127.0.0.1 jtaa.link +127.0.0.1 lurr.link +127.0.0.1 rbas.link +127.0.0.1 sinv.link +127.0.0.1 szxo.link +127.0.0.1 ujtj.link +127.0.0.1 wznp.link +127.0.0.1 158.247.212.220 +127.0.0.1 165.227.168.212 # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” 127.0.0.1 downloadprovider.me diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 2eaec3491..60284a5d2 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 08July2022v1 +# Version: 14July2022v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -1817,6 +1817,23 @@ /mcafee-safe-browsing/?*=*&*=*&*=*&*=*&*=*&*= +178.253.36.* +178.253.37.* + + + + + + + + + + + + + + + {+block} # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index eb5165c76..48ef4c01e 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 08July2022v1 +# Version: 14July2022v1 : expires = 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -2132,6 +2132,25 @@ om landers iphone*_spin # https://twitter.com/iam_py_test/status/1545164642346930176 -d amazon-security-info.lnk.to -d verif-caseid9871-verizonrview.com +# https://github.com/AdguardTeam/AdguardFilters/issues/123968 +178.253.36.* +178.253.37.* +# https://kommunikasjon.ntb.no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583 +-d bzsx.link +-d dfvd.link +-d dsvs.link +-d frbj.link +-d iobj.me +-d jlea.link +-d jtaa.link +-d lurr.link +-d rbas.link +-d sinv.link +-d szxo.link +-d ujtj.link +-d wznp.link +-d 158.247.212.220 +-d 165.227.168.212 # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” # http://www.toorgle.net/results.php?q=fetishkitsch&security=666