From aed498f7e2ee46ee076fb035d8e889196677f604 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Sun, 19 Mar 2023 08:36:02 +0100 Subject: [PATCH] Fix #808 When VirusTotal agreed with the `jp.imonitorsoft.com` URL being malware too, I guess I couldn't argue with the blog article after all. --- Dandelion Sprout's Anti-Malware List.txt | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index 6a7e7f34c..13652f205 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -8353,6 +8353,30 @@ zombooru.com##a[href="http://www.hard55.com"] ||redirect.newprogrammatic.click^$doc ||3.231.116.86^$all,~inline-script,~inline-font ||54.237.193.255^$all,~inline-script,~inline-font +! https://github.com/DandelionSprout/adfilt/issues/808 +! https://www.mandiant.com/resources/blog/tracking-evolution-gootloader-operations (26/01/2023) +||jonathanbartz.com^$all,~inline-script,~inline-font +||jp.imonitorsoft.com^$all,~inline-script,~inline-font +||junk-bros.com^$all,~inline-script,~inline-font +||kakiosk.adsparkdev.com^$all,~inline-script,~inline-font +||kepw.org^$all,~inline-script,~inline-font +||kristinee.com^$all,~inline-script,~inline-font +||lakeside-fishandchips.com^$all,~inline-script,~inline-font +||system-libs.com^$all,~inline-script,~inline-font +||usa-winwin.com^$all,~inline-script,~inline-font +||optercore.com^$all,~inline-script,~inline-font +||optimizewin.com^$all,~inline-script,~inline-font +||office-softs.com^$all,~inline-script,~inline-font +||office-checker.com^$all,~inline-script,~inline-font +||system-checker.com^$all,~inline-script,~inline-font +||center-main.com^$all,~inline-script,~inline-font +||office-view.com^$all,~inline-script,~inline-font +||i-likefood.co^$doc +||108.61.242.65^$all,~inline-script,~inline-font +||146.70.78.43^$all,~inline-script,~inline-font +||87.120.254.39^$all,~inline-script,~inline-font +||45.150.108.213^$all,~inline-script,~inline-font +||92.204.160.240^$all,~inline-script,~inline-font ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666