From 07318d3c355c56d1b920280fdd4d91b11e0404b9 Mon Sep 17 00:00:00 2001 From: iam-py-test <84232764+iam-py-test@users.noreply.github.com> Date: Mon, 20 Sep 2021 17:42:16 -0400 Subject: [PATCH 1/4] Some more malware --- Dandelion Sprout's Anti-Malware List.txt | 31 +++++++++++++++++++++++- 1 file changed, 30 insertions(+), 1 deletion(-) diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index 40224abe9..3ee972437 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: 💊 Dandelion Sprout's Anti-Malware List -! Version: 18September2021v2-Beta +! Version: 20September2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1109,6 +1109,35 @@ zombooru.com##a[href="http://www.hard55.com"] ||fernandomayol.com^$all ||varmisende.com^$all ||103.169.90.205^$all +! Add PR url here +! https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community +||125.44.43.45^$all +||182.121.8.240^$all +||42.235.183.74^$all +||78.36.32.242^$all +||115.50.2.119^$all +||115.50.110.163^$all +||119.179.84.145^$all +||188.120.50.98^$all +||190.238.183.5^$all +||27.220.253.78^$all +! ! https://www.virustotal.com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community +||esetnode32-antiviru.ydns.eu^$all +! https://www.joesandbox.com/analysis/486636/0/html#domains +||www.aieov.com^$all +||aieov.com^$all +! Relations to the original domain +||192.3.194.242^$all +||fakasafs23asd-adj.ydns.eu^$all +||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^$all +||hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu^$all +||avira-antivirus.ydns.eu^$all +||k2ygoods.ydns.eu^$all +||lefteriskkokkiskikinew.ydns.eu^$all +||kelasdbadlkafg-uhuy28.ydns.eu^$all +||nan.ydns.eu^$all +||hurricane.ydns.eu^$all +||hjjhjkk.ydns.eu^$all ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 From 55f8ca00baee7c7781d5595ba8c0050806bc5bbd Mon Sep 17 00:00:00 2001 From: iam-py-test <84232764+iam-py-test@users.noreply.github.com> Date: Mon, 20 Sep 2021 17:51:30 -0400 Subject: [PATCH 2/4] Fix https://github.com/blocklistproject/Lists/issues/497 --- Dandelion Sprout's Anti-Malware List.txt | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index 3ee972437..a0bceab53 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1138,6 +1138,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||nan.ydns.eu^$all ||hurricane.ydns.eu^$all ||hjjhjkk.ydns.eu^$all +! https://github.com/blocklistproject/Lists/issues/497 +||tweakbit.com^$all +||static.tweakbit.com^$all +||pcspeedup.en.softonic.com^$all ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 From 27ac21b05c4dacf7ca564ef5ed5c9d1dda368391 Mon Sep 17 00:00:00 2001 From: iam-py-test <84232764+iam-py-test@users.noreply.github.com> Date: Mon, 20 Sep 2021 17:58:32 -0400 Subject: [PATCH 3/4] Add PR url --- Dandelion Sprout's Anti-Malware List.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index a0bceab53..bb7634ffd 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1109,7 +1109,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||fernandomayol.com^$all ||varmisende.com^$all ||103.169.90.205^$all -! Add PR url here +! https://github.com/DandelionSprout/adfilt/pull/281 ! https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community ||125.44.43.45^$all ||182.121.8.240^$all From b3d885ce094bf98fb57ca8c9aea56f0e0a7f675d Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Tue, 21 Sep 2021 15:50:41 +0200 Subject: [PATCH 4/4] Update Dandelion Sprout's Anti-Malware List.txt --- Dandelion Sprout's Anti-Malware List.txt | 1 - 1 file changed, 1 deletion(-) diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index bb7634ffd..c29b2a5ec 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1124,7 +1124,6 @@ zombooru.com##a[href="http://www.hard55.com"] ! ! https://www.virustotal.com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community ||esetnode32-antiviru.ydns.eu^$all ! https://www.joesandbox.com/analysis/486636/0/html#domains -||www.aieov.com^$all ||aieov.com^$all ! Relations to the original domain ||192.3.194.242^$all