Author Topic: Block those malware domains....  (Read 8891 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34059
  • malware fighter
Block those malware domains....
« on: May 19, 2009, 02:37:10 PM »
Hi malware fighters,

There are users among us that block malware domains, so their browsers won't go there.
Re: http://www.malwaredomains.com/wordpress/

With the ongoing spread of malware on the Internet, it is an option to consider,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Omid Farhang

  • Frontend Developer
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1660
  • I wish I could write longer personal text!!
    • Homepage
Re: Block those malware domains....
« Reply #1 on: May 19, 2009, 02:56:45 PM »
how I can keep my HOSTS updated with that list? does HostsMan add these URLs for me itself? or now? should I add those domain manually?
Twitter: OmidFarhangEn - OS: Manjaro KDE

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34059
  • malware fighter
Re: Block those malware domains....
« Reply #2 on: May 19, 2009, 03:20:48 PM »
Hi

They are found here: http://www.malwaredomains.com/updates/200904xx/domains.20090402.txt
You can use a tool like hostess to insert them into your hosts file:
http://accs-net.com/hostess/

The MVPS Host File can be found at: http://www.mvps.org.

hpguru's HOSTS File can be found here: http://www.hosts-file.net/

The MVPS Host File can be found at: http://www.mvps.org.

Hosts File Project can be found here : http://remember.mine.nu/

Why, see this: http://www.youtube.com/watch?v=iD0wdzQb8XY  (this took half a minute!)

polonus
« Last Edit: May 19, 2009, 03:26:55 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Omid Farhang

  • Frontend Developer
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1660
  • I wish I could write longer personal text!!
    • Homepage
Re: Block those malware domains....
« Reply #3 on: May 19, 2009, 03:24:41 PM »
Thanks for the info :)
« Last Edit: May 19, 2009, 03:55:07 PM by Omid Farhang »
Twitter: OmidFarhangEn - OS: Manjaro KDE

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34059
  • malware fighter
Re: Block those malware domains....
« Reply #4 on: May 19, 2009, 03:30:25 PM »
Hi Omid Farhang,

That was something else, because of a questionable posting in the the "exclusive" forum sector I wanted to survey where that came from, and now have a fair clue, but look what I wanted to post there, that is completely legal, changed the link there, no offense meant, take that link off will you?

polonus (anti-malware fighter)

« Last Edit: May 19, 2009, 03:37:23 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89676
  • No support PMs thanks
Re: Block those malware domains....
« Reply #5 on: May 19, 2009, 04:02:30 PM »
Hi malware fighters,

There are users among us that block malware domains, so their browsers won't go there.
Re: http://www.malwaredomains.com/wordpress/

With the ongoing spread of malware on the Internet, it is an option to consider,

I tried one of those (Almost 200 New Malicious Domains Added) listed at random 'antivirus-powerful-scannerv2' and firefox's safe browsing check picked it up, so I would imaging many of those are covered by that too.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: Block those malware domains....
« Reply #6 on: May 20, 2009, 12:39:10 AM »
http://www.malwaredomains.com/updates/200904xx/domains.20090402.txt
Hosts File Project can be found here : http://remember.mine.nu/
Added to HostsMan... let's see the results. Thanks Polonus.
The best things in life are free.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34059
  • malware fighter
Re: Block those malware domains....
« Reply #7 on: May 20, 2009, 12:52:04 AM »
Hi malware fighters,

The blocksite is reliable:
Quote
  The DNS-BH project creates and maintains a listing of domains that are known to be used to propagate malware and spyware. This project creates the Bind and Windows zone files required to serve fake replies to localhost for any requests to these, thus preventing many spyware installs and reporting.

This list is also available in AdBlock and ISA Format.

If you want to receive regular updates, please select the “Subscribe” option under the “Feed” menu. We are testing feedburner.
If Wladimir Palant allows it inside AdBlock or ABP it must be a reliable source, according to their about this site information,

polonus

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: Block those malware domains....
« Reply #8 on: May 20, 2009, 12:53:02 AM »
 :(
Ad-Block list is too big, difficult to download and error on processing.
I'll keep only the malware domains blocked  :)

Hmmm... HostsMan isn't able to update hosts... what's up now?
The best things in life are free.

Offline scythe944

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2913
    • My Tech Blog
Re: Block those malware domains....
« Reply #9 on: May 20, 2009, 05:44:38 AM »
I always belive that keeping the hosts file updated manually (for a single computer of course) is easier.

I used to download a hosts file from some guy named mike.  I used to google search, "Mike's hosts file" and his site would come up.  It was decent.  Lot's of bad domains were blocked, and I never had trouble with opening anything that I needed.

Of course, spybot (being useless for anything else) helped with it's, "immunizations" by adding plenty of bad sites into the hosts file, and would keep it up to date.  That's usually what I use today, but nothing beats loading your own customized or favorite list of bad sites into your hosts file manually.

If you have a list that you want to block, browse to: %systemroot%\system32\drivers\etc then open the "hosts" file with notepad.  Paste or type your entries manually.  If there is one that is giving you a problem, rem it out or delete it.  Add others that you want added.  Simple enough...
For generic computer (not avast) problems, you can also visit my forum for help: http://www.jacobytech.net/forum

YoKenny

  • Guest
Re: Block those malware domains....
« Reply #10 on: May 20, 2009, 11:07:33 AM »
:(
Ad-Block list is too big, difficult to download and error on processing.
I'll keep only the malware domains blocked  :)

Hmmm... HostsMan isn't able to update hosts... what's up now?

The format on Hosts File Project is not compatable with HostsMan.

hpHosts uses Malware Domain Blocklist as one of the sources of for updates.

See hpHosts blog for his latest additions:
http://hphosts.blogspot.com

Spybot S&D's HOSTS file adds many dead entries to the HOSTS file and I have not used it for a long time and infact I don't use Spybot S&D anymore as it has not kept up with the times.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: Block those malware domains....
« Reply #11 on: May 20, 2009, 02:37:36 PM »
hpHosts uses Malware Domain Blocklist as one of the sources of for updates.
Do you mean that if I already have hpHosts source into HostsMan I do not need to add the Malware Domains file?
The best things in life are free.

YoKenny

  • Guest
Re: Block those malware domains....
« Reply #12 on: May 20, 2009, 03:37:19 PM »
hpHosts uses Malware Domain Blocklist as one of the sources of for updates.
Do you mean that if I already have hpHosts source into HostsMan I do not need to add the Malware Domains file?
That's correct.

Unless you want to maintain your own HOSTS file and want up to the minute updates then check for old entries that are not valid as the malware sites are usually knocked off the net quite quickly thanks to the malware fighters.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: Block those malware domains....
« Reply #13 on: May 20, 2009, 04:33:26 PM »
Thanks YoKenny.
It's too little and the update is fast. I'll let it there and let HostsMan delete duplicate entries ;)
The best things in life are free.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: Block those malware domains....
« Reply #14 on: May 20, 2009, 04:36:43 PM »
By the way, do you know any other hosts file source that could/should be added to HostsMan?
The best things in life are free.