! Title: uBlock filters – Badware risks
! Description: For sites documented to put users at risk of installing adware/crapware etc.
!              The purpose is to at least ensure a user is warned of the risks ahead.
! Expires: 4 days
! Licence: https://github.com/uBlockOrigin/uAssets/blob/master/LICENSE
! Homepage: https://github.com/uBlockOrigin/uAssets
!
! GitHub issues: https://github.com/uBlockOrigin/uAssets/issues
! GitHub pull requests: https://github.com/uBlockOrigin/uAssets/pulls
!
! Each entry has to be well enough sourced, see:
! https://github.com/gorhill/uBlock/wiki/Badware-risks

! Using request of type `document` will cause the whole site to be blocked through
! strict blocking, yet the site will render properly if a user still decide to
! go ahead.

! 2014-10-22: http://assiste.com/01Net.html
! 2013-03-25: http://www.malekal.com/2011/07/09/pctutotuto4pc-association-avec-01net/
! 2012-10-31: http://www.journaldunet.com/solutions/dsi/des-malwares-sur-telecharger-com-01net-1012.shtml
! 2012-10-30: http://www.lesnumeriques.com/appli-logiciel/telecharger-depuis-01net-nuit-gravement-a-sante-pc-n26763.html
! 2012-06-17: http://www.malekal.com/2012/06/17/01net-pc-optimizer-pour-ne-pas-optimiser-son-pc/
! 2012-02-17: http://neosting.net/logiciels/01net-et-softonic-ajoutent-aussi-un-installeur-publicitaire.html
||01net.com/telecharger/$document

! https://github.com/uBlockOrigin/uAssets/issues/42
! 2015-05-04: http://www.randombrick.de/downloads-von-chip-de-ueber-den-chip-installer-vermeiden/
! 2015-04-??: http://anleitung.trojaner-board.de/chip-installer
chip.de##[href^="javascript:DownloadStartInit"]

! 2015-03-11: http://blog.emsisoft.com/2015/03/11/mind-the-pup-top-download-portals-to-avoid/
! 2015-01-21: http://www.howtogeek.com/207692/yes-every-freeware-download-site-is-serving-crapware-heres-the-proof/
! 2015-01-11: http://www.howtogeek.com/198622/heres-what-happens-when-you-install-the-top-10-download.com-apps/
! 2012-06-27: http://insecure.org/news/download-com-fiasco.html
! 2011-12-05: http://seclists.org/nmap-announce/2011/5
! 2011-08-22: http://www.extremetech.com/computing/93504-download-com-wraps-downloads-in-bloatware-lies-about-motivations
! https://github.com/uBlockOrigin/uAssets/issues/926
! ||download.cnet.com^$document

! 2015-08-12: https://isc.sans.edu/diary/.COM.COM+Used+For+Malicious+Typo+Squatting/20019
!     via https://twitter.com/SwiftOnSecurity/status/631972601460494336
! 2013-12-10: https://blog.whitehatsec.com/why-com-com-should-scare-you/
||com.com^$document

! 2015-06-18: http://www.information-age.com/industry/software/123459675/hotbed-malware-another-blow-sourceforge-google-discovers-588-pages-malicious-software
! 2015-06-02: https://blog.l0cal.com/2015/06/02/what-happened-to-sourceforge/
! 2015-05-28: http://libregraphicsworld.org/blog/entry/anatomy-of-sourceforge-gimp-controversy
! 2015-05-17: http://lifehacker.com/antiadware-gets-rid-of-bundled-crapware-on-popular-down-1702818594
! 2015-03-11: http://blog.emsisoft.com/2015/03/11/mind-the-pup-top-download-portals-to-avoid/
! 2015-01-21: http://www.howtogeek.com/207692/yes-every-freeware-download-site-is-serving-crapware-heres-the-proof/
! 2014-11-25: http://blog.tedd.no/2014/11/25/sourceforge-malware/
! ||sourceforge.net^$document

! https://github.com/uBlockOrigin/uAssets/issues/476
! 2015-05-17: http://lifehacker.com/antiadware-gets-rid-of-bundled-crapware-on-popular-down-1702818594
! 2015-03-11: http://blog.emsisoft.com/2015/03/11/mind-the-pup-top-download-portals-to-avoid/
! 2013-05-23: http://www.intego.com/mac-security-blog/another-problematic-softonic-installer-brings-adware/
! 2013-04-19: http://www.esecurityplanet.com/malware/softonic-delivers-adware.html
! 2013-04-17: http://www.intego.com/mac-security-blog/softonic-download-site-briefly-delivers-trojan-adware-installer/
! 2012-02-17: http://neosting.net/logiciels/01net-et-softonic-ajoutent-aussi-un-installeur-publicitaire.html
! ||softonic.com^$document

! https://github.com/uBlockOrigin/uAssets/issues/79
||flexytalk.net^
||quickdomainfwd.com^

! https://blog.malwarebytes.com/cybercrime/2017/05/roughted-the-anti-ad-blocker-malvertiser/
||roughted.com^
||roughted.com^$inline-script

! https://github.com/uBlockOrigin/uAssets/issues/1547
||vlc.de^$document

! https://github.com/uBlockOrigin/uAssets/issues/1738
||audacity.de^$document

! https://github.com/uBlockOrigin/uAssets/issues/1853
||havenworks.com^$document

! https://github.com/uBlockOrigin/uAssets/issues/1943
||securetoolext.com^$document

! https://github.com/NanoAdblocker/NanoFilters/issues/99
upload.ac##+js(remove-attr.js, checked, #chkIsAdd)

! https://github.com/HandyUserscripts/AntiAdware/issues/52
upload4earn.org##+js(remove-attr.js, checked)

! https://github.com/gorhill/uBlock/wiki/Badware-risks#ublockorg
||ublock.org^$document

! https://github.com/uBlockOrigin/uAssets/issues/3060
! https://www.bleepingcomputer.com/news/security/fake-websites-for-keepass-7zip-audacity-others-found-pushing-adware/
! https://www.virustotal.com/#/file/a5616985e92ca7c1df3b132d2da2ef33c64f38ba2dca40445017037473d7d014/detection
||7zip.fr^$document
||appdownloads.co^$document
||azureus.es^$document
||bluestacksdownloads.com^$document
||celestia.es^$document
||celestia.fr^$document
||clonezilla.es^$document
||clonezilla.fr^$document
||garagebandforpc.org^$document
||gimp.es^$document
||gparted.fr^$document
||greenshot.fr^$document
||handbrake.es^$document
||inkscape.es^$document
||inkscape.fr^$document
||keepass.com^$document
||keepass.fr^$document
||notepad2.com^$document
||paintnet.es^$document
||paintnet.fr^$document
||scribus.fr^$document
||stellarium.fr^$document
||thunderbird.es^$document
||unetbootin.net^$document
||unetbootin.org^$document

! https://github.com/uBlockOrigin/uAssets/issues/3730
! https://blog.sucuri.net/2018/10/malicious-redirects-from-newsharecounts-com-tweet-counter.html
||newsharecounts.s3-us-west-2.amazonaws.com/nsc.js$script

! https://github.com/uBlockOrigin/uAssets/issues/4014
! https://www.virustotal.com/#/url/ac1fe407af0592489e7ef1ff2a62e381f05be08311e010fc4a5736b94b08d070/detection
! https://www.scumware.org/report/104.27.174.25.html
||driverfix.com^$document

! https://github.com/uBlockOrigin/uAssets/issues/4137
||governiamo.com^$document

! https://github.com/uBlockOrigin/uAssets/issues/4201
||whatsaappp.com^$document
||check-now.net^$document
||googlo.co^$document
||yahoo-news.co^$document
! https://github.com/uBlockOrigin/uAssets/issues/4201#issuecomment-458340273
||5qg9ibt1a6.com^$document
||atreus.hexenschmiede.info^$document
||axxmtjambo.xyz^$document
||browsergames2018.com^$document
||chairgaubsy.com^$document
||epailseptox.com^$document
||hentaiplaytime.com^$document
||jobhelpr.com^$document
||lameterthenhep.info^$document
||lavfd.net^$document
||microsoft.com-repair-windows.live^$document
||notification-time.com^$document
||o4uxrk33.com^$document
||viewmypdf.com^$document

! https://github.com/uBlockOrigin/uAssets/issues/4236
||dnbard.com^$document

! https://github.com/uBlockOrigin/uAssets/issues/4656
||bitcoinqrcodegenerator.win^$document

! streaming-foot.club badware
||streaming-foot.club^$document