wondershare-crap.txt

# Sneaky installs (goes for many Wondershare and iSkysoft branded apps amongst others ”controlled by the mothership”. 
# ----------------
$HOME/Library/Application Support/Helper/Wondershare Helper Compact.app
$HOME/Library/Application Support/Wondershare/Helper/*
$HOME/Library/Application Support/Helper/iSkysoft Helper Compact.app
$HOME/Library/Preferences/com.Wondershare.Video Editor.plist
$HOME/Library/Preferences/com.wondershare.helper_compact.plist
/Users/Shared/.Wondershare.dat
/Users/Shared/Wondershare.plist
$HOME/Library/Helper/*
$HOME/Library/Helpers/*
#

$HOME/Library/Application Support/MediaDownloadKit/* 
# Installed silently by some Wondershare and Wondershare iSkysoft branded apps
# which leads to FVD Media and similar URIs for automatically install 
# adware browser extensions. 
#
# Also, Wondershare also installs a login item for Helper Compact.app 
# Removing Helper Compact.app and launching a Wondershare app again, will
# reinstall the Helper Compact.app, same goes for MediaDownloadKit.
# You can prevent this (if you for some reason still want to run this crap) by
# replace the "Wondershare Helper Compact.app" with a empty text file with the
# same name inside /Contents/Resources/ of the Wondershare application. Or
# you can clean the folder contents of:
# $HOME/Library/Application Support/MediaDownloadKit/ 
# and add a empty text file with the name "Wondershare Helper Compact.app" inside
# $HOME/Library/Application Support/Helper/
# and then lock both folders. It will generate a lot errors in the logs,
# but the applications will run without Helper Compact.app crap. 

# URIs and hosts used by Wondershare and other Wondershare rebranded apps from inside
# various app bundles (note: some are legitimate, such hosts for activating software and so on):

# [1] General
# ------------------------------------------------------------
0.0.0.0 cbs.wondershare.com # (Same as cbs.iskysoft.com)
0.0.0.0 cbs.iskysoft.com 
0.0.0.0 api.wondershare.com
0.0.0.0 api.iskysoft.com
0.0.0.0 api.aimersoft.com   # (Same as cbs.iskysoft.com) 
0.0.0.0 api.xillisoft.com
0.0.0.0 api.tuneup360.com 
0.0.0.0 i.wondershare.com   # (Same as api.aimersoft.com)
0.0.0.0 i.iskysoft.com      # (Same as api.iskysoft.com)
0.0.0.0 i.aimersoft.com     # (Same as cbs.iskysoft.com)
0.0.0.0 i.tuneup360.com     # (Same as api.aimersoft.com)
0.0.0.0 macplatform.wondershare.com
0.0.0.0 platform.wondershare.com
0.0.0.0 wondershare.cn.edgesuite.net
0.0.0.0 resource.wondershare.com
0.0.0.0 resource.wondershare.com.cdnga.net
0.0.0.0 my.wondershare.com
0.0.0.0 us.wondershare.com
0.0.0.0 pop.wondershare.com
0.0.0.0 rest.wondershare.com
0.0.0.0 rest.iskysoft.com
0.0.0.0 wondershare.com
0.0.0.0 www.wondershare.com
0.0.0.0 iskysoft.com
0.0.0.0 www.iskysoft.com
0.0.0.0 download.wondershare.com
0.0.0.0 interface.wondershare.com
0.0.0.0 datarecovery.wondershare.com
0.0.0.0 lt.wondershare.com
0.0.0.0 ori-www.wondershare.com
0.0.0.0 api.fantashow.wondershare.com
0.0.0.0 us-stats.wondershare.com
0.0.0.0 images2.wondershare.com
0.0.0.0 pdfimages.wondershare.com
0.0.0.0 pdf.wondershare.com
0.0.0.0 resource.wondershare.com
0.0.0.0 download.ru.wondershare.com
0.0.0.0 filmora.wondershare.com
0.0.0.0 chenzd@rdsvn.wondershare.cn
0.0.0.0 svn.wondershare.com
0.0.0.0 svn.wondershare.cn
0.0.0.0 labs.wondershare.com
0.0.0.0 download.nl.wondershare.com
0.0.0.0 shop.wondershare.com
0.0.0.0 sell.wondershare.com
0.0.0.0 file.wondershare.com
0.0.0.0 statics.was.wondershare.com
0.0.0.0 images.ru.wondershare.com
0.0.0.0 nl.wondershare.com
0.0.0.0 images.nl.wondershare.com
0.0.0.0 photo.wondershare.com
0.0.0.0 images.player.wondershare.com
0.0.0.0 was-stats.wondershare.com
0.0.0.0 was.wondershare.com
0.0.0.0 mobilego.wondershare.com
0.0.0.0 powercam.wondershare.com
0.0.0.0 rest.wondershare.com
0.0.0.0 res.wondershare.com
0.0.0.0 player.wondershare.com
0.0.0.0 fantashow.wondershare.com
0.0.0.0 ori-download.wondershare.com
0.0.0.0 newaffiliateadownload.wondershare.com
0.0.0.0 newsletters.wondershare.com
0.0.0.0 support.wondershare.com
0.0.0.0 support.wondershare.br
0.0.0.0 support.wondershare.de
0.0.0.0 support.wondershare.es
0.0.0.0 support.wondershare.fr
0.0.0.0 support.wondershare.it
0.0.0.0 store.wondershare.com
0.0.0.0 my.wondershare.com
0.0.0.0 i.wondershare.com
0.0.0.0 newsletter.wondershare.com
0.0.0.0 download-affiliate.wondershare.com
0.0.0.0 blog.wondershare.com
0.0.0.0 free.wondershare.com
0.0.0.0 images.fantashow.wondershare.com
0.0.0.0 images.wondershare.com
0.0.0.0 tw.wondershare.com
0.0.0.0 uk.wondershare.com
0.0.0.0 no.wondershare.com
0.0.0.0 hi.wondershare.com
0.0.0.0 otq.wondershare.com
0.0.0.0 bs.wondershare.com
0.0.0.0 ha.wondershare.com
0.0.0.0 th.wondershare.com
0.0.0.0 iw.wondershare.com
0.0.0.0 ms.wondershare.com
0.0.0.0 dk.wondershare.com
0.0.0.0 id.wondershare.com
0.0.0.0 ro.wondershare.com
0.0.0.0 vi.wondershare.com
0.0.0.0 sr.wondershare.com
0.0.0.0 sk.wondershare.com
0.0.0.0 tr.wondershare.com
0.0.0.0 fi.wondershare.com
0.0.0.0 cs.wondershare.com
0.0.0.0 sa.wondershare.com
0.0.0.0 pl.wondershare.com
0.0.0.0 jp.wondershare.com
0.0.0.0 sv.wondershare.com
0.0.0.0 ru.wondershare.com
0.0.0.0 www.isky.co.kr
0.0.0.0 isky.co.kr
0.0.0.0 support.iskysoft.com
0.0.0.0 us.iskysoft.com
0.0.0.0 filmora.iskysoft.com
0.0.0.0 filmora.iskysoft.cn
0.0.0.0 lonasoft.com
0.0.0.0 www.lonasoft.com
0.0.0.0 www.avsmedia.com
0.0.0.0 avsmedia.com
0.0.0.0 aura4you.com
0.0.0.0 www.aura4you.com
0.0.0.0 www.amacsoft.com
0.0.0.0 daniusoft.com 
0.0.0.0 www.daniusoft.com
0.0.0.0 aimersoft.com
0.0.0.0 www.aimersoft.com
0.0.0.0 aiseesoft.com
0.0.0.0 www.aiseesoft.com
0.0.0.0 4videosoft.com
0.0.0.0 www.4videosoft.com
0.0.0.0 www.tipard.com
0.0.0.0 tipard.com
0.0.0.0 3herosoft.com
0.0.0.0 www.3herosoft.com
0.0.0.0 www.useesoft.com
0.0.0.0 xilisoft.com
0.0.0.0 www.xilisoft.com
0.0.0.0 download.xilisoft.com
0.0.0.0 m4vgear.com
0.0.0.0 www.m4vgear.com
0.0.0.0 www.istonsoft.com
0.0.0.0 istonsoft.com
0.0.0.0 macxdvd.com
0.0.0.0 www.macxdvd.com
0.0.0.0 macxdvd.com
0.0.0.0 www.5kplayer.com
0.0.0.0 5kplayer.com
0.0.0.0 www.chungwasoft.com
0.0.0.0 www.feingeist.io
0.0.0.0 chungwasoft.com
0.0.0.0 feingeist.io
0.0.0.0 chat.epubor.com
0.0.0.0 code.epubor.com
0.0.0.0 download.epubor.com
0.0.0.0 trace.epubor.com
0.0.0.0 epubee.com
0.0.0.0 epubor.com
0.0.0.0 anicesoft.com
0.0.0.0 www.anicesoft.com
0.0.0.0 trace.anicesoft.com
0.0.0.0 download.anicesoft.com
0.0.0.0 code.anicesoft.com
0.0.0.0 aneesoft.com
0.0.0.0 www.aneesoft.com
0.0.0.0 download.aneesoft.com
0.0.0.0 aneesoft.cn
0.0.0.0 www.aneesoft.cn
0.0.0.0 files.movavi.com
0.0.0.0 img.movavi.com
0.0.0.0 mip2.movavi.com
0.0.0.0 links.movavi.com
0.0.0.0 movai.com
0.0.0.0 www.movai.com
0.0.0.0 cdn.movai.com
0.0.0.0 etinysoft.com
0.0.0.0 license.etinysoft.com
0.0.0.0 update.etinysoft.com
0.0.0.0 www.etinysoft.com
0.0.0.0 effectmatrix.com
0.0.0.0 www.effectmatrix.com
0.0.0.0 ziiosoft.net
0.0.0.0 www.ziiosoft.net
0.0.0.0 updates.ziiosoft.net
0.0.0.0 cdn.ziiosoft.net
0.0.0.0 license.ziiosoft.net
0.0.0.0 www.ifunia.com
0.0.0.0 ifunia.com
0.0.0.0 download.ifunia.com
0.0.0.0 downloads.ifunia.com
0.0.0.0 support.ifunia.com
0.0.0.0 ifunia.cn
0.0.0.0 www.ifunia.cn
0.0.0.0 activate.eltima.com # Russian
0.0.0.0 eltima.com # Russian
0.0.0.0 mac.eltima.com # Russian
0.0.0.0 www.4videosoft.com
0.0.0.0 4videosoft.com
0.0.0.0 download.4videosoft.com
0.0.0.0 downloads.4videosoft.com
0.0.0.0 support.4videosoft.com
0.0.0.0 blog.4videosoft.com
0.0.0.0 4videosoft.jp # -> Referral or Destination
0.0.0.0 www.4videosoft.jp # -> Referral or Destination
0.0.0.0 4videosoft.fr # -> Referral or Destination
0.0.0.0 www.4videosoft.fr # -> Referral or Destination
0.0.0.0 4videosoft.de # -> Referral or Destination
0.0.0.0 www.4videosoft.de # -> Referral or Destination
0.0.0.0 4videosoft-screen-capture.en.softonic.com # -> Referral or Destination
0.0.0.0 fantamorph.com
0.0.0.0 www.fantamorph.com
0.0.0.0 www.abrosoft.com
0.0.0.0 abrosoft.com
0.0.0.0 appstatico.com # Tracking that installs silently upon app launch. Not Wondershare
0.0.0.0 appstatico.eltima.com # Tracking that installs silently upon app launch
0.0.0.0 fontframe.com # Serving adware
0.0.0.0 www.fontframe.com # Serving adware
0.0.0.0 www.cyberlink.com
0.0.0.0 cyberlink.com
0.0.0.0 www.divxity.com # Affiliate
0.0.0.0 divxity.com # Affiliate
0.0.0.0 www.loronix.com # Intelligence Solutions
0.0.0.0 loronix.com # Intelligence Solutions
0.0.0.0 www.winimage.com
0.0.0.0 winimage.com
0.0.0.0 video-converter.jp
0.0.0.0 www.video-converter.jp
0.0.0.0 96.17.10.24 # api.tuneup360.com (Known IP)
0.0.0.0 69.172.201.208 # api.xillisoft.com (Known IP)
0.0.0.0 203.130.48.6 # cbs.iskysoft.com (Known IP)
0.0.0.0 70.39.189.218 # api.iskysoft.com (Known IP)
0.0.0.0 96.17.10.41 # api.wondershare.com (Known IP)
0.0.0.0 96.17.10.25 # api.wondershare.com (Known IP)
0.0.0.0 203.130.48.18 # macplatform.wondershare.com (Helper Compact.app) 
0.0.0.0 70.39.189.178 # (Helper Compact.app) 
0.0.0.0 205.185.206.155 # wondershare.cn.edgesuite.net (Known IP)
0.0.0.0 96.17.10.26 # wondershare.cn.edgesuite.net (Known IP)
0.0.0.0 184.173.254.16 # wondershare.cn.edgesuite.net (Known IP)
0.0.0.0 184.173.254.16-static.reverse.softlayer.com # (See above)
0.0.0.0 203.130.48.6-bj-cnc # (See above)
0.0.0.0 a1737.g.akamai.net # (Associated with Wondershare)
0.0.0.0 203.130.48.18 # Wondershare Compact Helper.app
0.0.0.0 70.39.189.178 # Wondershare Compact Helper.app
0.0.0.0 192.168.10.48 # Wondershare and OEM Local Servers
0.0.0.0 192.168.10.240 # Wondershare and OEM Local Servers
0.0.0.0 58.254.132.67 # Wondershare Local - Checks and Sends Device Info
0.0.0.0 www.bugsplatsoftware.com
0.0.0.0 bugsplatsoftware.com
# [2] Browser Extensions
# ------------------------------------------------------------
0.0.0.0 fvdsuite.com # FVD Extensions/Add-ons 
0.0.0.0 www.fvdsuite.com
0.0.0.0 fvd-player.com 
0.0.0.0 fvd-converter.com 
0.0.0.0 fvdconverter.com
0.0.0.0 www.fvdconverter.com
0.0.0.0 fvdplayer.com
0.0.0.0 www.fvdplayer.com
0.0.0.0 flashvideodownloader.org 
0.0.0.0 www.flashvideodownloader.org
0.0.0.0 rp.tadanadanet1.com 
0.0.0.0 tadanadanet1.com
0.0.0.0 tadanadanet.com 
0.0.0.0 www.flash-video-soft.com
0.0.0.0 wontube.com
0.0.0.0 www.wontube.com 
0.0.0.0 xydownloader.com
0.0.0.0 www.xydownloader.com
0.0.0.0 www.break.com # Most likely to be a content provider of JS inserts
0.0.0.0 break.com 
0.0.0.0 dp.ppstv.com
0.0.0.0 loadup.ru
0.0.0.0 frame.loadup.ru
0.0.0.0 frame2.loadup.ru
0.0.0.0 frame3.loadup.ru
0.0.0.0 frame4.loadup.ru
0.0.0.0 frame5.loadup.ru
0.0.0.0 frame6.loadup.ru
0.0.0.0 frame7.loadup.ru
0.0.0.0 frame8.loadup.ru
0.0.0.0 frame9.loadup.ru
0.0.0.0 mymedia.yam.com
0.0.0.0 release.theplatform.com
0.0.0.0 support.brightcove.com

# [3] Search Result Spam
# ------------------------------------------------------------
0.0.0.0 software.informer.com
0.0.0.0 informer.com
0.0.0.0 softonic.com
0.0.0.0 www.informer.com
0.0.0.0 www.softonic.com
0.0.0.0 en.softonic.com
0.0.0.0 macdownload.informer.com
0.0.0.0 www.uptodown.com
0.0.0.0 uptodown.com
0.0.0.0 en.uptodown.com
0.0.0.0 www.soft32.com
0.0.0.0 soft32.com
0.0.0.0 aneesoft-free-avi-video-converter.software.informer.com
0.0.0.0 super-video-converter.en.softonic.com
0.0.0.0 aneesoft-free-youtube-downloader.software.informer.com
0.0.0.0 aneesoft-youtube-converter.software.informer.com
0.0.0.0 aneesoft-3d-flash-gallery.software.informer.com
0.0.0.0 aneesoft-dvd-creator.software.informer.com
0.0.0.0 aneesoft-video-converter-pro.software.informer.com
0.0.0.0 aneesoft-free-flv-video-converter.software.informer.com
0.0.0.0 iskysoft-video-converter-ultimate.software.informer.com
0.0.0.0 total-video-converter-mac-free.en.softonic.com
0.0.0.0 total-video-converter.en.softonic.com
0.0.0.0 total-video-converter-mac.en.softonic.com
0.0.0.0 bigasoft-total-video-converter-for-mac.en.softonic.com
0.0.0.0 bigasoft-total-video-converter.en.softonic.com
0.0.0.0 total-video-converter.en.uptodown.com
0.0.0.0 total-video-converter-lite-for-mac.soft32.com
0.0.0.0 mac-video-converter-review.toptenreviews.com
0.0.0.0 toptenreviews.com
0.0.0.0 www.toptenreviews.com
0.0.0.0 aiseesoft-mac-video-converter.en.softonic.com
0.0.0.0 total-video-downloader-for-mac.en.softonic.com
0.0.0.0 total-video-converter-mac.softonic.com
0.0.0.0 www.mac-videoconverter.com
0.0.0.0 mac-videoconverter.com
0.0.0.0 alternativeto.net
0.0.0.0 www.snowfoxsoft.com
0.0.0.0 snowfoxsoft.com
0.0.0.0 giveawayoftheday.com
0.0.0.0 www.giveawayoftheday.com
0.0.0.0 asandl.com
0.0.0.0 urlmetryka.pl
0.0.0.0 www.anedia.pl
0.0.0.0 anedia.pl
0.0.0.0 www.androidauthority.com
0.0.0.0 androidauthority.com
0.0.0.0 usercoupon.com
0.0.0.0 www.usercoupon.com
0.0.0.0 www.360couponcodes.com
0.0.0.0 360couponcodes.com
0.0.0.0 couponschloe.com
0.0.0.0 www.couponschloe.com
0.0.0.0 www.couponsock.com
0.0.0.0 couponsock.com
0.0.0.0 downloadcentral.dk
0.0.0.0 www.downloadcentral.dk
0.0.0.0 programmer.downloadcentral.dk
0.0.0.0 nefd.com
0.0.0.0 www.nefd.com
0.0.0.0 liveinternet.ru
0.0.0.0 www.liveinternet.ru
0.0.0.0 www.softsea.com
0.0.0.0 softsea.com
0.0.0.0 thinstallsoft.com
0.0.0.0 www.thinstallsoft.com
0.0.0.0 software-discount.tk
0.0.0.0 www.software-discount.tk
0.0.0.0 skacat.com
0.0.0.0 www.skacat.com
0.0.0.0 www.lakii.com
0.0.0.0 lakii.com
0.0.0.0 www.81fuenf.de
0.0.0.0 81fuenf.de
0.0.0.0 www.downloadcrew.com
0.0.0.0 downloadcrew.com
0.0.0.0 w3bin.com
0.0.0.0 www.w3bin.com
0.0.0.0 taiwanheart.ning.com
0.0.0.0 www.maikel8mobileandroide.com
0.0.0.0 maikel8mobileandroide.com
0.0.0.0 www.keycode.asia
0.0.0.0 keycode.asia
0.0.0.0 f1f1f.com
0.0.0.0 www.f1f1f.com
0.0.0.0 tricks-collections.com
0.0.0.0 stakeweb.com
0.0.0.0 ipad-review.ru
0.0.0.0 www.ipad-review.ru
0.0.0.0 download.cristianls.com
0.0.0.0 cristianls.com
0.0.0.0 titulsoft.com
0.0.0.0 www.titulsoft.com
0.0.0.0 tfile.co
0.0.0.0 www.tfile.co # .co not .com
0.0.0.0 giveaway.ht95.net
0.0.0.0 ht95.net
0.0.0.0 www.ht95.net
0.0.0.0 www.brothergiveaway.com
0.0.0.0 brothergiveaway.com
0.0.0.0 rsdown.cn
0.0.0.0 www.rsdown.cn
0.0.0.0 www.supershareware.com
0.0.0.0 supershareware.com
0.0.0.0 windows.podnova.com
0.0.0.0 podnova.com
0.0.0.0 www.gilsmethod.com
0.0.0.0 gilsmethod.com
0.0.0.0 mmaxwellassoc.com
0.0.0.0 www.mmaxwellassoc.com
0.0.0.0 sunshou0912.typepad.com
0.0.0.0 www.appolicious.com
0.0.0.0 appolicious.com
0.0.0.0 gamingthrill.weebly.com
0.0.0.0 rutracker.org
0.0.0.0 www.verycd.com
0.0.0.0 verycd.com
0.0.0.0 downloads.tomsguide.com
0.0.0.0 tomsguide.com
0.0.0.0 www.taringa.net
0.0.0.0 taringa.net
0.0.0.0 2-macuninstaller.com
# [5] IPs used by the Wondershare minions
# ------------------------------------------------------------
0.0.0.0 59.175.104.125
0.0.0.0 59.175.109.66
0.0.0.0 59.175.109.69
0.0.0.0 59.175.119.235
0.0.0.0 59.175.130.116
0.0.0.0 59.175.130.176
0.0.0.0 59.175.132.102
0.0.0.0 59.175.134.18
0.0.0.0 59.175.134.20
0.0.0.0 59.175.135.166
0.0.0.0 59.175.137.247
0.0.0.0 59.175.137.254
0.0.0.0 59.175.137.531
0.0.0.0 59.175.137.69
0.0.0.0 59.175.142.170
0.0.0.0 59.175.142.173
0.0.0.0 59.175.142.190
0.0.0.0 59.175.142.24
0.0.0.0 59.175.142.29
0.0.0.0 59.175.142.34
0.0.0.0 59.175.142.38
0.0.0.0 59.175.142.40
0.0.0.0 59.175.142.50
0.0.0.0 59.175.144.110
0.0.0.0 59.175.144.123
0.0.0.0 59.175.144.42
0.0.0.0 59.175.144.85
0.0.0.0 59.175.144.87
0.0.0.0 59.175.145.102
0.0.0.0 59.175.145.116
0.0.0.0 59.175.145.124
0.0.0.0 59.175.145.132
0.0.0.0 59.175.145.154
0.0.0.0 59.175.145.156
0.0.0.0 59.175.145.166
0.0.0.0 59.175.145.179
0.0.0.0 59.175.145.200
0.0.0.0 59.175.145.5
0.0.0.0 59.175.147.82
0.0.0.0 59.175.148.300
0.0.0.0 59.175.148.34
0.0.0.0 59.175.148.5
0.0.0.0 59.175.148.59
0.0.0.0 59.175.148.66
0.0.0.0 59.175.148.79
0.0.0.0 59.175.153.106
0.0.0.0 59.175.153.150
0.0.0.0 59.175.153.20
0.0.0.0 59.175.153.27
0.0.0.0 59.175.153.45
0.0.0.0 59.175.153.51
0.0.0.0 59.175.160.42
0.0.0.0 59.175.180.18
0.0.0.0 59.175.181.243
0.0.0.0 59.175.181.247
0.0.0.0 59.175.181.251
0.0.0.0 59.175.182.146
0.0.0.0 59.175.188.165
0.0.0.0 59.175.188.82
0.0.0.0 59.175.195.220
0.0.0.0 59.175.201.152
0.0.0.0 59.175.201.226
0.0.0.0 59.175.213.67
0.0.0.0 59.175.214.3
0.0.0.0 59.175.218.126
0.0.0.0 59.175.218.195
0.0.0.0 59.175.230.59
0.0.0.0 59.175.233.118
0.0.0.0 59.175.238.11
0.0.0.0 59.175.238.117
0.0.0.0 59.175.238.122
0.0.0.0 59.175.238.16
0.0.0.0 59.175.238.19
0.0.0.0 59.175.238.39
0.0.0.0 59.175.238.68
0.0.0.0 59.175.238.95
0.0.0.0 59.175.238.977
0.0.0.0 59.175.32.231
0.0.0.0 59.175.37.80
0.0.0.0 180.97.106.162
0.0.0.0 59.175.130.54