blocking of iframeDollars

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
   In the May 30 issue of InformationWeek, page 63, ther was an article
"From Russia With Malware".
   It states that "companies can prevent the downloading of adware and
spyware from iframeDollars' servers by blocking the IP address  .
   However, they do not give example(s) of what to put in the HOSTS file
for individual peons.
   So, in order that we do not get peed-on, would someone be so kind as
to provide that service?

Re: blocking of iframeDollars

In news: Robert Baer typed:
Quoted text here. Click to load it

Add - to your firewall deffinitions!
Works great.  :)

Re: blocking of iframeDollars

Quoted text here. Click to load it

There's no provision for blocking an IP address in the HOSTS file.
You'd need to know the host name.
Typically "ping -a" entered at a command pormpt would resolve
the name. In this case it doesn't; that address isn't pingable.
Whois isn't much help either; so as far as the HOSTS file goes, I don't know
what to tell you.
If you are behind a configurable router, maybe you could block the IP
address there.


Go here and get their most excellent HOSTS file:

Re: blocking of iframeDollars

On Sun, 05 Jun 2005 13:52:23 GMT Colon Terminus wrote:

Quoted text here. Click to load it
inetnum: -
org:          ORG-EA40-RIPE
netname:      RU-ELTEL-20021128
descr:        ELTEL.NET
descr:        PROVIDER
country:      RU
admin-c:      ER4040-RIPE
tech-c:       ER4040-RIPE
status:       ALLOCATED PA
mnt-by:       RIPE-NCC-HM-MNT
mnt-lower:    ELTEL-RIPE-MNT
mnt-routes:   ELTEL-RIPE-MNT
source:       RIPE # Filtered

organisation:   ORG-EA40-RIPE
org-name:       ELTEL
org-type:       LIR
address:        10N, 65-67, Chaykovskogo Str.
address:        191123
address:        Saint-Petersburg
address:        Russian Federation
phone:          +7 812 4381100
fax-no:         +7 812 4381101
admin-c:        DS544-RIPE
admin-c:        OS1157-RIPE
admin-c:        AG12797-RIPE
admin-c:        SA507-RIPE
mnt-ref:        ELTEL-RIPE-MNT
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
source:         RIPE # Filtered

role:           ELTEL REGISTRY
address:        JSC ELTEL
address:        10N, 65-67,
address:        Chaykovskogo st.
address:        191123 Saint-Petersburg
address:        Russia
phone:          +7 812 4381100
phone:          +7 812 4381102
fax-no:         +7 812 4381101
remarks:        trouble:      Points of contact for ELTEL
remarks:        trouble:      Sales:
remarks:        trouble:      Routing and peering issues:
remarks:        trouble:      SPAM and Network security issues:
remarks:        trouble:      Mail issues:
remarks:        trouble:      LIR issues:
remarks:        trouble:      Information:
remarks:        trouble:      Hosting:
admin-c:        SA507-RIPE
admin-c:        OS1157-RIPE
tech-c:         AG12797-RIPE
tech-c:         YV89-RIPE
nic-hdl:        ER4040-RIPE
mnt-by:         ELTEL-RIPE-MNT
source:         RIPE # Filtered

% Information related to ''

origin:       AS20597
mnt-by:       ELTEL-RIPE-MNT
source:       RIPE # Filtered
Ernie B.

Communication:  The art of moving an idea from one mind to another,
hopefully without distortion.

Re: blocking of iframeDollars

Quoted text here. Click to load it

According to there are only three
domain names on that ip.  Note that the reverse domains lookup is often
incomplete.  To block those three, add ... BESTCOUNTER.BIZ IFRAMEDOLLARS.BIZ IFRAMEDOLLARS.COM
to your hosts file.

Regards, Dave Hodgins

Change to to reply by email.
( has been set up specifically for
use in usenet. Feel free to use it yourself.)

Re: blocking of iframeDollars

David W. Hodgins wrote:

Quoted text here. Click to load it

Site Timeline