Sunday, December 11, 2011

sTREAMrIDE Ortel Communications

Recently I am finding some serious advertisement business by Ortel Communications.

Issue is:
If you browse any http website you will find an advertisement pooping up just below the page. The advertisement is not being placed by the website owner, rather it is being added by Ortel or by any malicious program in their system. Following is the code found just below the <body> tag of any web page.

<div id="sTREAMrIDE" class="5"></div><script type="text/javascript" src="http://ui.streamride.net/ui.js"></script>

It is communicating with ui.streamride.net for loading the advertisement.

Following is the whois output:
Whois Server Version 2.0
Domain Name: STREAMRIDE.NET
Registrar: GODADDY.COM, INC.
Whois Server: whois.godaddy.com
Referral URL: http://registrar.godaddy.com
Name Server: NS11.DOMAINCONTROL.COM
Name Server: NS12.DOMAINCONTROL.COM
Status: ok
Updated Date: 25-jul-2011
Creation Date: 05-jul-2010
Expiration Date: 05-jul-2012

Registrant:
Envisage Media
L 60/B Basement
Malviya Nagar
New Delhi, Delhi 110017
I
Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)
Domain Name: STREAMRIDE.NET
Created on: 05-Jul-10
Expires on: 05-Jul-12
Last Updated on: 25-Jul-11

Administrative Contact:
verma, saurav envisagemedia.in@gmail.com
Envisage Media
L 60/B Basement
Malviya Nagar
New Delhi, Delhi 110017
India
+91.9958491323 Fax --

Technical Contact:
verma, saurav envisagemedia.in@gmail.com
Envisage Media
L 60/B Basement
Malviya Nagar
New Delhi, Delhi 110017
India
+91.9958491323 Fax --

Domain servers in listed order:
NS11.DOMAINCONTROL.COM
NS12.DOMAINCONTROL.COM

I have complained this to Ortal, let's see what they are doing for some time. Mean while to be safe from this cheater, I have a small personal solution, which you can follow too.


Solution:

Windows users:
Open file: "C:\windows\system32\drivers\etc\hosts"

Linux users:
Open file: /etc/hosts

Add the following code:
127.0.0.1        streamride.net ui.streamride.net

Save it. From now on, your browser will communicate with your local system and will never be able to find ui.streamride.net/ui.js

This is how I am protecting my self.