IESnare – Are Bookmakers Spying On You?

By | January 26, 2017

IESnare – Are Bookmakers Spying On You Online?

What Is IESnare?

IESnare, also known as MPSnare, is a spyware that has played a pivotal role in preventing Internet fraud over recent years.  Developed by Iovation, IESnare is a popular spyware utilised by many online businesses, especially online bookmakers.

This is a highly controversial spyware, yet there is little awareness of its presence within the betting community.  IESnare is installed onto your computer/electronic device without permission and used to monitor online activities.

How Does IESnare Work?

Every single online activity requires a connection to a network.  The IESnare Spyware provides online businesses with an extra layer of control and intelligence.  Once installed onto an electronic device, IESnare monitors the online activity on that device.  The analysis is used to create a ‘digital fingerprint’ which can be interpreted by the business.

IESnare provides protection to networks in real-time by identifying the network devices that are being used for malicious, illegal, inappropriate or fraudulent activities.  IESnare then shares this information about the identified devices with all IESnare protected networks.

The information collected helps subscribed networks to make decisions about individual connections critical to business.  They can then know whether to allow, limit, or deny access based on the reputation of the connected devices.

Why Do Bookmakers Use IESnare?

Online betting sites use IESnare to monitor their customer’s online activities in order to detect fraudulent behaviour such as multi-accounting.  However, it has become apparent that IESnare is used to identify bettor who seek value from bookmakers.  Bookmakers can easily identify customers that use matched betting software.

Although matched betting is completely legal, bookmakers hate customers that seek value from their business model.  Due to this, bookmakers can easily restrict/ban betting accounts.

Has IESnare Been Installed On Your Computer?

How To Check Your Device For IESnare

It is advisable that you check your computer for IESnare MPSnare by following these simple steps:

  1. Go to the File Search function on your computer.
  2. Type ‘mpsnare’ into the search bar and hit ‘enter’.
  3. If the spyware has been installed onto the device, one (or a combination) of the following folders will be visible:
  • #mpsnare.iesnare.com
  • #ci-mpsnare.iovation.com
  • mpsnare.iesnare.com
  • ci-mpsnare.iovation.com

An alternative method to search for mpsnare is to open up the command prompt in the start menu and type:

  • dir mp*.com/s

Removing IESnare From Your Computer (Windows)

Deleting IESnare is as simple as deleting the folders listed previously.  This will delete all the history associated with IESnare as well as the spyware itself. However, as many online bookmakers use IESnare, it is very likely that your computer will become infected again.

Hence why it is advisable to block IESnare either manually or with the help of an anti-virus such as Bitdefender.

How To Block IESnare Manually

This manual method of blocking IESnare will not prevent it from being installed onto your computer, but will prevent it from reporting your online activities back to the online user e.g. the bookmaker.  This is done by making changes to your computer’s ‘host file’.

 

  1. Open up ‘notepad’ found in the start menu.  Right Click and select ‘run as administrator.
  2. Once in the notepad, select file, then open and select ‘all files’ in the drop down menu.
  3. The file name is C:\Windows\System32\Drivers\Etc
  4. Press Open.
  5. Right click on hosts and select ‘properties’.
  6. Ensure the ‘read only’ is unchecked.  Click apply and OK.
  7. Double click on ‘hosts’.
  8. Copy and paste the following into the Notepad directly below the line ‘127.0.0.1 localhost’:

127.0.0.1 iesnare.com
127.0.0.1 iesnare.co.uk
127.0.0.1 www.iesnare.co.uk
127.0.0.1 mpsnare.iesnare.com
127.0.0.1 mpsnare.iesnare.co.uk
127.0.0.1 www.mpsnare.iesnare.com
127.0.0.1 www.mpsnare.iesnare.co.uk
127.0.0.1 ci-mpsnare.iesnare.com
127.0.0.1 ci-mpsnare.iesnare.co.uk
127.0.0.1 www.ci-mpsnare.iesnare.com
127.0.0.1 www.ci-mpsnare.iesnare.co.uk
127.0.0.1 admin.iesnare.co.uk
127.0.0.1 www.admin.iesnare.com
127.0.0.1 www.admin.iesnare.co.uk
127.0.0.1 iovation.com
127.0.0.1 iovation.co.uk
127.0.0.1 www.iovation.com
127.0.0.1 www.iovation.co.uk
127.0.0.1 www.iesnare.com
127.0.0.1 admin.iesnare.com
127.0.0.1 dra.iesnare.com
127.0.0.1 impsnare.iesnare.com
127.0.0.1 mpsnare.iesnare.com
127.0.0.1 mx.iesnare.com
127.0.0.1 snare.iesnare.com
127.0.0.1 iovation.com
127.0.0.1 accountlock-demo.iovation.com
127.0.0.1 admin.iovation.com
127.0.0.1 bam-pilot.iovation.com
127.0.0.1 batch.iovation.com
127.0.0.1 ci-accountlock.iovation.com
127.0.0.1 ci-admin.iovation.com
127.0.0.1 ci-mpsnare.iovation.com
127.0.0.1 ci-snare.iovation.com
127.0.0.1 dv-fw-a-nat.iovation.com
127.0.0.1 ioit.iovation.com
127.0.0.1 mx.iovation.com
127.0.0.1 p.iovation.com
127.0.0.1 rm-admin-demo.iovation.com
127.0.0.1 soap.iovation.com
127.0.0.1 test.iovation.com
127.0.0.1 testgw.iovation.com

9. Click file, then Save.

10. Close the notepad, restart your computer.

How To Check If It Has Been Successful

Open up the command prompt found in the Start menu.

Type: ping mpsnare.iesnare.com

The reply should look like the following from 127.0.0.1:

Pinging mpsnare.iesnare.com [127.0.0.1] with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Removing IESnare From Your Computer (MAC)

  1. Open ‘Terminal’ which can be found in Utilities in Applictions.

2. Back up the hosts file to the documents folder by typing the following command prompt:

sudo cp /private/etc/hosts ~/Documents/hosts-backup

3. Open the hosts file by typing the following into the command at the prompt:

sudo nano /private/etc/hosts

4. Once requested, enter the administrator password.

5.  Once the hosts file is loaded within nano, use the arrow keys to navigate to the bottom of the hosts file to make your modifications. Add the following lines:

127.0.0.1 iesnare.com
127.0.0.1 iesnare.co.uk
127.0.0.1 http://www.iesnare.co.uk
127.0.0.1 mpsnare.iesnare.com
127.0.0.1 mpsnare.iesnare.co.uk
127.0.0.1 http://www.mpsnare.iesnare.com
127.0.0.1 http://www.mpsnare.iesnare.co.uk
127.0.0.1 ci-mpsnare.iesnare.com
127.0.0.1 ci-mpsnare.iesnare.co.uk
127.0.0.1 http://www.ci-mpsnare.iesnare.com
127.0.0.1 http://www.ci-mpsnare.iesnare.co.uk
127.0.0.1 admin.iesnare.co.uk
127.0.0.1 http://www.admin.iesnare.com
127.0.0.1 http://www.admin.iesnare.co.uk
127.0.0.1 iovation.com
127.0.0.1 iovation.co.uk
127.0.0.1 http://www.iovation.com
127.0.0.1 http://www.iovation.co.uk
127.0.0.1 http://www.iesnare.com
127.0.0.1 admin.iesnare.com
127.0.0.1 dra.iesnare.com
127.0.0.1 impsnare.iesnare.com
127.0.0.1 mpsnare.iesnare.com
127.0.0.1 mx.iesnare.com
127.0.0.1 snare.iesnare.com
127.0.0.1 iovation.com
127.0.0.1 accountlock-demo.iovation.com
127.0.0.1 admin.iovation.com
127.0.0.1 bam-pilot.iovation.com
127.0.0.1 batch.iovation.com
127.0.0.1 ci-accountlock.iovation.com
127.0.0.1 ci-admin.iovation.com
127.0.0.1 ci-mpsnare.iovation.com
127.0.0.1 ci-snare.iovation.com
127.0.0.1 dv-fw-a-nat.iovation.com
127.0.0.1 ioit.iovation.com
127.0.0.1 mx.iovation.com
127.0.0.1 p.iovation.com
127.0.0.1 rm-admin-demo.iovation.com
127.0.0.1 soap.iovation.com
127.0.0.1 test.iovation.com
127.0.0.1 testgw.iovation.com

6: When finished, hit Control+O followed by ENTER to save changes to /private/etc/hosts, then hit Control+X to exit out of nano.

How To Detect & Prevent The Installation Of IESnare

The best way to prevent the installation of IESnare onto your device is by using an anti-spyware.

The one I personally use and was also named as the #1 Anti-Spyware 2016 is Bitdefender (top10reviews.com).

BitDefender is an anti-virus which also provides protection against spyware and malware.  Bitdefender flags any spyware programs that are attempting to install themselves onto a users’ computer.  This makes the user aware of the presence of the spyware and gives the ability to delete the files instantly.

Summary
IESnare MPSnare - Are Bookmakers Spying On You?
Article Name
IESnare MPSnare - Are Bookmakers Spying On You?
Description
IESnare spyware is highly controversial, yet there is little awareness of its presence within the betting community. It is easy to see why spyware is being installed on electronic devices without permission and being used to analyse online activities but is it morally right?
Author
Publisher Name
The Matched Betting Site
Publisher Logo