Is there an easy way to block the entire .tk domain? 

My virus program finds a lot of malware from the .tk domain, and they still won't take down paid for domains that are known malware vendors. I'd like to just block the whole thing. 

I tried .tk in my hosts file but that didn't work, and it doesn't take wildcards like *.tk 

Oh, the malware was at www2.megosave2.tk  and about a dozen other variants. Tokelau has yet to take it down. Maybe next year after two million more exploit-affected machines.