Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

reimage-plus using fake page


  • Please log in to reply
15 replies to this topic

#1 anniyan

anniyan

  • Members
  • 222 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Under your bed, mwahahahahaha!
  • Local time:08:45 AM

Posted 31 May 2014 - 04:25 PM

http://www.reimageplus.com/lp/majorgeeks/?tracking=MajorGeeks&banner=txt&adgroup=1&ads_name=direct&keyword=direct

 

is a fake page pretending to be a 'majorgeeks.com' page. and the irony is that this link is being displayed in most pages of majorgeeks.com as you can see in the image below.

 

124ek61.png

 

so i would like to bring this to the attention of majorgeeks.com and caution the common users about this deception, being a victim of this myself long back.



Become a BleepingComputer fan on Facebook
Have you seen.....Select Real Security

BC AdBot (Login to Remove)

 


m

#2 TsVk!

TsVk!

    penguin farmer


  • Members
  • 6,230 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Antipodes
  • Local time:01:15 PM

Posted 31 May 2014 - 05:15 PM

I've looked at this, and the file that the link downloads. And, although it does spoof the MajorGeeks page the file it downloads does not appear malicious. That doesn't mean that it isn't freshly encrypted or downloads a payload afterwards...

 

The link itself appears to be a legit banner that supports the MajorGeeks upkeep. The application (whilst very low rated) is legitimate.

 

That said, the product (being a registry cleaner/system hacker) is a living nightmare, and anyone with serious problems will find this program will likely destroy their OS.

 

The tactic itself, by creating a spoofed page where every link downloads the application, speaks volumes about how good the software is and the marketing tactics of developer.

 

Thanks for pointing this nasty out :thumbsup2:



#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:15 PM

Posted 31 May 2014 - 05:47 PM

so i would like to bring this to the attention of majorgeeks.com ...

Then you should also report it at the MajorGeeks forums.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 TsVk!

TsVk!

    penguin farmer


  • Members
  • 6,230 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Antipodes
  • Local time:01:15 PM

Posted 31 May 2014 - 10:00 PM

I did that...



#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:15 PM

Posted 01 June 2014 - 08:51 AM

:thumbup2:
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 anniyan

anniyan
  • Topic Starter

  • Members
  • 222 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Under your bed, mwahahahahaha!
  • Local time:08:45 AM

Posted 01 June 2014 - 09:05 AM

i agree with TSVK. i emailed them too and got this as reply:
 
"It’s not a fake page – That was designed a LOOOOOONG time ago for a couple of reasons, but mainly to get the tracking correct. Clearly could use some updating. And if people are looking at it as suspicious we should probably re-think the whole thing."

Become a BleepingComputer fan on Facebook
Have you seen.....Select Real Security

#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:15 PM

Posted 01 June 2014 - 09:08 AM

So apparently they have been aware for a long time now.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 anniyan

anniyan
  • Topic Starter

  • Members
  • 222 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Under your bed, mwahahahahaha!
  • Local time:08:45 AM

Posted 01 June 2014 - 02:26 PM

yeah, kind of business deal i guess, which is quite strange, considering the excellent reputation of majorgeeks :(

Become a BleepingComputer fan on Facebook
Have you seen.....Select Real Security

#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:15 PM

Posted 01 June 2014 - 08:03 PM

When it comes to generating revenue, almost anything goes.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#10 anniyan

anniyan
  • Topic Starter

  • Members
  • 222 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Under your bed, mwahahahahaha!
  • Local time:08:45 AM

Posted 03 June 2014 - 07:59 PM

^ sorry, i beg to differ. that trick used by reimage is not good professional ethics.

Become a BleepingComputer fan on Facebook
Have you seen.....Select Real Security

#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:15 PM

Posted 03 June 2014 - 08:12 PM

I agree...I never implied what they did here was good professional ethics. I merely provided my observation that in the business world, money seems to trump all.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#12 anniyan

anniyan
  • Topic Starter

  • Members
  • 222 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Under your bed, mwahahahahaha!
  • Local time:08:45 AM

Posted 04 June 2014 - 12:29 PM

yeah. true sir.



Become a BleepingComputer fan on Facebook
Have you seen.....Select Real Security

#13 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:15 PM

Posted 04 June 2014 - 01:34 PM

And remember, we consumers can voice our concerns by being selective with our wallets. :wink:
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#14 MajorGeeks

MajorGeeks

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:11:15 PM

Posted 05 June 2014 - 06:35 AM

Hope ya'all don't mind me popping in here. 

 

Users trump all. Period. if you question that about MajorGeeks, well - you know nothing of our history.  If I wanted to sell out for mere money -- I would have put toolbars and downloaders on the site years ago. 

That page was set up years ago to look integrated but still be able to track sales.  That was sort of the "in thing" for a while. I suspect you've been to hundreds of pages just like it without noticing. The intent was to look like it was part of the normal content, yet still let the advertiser track things from a server side. As much as they would like to, I don't let them see my logs. ;)  But it was not intended to deceive.  Here's another example of similar - that again clearly needs some updating (yowza). http://majorgeeks.tradepub.com/ 

Most pages like that were phased out, that one got missed -  but I never received any complaints until now.

Fortunately, a couple of you wrote me. Looking at it, I thought that the perception that the page was suspicious was a valid concern in today's area. I contacted the company and they changed the page as soon as it was physically possible -- and we are reworking something that looks WAY better.  

 

I highly appreciate the input and ya'all taking the time out of  your lives to contact us and  express your opinions.  Seriously, I fn love that sort of thing. That's what it's about, right? I'm hoping that clears things up for you folks and please feel free to contact me directly if you have any future comments or want to take me to task for getting to close to the line again. ;)

 

Enjoy your day. I need more coffee.
Jim 



#15 TsVk!

TsVk!

    penguin farmer


  • Members
  • 6,230 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Antipodes
  • Local time:01:15 PM

Posted 05 June 2014 - 06:46 AM

Thanks Jim :thumbup2:

 

I totally support you presenting your sponsors in a transparent way.

 

(BTW: great site, great resource. awesome)






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users