Email from bucksatan re: the Klez worm??

Memnoch · Post by **Memnoch** » Thu May 23, 2002 2:44 am

I received an email from a bucksatan (no spaces) email address which contained the Klez worm, along with the following text:

"Klez.E is the most common world-wide spreading worm.It's very dangerous by corrupting your files.
Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it.
We developed this free immunity tool to defeat the malicious virus.
You only need to run this tool once,and then Klez will never come into your PC.
NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it.
If so,Ignore the warning,and select 'continue'.
If you have any question,please mail to me. "

I didn't open it as my Norton AV quarantined the attached file. The note above sounds very shifty to me, and I'm pretty sure that Buck would not have sent this legitimately...

Anyway, just thought I'd give you all a heads up.

Ironworks Gaming

Stilgar · Post by **Stilgar** » Thu May 23, 2002 2:57 am

No, our Buck would never do that!!!!!
Say it isn't so!!!!

Kayless · Post by **Kayless** » Thu May 23, 2002 3:08 am

Thanks for the heads up, Memnoch. Buck’s at E3 now isn’t he? Hopefully the problem will be revolved as soon as he gets back (or maybe an Admin can help out).

Mr Sleep · Post by **Mr Sleep** » Thu May 23, 2002 3:10 am

Thankyou for bringing this to our attention

Anyone can pretend to be someone else, you can email out as anyone you like. Unfortunately someone has targeted the name of bucksatan to maliciously email viruses.

Mr Flibble · Post by **Mr Flibble** » Thu May 23, 2002 3:17 am

The Klez worm uses random names in the 'from' field when it attepts to send itself out. This is more likely to be coincidence that any affiliation with Buck or this site. I've seen this worm use some very strange names, and often can be quite meaningful to the recipient.

@Memnoch, if you check the properties of the email address this came from you may be able to figure out where this came from.

Kayless · Post by **Kayless** » Thu May 23, 2002 3:18 am

Originally posted by Mr Sleep
Unfortunately someone has targeted the name of bucksatan to maliciously email viruses.

Why does a certain recently banned member with a grudge come to mind?

But it's best to not point fingers without proof.

Memnoch · Post by **Memnoch** » Thu May 23, 2002 6:16 am

Originally posted by Mr Sleep
Thankyou for bringing this to our attention

Anyone can pretend to be someone else, you can email out as anyone you like. Unfortunately someone has targeted the name of bucksatan to maliciously email viruses.

No worries.

I seem to receive about 50 of these a week.

More likely, someone who frequents this forum has been infected with the Klez worm (which is a mass-mailer) and is now sending out copies to every email address in his address book or temporary internet files (if he has any Gamebanshee pages in his cache it will send to email addresses found on those pages). Apparently the email address in the "From" box is also randomly selected, which makes it almost impossible to detect who it's coming from. Since Buck's the admin here I thought he might want to know.

My suggestion would be to update your virus definitions, and scan, scan, scan!

Ironworks Gaming

Mr Sleep · Post by **Mr Sleep** » Thu May 23, 2002 6:31 am

Originally posted by Memnoch
No worries. I seem to receive about 50 of these a week.

As do i

Since Buck's the admin here I thought he might want to know.

He isn't here at the moment, he went to E3, but i am sure it will get his attention when he returns

Demis · Post by **Demis** » Thu May 23, 2002 9:03 am

Originally posted by Mr Sleep

He isn't here at the moment, he went to E3, but i am sure it will get his attention when he returns

Actually he was aware of this and gave us a warning about a fake e-mail address showing his address.

KidD01 · Post by **KidD01** » Thu May 23, 2002 9:17 am

Originally posted by Demis
Actually he was aware of this and gave us a warning about a fake e-mail address showing his address.

Who's got such a cruel idea ? I'm not trying to accuse someone but is there a possibility it's the banned member trying to stir up trouble here ?

Can anyone backtrack the sender ID then report this incident so the sender never again surf the net ?

Mr Sleep · Post by **Mr Sleep** » Thu May 23, 2002 9:34 am

Anyone can claim to be someone else, there are mailboxes that will let you email out as whoever you put in the sender box.

KidD01 · Post by **KidD01** » Thu May 23, 2002 9:46 am

Hackers sometime also a pain in the ass. But some of them have common sense though *SIGH* Talk about good hackers and bad hackers

Well looks like u r right, Sleep. We'll have to see what's happen next after Buck comes back

but I believe some checking will be proper after all GB already got a rep out there.

Vicsun · Post by **Vicsun** » Thu May 23, 2002 10:14 am

Originally posted by Memnoch

No worries. I seem to receive about 50 of these a week.

Originally posted by Mr Sleep

As do i

How come I never recieve any e-mail viruses??

I feel sooo left out!

Bloodstalker · Post by **Bloodstalker** » Thu May 23, 2002 11:23 am

I'll put you on my list then Vicsun

Mr Flibble · Post by **Mr Flibble** » Thu May 23, 2002 11:37 am

Originally posted by Vicsun

How come I never recieve any e-mail viruses?? I feel sooo left out!

I'm a collector of such things (hey, some people collect mold and fungus). If you really want one...

@Mr Sleep & Demis, has there been a lot of this supposedly coming from a 'bucksatan' address lately?

Nippy · Post by **Nippy** » Thu May 23, 2002 11:39 am

Originally posted by Bloodstalker
I'll put you on my list then Vicsun

I knew it was you! Only a lurker would do that!

Bloodstalker · Post by **Bloodstalker** » Thu May 23, 2002 11:47 am

I disavow any knowledge of anything......

Aegis · Post by **Aegis** » Thu May 23, 2002 12:29 pm

While on the subject, this is using more than just Buck's name. I have received similar files from 'Fable' and 'Sleep'. Just a heads up.

KidD01 · Post by **KidD01** » Fri May 24, 2002 9:26 am

Originally posted by Aegis
While on the subject, this is using more than just Buck's name. I have received similar files from 'Fable' and 'Sleep'. Just a heads up.

DAMN ! This thing starts to get freaky !

Aegis · Post by **Aegis** » Fri May 24, 2002 3:09 pm

Originally posted by KidD01

DAMN ! This thing starts to get freaky !

It is quite disconcerting. I've asked a frined to help me try and figure out a way to trace the email, but it's tough. We'll hopefully come up with something this weekend.