Page 1 of 2
Email from bucksatan re: the Klez worm??
Posted: Thu May 23, 2002 2:44 am
by Memnoch
I received an email from a bucksatan (no spaces) email address which contained the Klez worm, along with the following text:
"Klez.E is the most common world-wide spreading worm.It's very dangerous by corrupting your files.
Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it.
We developed this free immunity tool to defeat the malicious virus.
You only need to run this tool once,and then Klez will never come into your PC.
NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it.
If so,Ignore the warning,and select 'continue'.
If you have any question,please mail to me. "
I didn't open it as my Norton AV quarantined the attached file. The note above sounds very shifty to me, and I'm pretty sure that Buck would not have sent this legitimately...
Anyway, just thought I'd give you all a heads up.
Ironworks Gaming
Posted: Thu May 23, 2002 2:57 am
by Stilgar
No, our Buck would never do that!!!!!
Say it isn't so!!!!
Posted: Thu May 23, 2002 3:08 am
by Kayless
Thanks for the heads up, Memnoch. Buck’s at E3 now isn’t he? Hopefully the problem will be revolved as soon as he gets back (or maybe an Admin can help out).
Posted: Thu May 23, 2002 3:10 am
by Mr Sleep
Thankyou for bringing this to our attention
Anyone can pretend to be someone else, you can email out as anyone you like. Unfortunately someone has targeted the name of bucksatan to maliciously email viruses.
Posted: Thu May 23, 2002 3:17 am
by Mr Flibble
The Klez worm uses random names in the 'from' field when it attepts to send itself out. This is more likely to be coincidence that any affiliation with Buck or this site. I've seen this worm use some very strange names, and often can be quite meaningful to the recipient.
@Memnoch, if you check the properties of the email address this came from you may be able to figure out where this came from.
Posted: Thu May 23, 2002 3:18 am
by Kayless
Originally posted by Mr Sleep
Unfortunately someone has targeted the name of bucksatan to maliciously email viruses.
Why does a certain recently banned member with a grudge come to mind?
But it's best to not point fingers without proof.
Posted: Thu May 23, 2002 6:16 am
by Memnoch
Originally posted by Mr Sleep
Thankyou for bringing this to our attention
Anyone can pretend to be someone else, you can email out as anyone you like. Unfortunately someone has targeted the name of bucksatan to maliciously email viruses.
No worries.

I seem to receive about 50 of these a week.
More likely, someone who frequents this forum has been infected with the Klez worm (which is a mass-mailer) and is now sending out copies to every email address in his address book or temporary internet files (if he has any Gamebanshee pages in his cache it will send to email addresses found on those pages). Apparently the email address in the "From" box is also randomly selected, which makes it almost impossible to detect who it's coming from. Since Buck's the admin here I thought he might want to know.
My suggestion would be to update your virus definitions, and scan, scan, scan!
Ironworks Gaming
Posted: Thu May 23, 2002 6:31 am
by Mr Sleep
Originally posted by Memnoch
No worries.
I seem to receive about 50 of these a week.
As do i
Since Buck's the admin here I thought he might want to know.
He isn't here at the moment, he went to E3, but i am sure it will get his attention when he returns

Posted: Thu May 23, 2002 9:03 am
by Demis
Originally posted by Mr Sleep
He isn't here at the moment, he went to E3, but i am sure it will get his attention when he returns
Actually he was aware of this and gave us a warning about a fake e-mail address showing his address.
Posted: Thu May 23, 2002 9:17 am
by KidD01
Originally posted by Demis
Actually he was aware of this and gave us a warning about a fake e-mail address showing his address.
Who's got such a cruel idea ? I'm not trying to accuse someone but is there a possibility it's the banned member trying to stir up trouble here ?
Can anyone backtrack the sender ID then report this incident so the sender never again surf the net ?

Posted: Thu May 23, 2002 9:34 am
by Mr Sleep
Anyone can claim to be someone else, there are mailboxes that will let you email out as whoever you put in the sender box.
Posted: Thu May 23, 2002 9:46 am
by KidD01
Hackers sometime also a pain in the ass. But some of them have common sense though *SIGH* Talk about good hackers and bad hackers
Well looks like u r right, Sleep. We'll have to see what's happen next after Buck comes back

but I believe some checking will be proper after all GB already got a rep out there.
Posted: Thu May 23, 2002 10:14 am
by Vicsun
Posted: Thu May 23, 2002 11:23 am
by Bloodstalker
I'll put you on my list then Vicsun

Posted: Thu May 23, 2002 11:37 am
by Mr Flibble
Originally posted by Vicsun
How come I never recieve any e-mail viruses??
I feel sooo left out!
I'm a collector of such things (hey, some people collect mold and fungus). If you
really want one...
@Mr Sleep & Demis, has there been a lot of this supposedly coming from a 'bucksatan' address lately?
Posted: Thu May 23, 2002 11:39 am
by Nippy
Posted: Thu May 23, 2002 11:47 am
by Bloodstalker
I disavow any knowledge of anything......

Posted: Thu May 23, 2002 12:29 pm
by Aegis
While on the subject, this is using more than just Buck's name. I have received similar files from 'Fable' and 'Sleep'. Just a heads up.
Posted: Fri May 24, 2002 9:26 am
by KidD01
Originally posted by Aegis
While on the subject, this is using more than just Buck's name. I have received similar files from 'Fable' and 'Sleep'. Just a heads up.
DAMN ! This thing starts to get freaky !

Posted: Fri May 24, 2002 3:09 pm
by Aegis
Originally posted by KidD01
DAMN ! This thing starts to get freaky !
It is quite disconcerting. I've asked a frined to help me try and figure out a way to trace the email, but it's tough. We'll hopefully come up with something this weekend.