Re: A new virus? "ingin US kembali"

From: Juanita Fernando (jsscn@optushome.com.au)
Date: 08/03/01 

Message-ID: <002501c11bb6$bbbfedc0$0300a8c0@168.0.1.eburwd1.vic.optushome.com.au>
From: "Juanita Fernando" <jsscn@optushome.com.au>
To: "Michael Kjorling" <michael@kjorling.com>, "Security Basics" <security-basics@security-focus.com>
Subject: Re: A new virus? "ingin US kembali"
Date: Fri, 3 Aug 2001 10:53:38 +1000

"ingin US kembali" is Indonesian or malay (both languages are similar,
though there are important differences) and its asking for the US to return
to the Kyoto treaty - looks to me like it might be a chain protest letter,
though i cant comment as to whether there's a virus involved or not.

regards

Juanita

----- Original Message -----
From: "Michael Kjorling" <michael@kjorling.com>
To: "Security Basics" <security-basics@security-focus.com>
Sent: Wednesday, August 01, 2001 8:36 PM
Subject: A new virus? "ingin US kembali"

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I haven't been posting much to this list, but this is something I am
wondering about. I got this email this morning, with an attachment
(ACTMOVIE.EXE, 51712 bytes long). *This attachment was masqueraded
using the IMAGE/GIF MIME type!* That is, not a simple double
extension.

Does anyone know if this is a new virus, or what it could be? About
all I can make out of the email is that it talks about the Kyoto
protocol. (If someone here knows Japanese(?) and care translating this
to English, I would appreciate that.)

What is strange is that as far as I know, I have never been talking to
anyone in Japan. Which leaves people scanning newsgroups/lists for
email addresses and never writing anything. I am including the
Received: headers below in case anyone is interested.

Received: from lab.kbri.or.jp (dns02.cts.ne.jp [210.254.75.2])
        by varg.mcpoolen.se (8.11.4/8.11.4) with ESMTP id f711JAx05164
        for <michael@kjorling.com>; Wed, 1 Aug 2001 03:19:11 +0200
Received: from lab.kbri.or.jp (lab2.kbri.or.jp [192.168.68.200])
        by lab.kbri.or.jp (Postfix) with SMTP
        id B66C940CF; Wed, 1 Aug 2001 10:26:56 +0900 (JST)

210.254.75.2 belongs to the Japanese organization SOUTH TOKYO
CABLETELEVISION and the network 210.254.75.0 according to whois.

[michael@varg michael]$ whois 210.254.75.2/e@whois.nic.ad.jp
[whois.nic.ad.jp]
[ JPNIC database provides information on network administration. Its use
   ]
[ restricted to network administration purposes. For further information,
use ]
[ 'whois -h whois.nic.ad.jp help'. To suppress Japanese output, add '/e'
   ]
[ the end of command, e.g. 'whois -h whois.nic.ad.jp
        ]

Network Information:
a. [Network Number] 210.254.75.0
b. [Network Name] CTS
g. [Organization] SOUTH TOKYO CABLETELEVISION
m. [Administrative Contact] SM992JP
n. [Technical Contact] SM992JP
p. [Nameserver] dns02.cts.ne.jp
p. [Nameserver] ns2.ttnet.ad.jp
y. [Reply Mail] alloc@ttnet.ad.jp
[Assigned Date] 1999/07/27
[Return Date]
[Last Update] 2000/09/14 22:02:44 (JST)
                                ip-alloc@nic.ad.jp
[michael@varg michael]$

Could someone please enlighten me on this?

Michael Kjörling

- --
Michael Kjörling - michael@kjorling.com - PGP: 8A70E33E
Manager Wolf.COM -- Programmer -- Network Administrator
"We must be the change we wish to see" (Mahatma Gandhi)

^..^ Support the wolves in Norway -- go to ^..^
 \/ http://home.no.net/ulvelist/protest_int.htm \/

***** Please only send me emails which concern me *****

- ---------- Forwarded message ----------
Date: Wed, 1 Aug 2001 10:26:56 +0900 (JST)
From: romsun <romsun@cts.ne.jp>
Subject: ingin US kembali

Utamanya adalah agar Kyoto Protocol tersebut dapat segera berlaku
secara efektif. Hal ini memberikan indikasi bahwa Perancis akan tetap
meratifikasi Kyoto Protocol tahun depan dengan ataupun tanpa
keterlibatan US. Menteri Lingkungan Hidup Belanda, Jan Pronk, sebagai
Ketua UNFCCC, pada hari kamis 5 Juli 2001 menyatakan bahwa salah satu
'option' untuk dapat menyelamatkan Kyoto Protokol adalah dengan
mengundurkan target waktu mulai pengurangan GHG selama dua tahun dari
2008 menjadi 2010. Namun ide tersebut mendapat kritikan tajam dari
environmentalist karena pengunduran target waktu tersebut sama saja
dengan mengubur agreement, kata Kate Hampton dari Friends of the
Earth.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7Z9vFKqN7/Ypw4z4RAtK4AKCA7hW9Z4kvZLSIY9RnlKPRlfyJJgCfadbY
gykFJfxRFhRHfGzVGW3egMo=
=cUTI
-----END PGP SIGNATURE-----

Quantcast