病毒邮件伪装IE7下载，用户小心中招

据报道，当你收到一封看似由微软官方网站提供的IE7 Beta 2测试版下载时，是不是有种点击那个漂亮图片去下载的冲动？请注意，您应该立即删除该邮件。因为这是一种伪装成了微软目前网络浏览器IE的测试版下载的新病毒。如果下载且运行的话，会立即中毒。该病毒的中毒特征目前尚无明确报告。

邮件样本

安全专家本周五报告称，尽管该种病毒目前尚未造成广泛危害，但其有两个特点：一是这种电子邮件包含有一个色彩鲜明蓝色的微软风格图像，上有IE7的图标，邮件的发件人是admin@microsoft.com，似乎正是来自微软官方网站。从而使人确信这是微软发出的提供IE下载的邮件。二是该该病毒让收件人点击一个链接而不是电子邮件附件。用户点击图像将下载一个名为IE 7.exe的可执行文件，其实是一种名为Win32.Grum.A的病毒。其链接地址为：http://tvz-archive.com/IE7.0.exe，而图像的链接地址则是：http://66.98.149.237/1.jpg。

用查看源码的功能查看该病毒邮件的内容，则会看到类似如下的邮件对话信息：

Well, I"ve made it through my first two weeks back to work and I"ve survived!! LOL (I had tendon repair and a tenosynovectomy on my PT When I saw my surgeon on the 3rd of April, he told me that I could (geez, I needed the directions to remember how to put the darn thing on!) I have to wear the boot when I go out anywhere for awhile yet. huh?...go back to work for 2 weeks and have a week off! ) I really wasn"t ready for a week off after being off for over 8 weeks. (geez, I can"t believe I"m saying that!!!) I"ve been walking around with the soft tie up support brace in my didn"t work either. The good news is that with just the brief amounts of time, I"ve been without the boot, I"ve been better able to walk off balance because of the eakness. It"s 10 weeks since my surgery...the surgeon says the 6 month mark will mean I"m half way I"d appreciate any suggestions in regard to shoes, how to get around with just the tie-up support and anything else. I will be starting PT
spring weather coming in! Thanks everyone! Hope you"re all having a great spring!! Carol...

目前电子邮件过滤系统不能够阻止这一病毒，但据称该病毒仅影响Windows用户，微软已经证实了该病毒的存在，目前正在调查，其中包括对病毒特性的研究以及对用户造成的影响。