Well, the flash virus i had a problem with, was called /\/3T/\P3\/\/0|2/\/\ And it starts when the video loads, then through javascript it found an exploit in the IE debugger, so it loads a server into the victim.