发几个很明显的病毒，杀不出来以后就不要用这个杀软扫描了。

F-Secure

偶在网上下载了一个病毒程序，运行后会在C盘创建多个程序，特此提取了5个创建的病毒程序，一看就知道是病毒，驱逐舰杀了在意料之中，麦咖啡杀不了的确很废，不过咖啡重点在于防，杀不出来也很正常，所以发给大家测试一下看看有多少杀软杀毒很废，并不适合杀毒。

dyw1021

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\20604.rar'
C:\Documents and Settings\Administrator\桌面\20604.rar
  [0] Archive type: RAR
  --> 20604.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.M.10
  --> bind_50417.exe
      [DETECTION] Contains code of the Windows virus W32/Downloader.C
      [INFO]      The file was moved to '468b2d48.qua'!


End of the scan: 2007年5月24日  14:13
Used time: 00:02 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      2 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\20604.rar'
C:\Documents and Settings\morgan\My Documents\
  20604.rar
    [0] Archive type: RAR
    --> 20604.exe
        [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.M.10
        [WARNING]   Infected files in archives cannot be repaired!
    --> ad_1740.exe
    --> bind_50417.exe
        [DETECTION] Contains code of the Windows virus W32/Downloader.C
        [WARNING]   Infected files in archives cannot be repaired!
    --> dodolook174.exe
    --> 3026.exe
        [WARNING]   The file was ignored!

扫描日志
NOD32版本 2287 (20070523) NT
命令行： C:\Documents and Settings\morgan\My Documents\ ?
?20604.rar
正在检查NOD32.EXE文件的CRC：状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中：没有进行 (选项已关闭)
扫描MBR及引导区中：没有进行 (选项已关闭)
日期： 23.5.2007  时间：23:14:45
已关闭反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\ ?
?morgan\My Documents\20604.rar
C:\Documents and Settings\morgan\My Documents\20604.rar  ?
?>>RAR >>20604.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\20604.rar  ?
?>>RAR >>ad_1740.exe >>NSIS >>insshell.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\20604.rar  ?
?>>RAR >>bind_50417.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\20604.rar  ?
?>>RAR >>dodolook174.exe >>NSIS >>System.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\20604.rar  ?
?>>RAR >>dodolook174.exe >>NSIS >>1043.exe >>NSIS  ?
?>>System.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\20604.rar  ?
?>>RAR >>dodolook174.exe >>NSIS >>1043.exe >>NSIS  ?
?>>DoSSSetup.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\20604.rar  ?
?>>RAR >>dodolook174.exe >>NSIS >>1043.exe >>NSIS  ?
?>>acpidisk.sys - Win32/Adware.Cinmus 应用程序的变种
C:\Documents and Settings\morgan\My Documents\20604.rar  ?
?>>RAR >>3026.exe - 是正常的
已扫描的文件数目：9
已发现的病毒数目：1
活动的病毒数目：1
完成时间： 23:14:48 总扫描时间：3 秒 (00:00:03)


[Scan path] C:\Documents and Settings\morgan\My Documents\20604.rar
>C:\Documents and Settings\morgan\My Documents\20604.rar\20604.exe is an adware program Adware.Newweb.origin
>>>C:\Documents and Settings\morgan\My Documents\20604.rar\ad_1740.exe\data001 is an adware program Adware.Borlander
>C:\Documents and Settings\morgan\My Documents\20604.rar\ad_1740.exe - archive contains infected objects
>C:\Documents and Settings\morgan\My Documents\20604.rar\bind_50417.exe infected with Trojan.DownLoader.21064
>>>C:\Documents and Settings\morgan\My Documents\20604.rar\dodolook174.exe\data001 - Ok
>>C:\Documents and Settings\morgan\My Documents\20604.rar\dodolook174.exe\data002 - Ok
>>>>C:\Documents and Settings\morgan\My Documents\20604.rar\dodolook174.exe\data003\data001 - Ok
>>>C:\Documents and Settings\morgan\My Documents\20604.rar\dodolook174.exe\data003\data002 - Ok
>>>C:\Documents and Settings\morgan\My Documents\20604.rar\dodolook174.exe\data003\data003 - Ok
>>>C:\Documents and Settings\morgan\My Documents\20604.rar\dodolook174.exe\data003\data004 - Ok
>>C:\Documents and Settings\morgan\My Documents\20604.rar\dodolook174.exe\data003 - Ok
>C:\Documents and Settings\morgan\My Documents\20604.rar\dodolook174.exe - Ok
>C:\Documents and Settings\morgan\My Documents\20604.rar\3026.exe - Ok
C:\Documents and Settings\morgan\My Documents\20604.rar - archive contains infected objects

剑指七星

已删除: 广告程序 not-a-virus:AdWare.Win32.NewWeb.m        文件: F:\20604.rar\20604.exe
已删除: 广告程序 not-a-virus:AdWare.Win32.Boran.z        文件: F:\20604.rar\ad_1740.exe/stream/data0001
已删除: 病毒 Virus.Win32.Downloader.d        文件: F:\20604.rar\bind_50417.exe
卡6报三个

beat2

红伞不报的三个，运行后到报了许多，但还是留了几个

KAV-Longhorn

卡巴7右键扫描3个，解压后再启发掉一个

worker321

avk四个

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2007-5-22
开始时间: 2007-5-24 15:29
引擎: KAV 引擎 (AVK 16.10153), BD 引擎 (BD 16.6079)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: 20604.exe
        路径: C:\Documents and Settings\Administrator\桌面\20604
        Status: 已发现病毒
        病毒: not-a-virus:AdWare.Win32.NewWeb.m (KAV 引擎)
对象: stream data0001
        在压缩档案里: C:\Documents and Settings\Administrator\桌面\20604\ad_1740.exe
        Status: 已发现病毒
        病毒: not-a-virus:AdWare.Win32.Boran.z (KAV 引擎)
对象: ad_1740.exe
        路径: C:\Documents and Settings\Administrator\桌面\20604
        Status: 已发现病毒
        病毒: not-a-virus:AdWare.Win32.Boran.z (KAV 引擎)
对象: bind_50417.exe
        路径: C:\Documents and Settings\Administrator\桌面\20604
        Status: 已发现病毒
        病毒: Virus.Win32.Downloader.d (KAV 引擎), Generic.Malware.SWBdld.263EA747 (BD 引擎)
扫描完成: 2007-5-24 15:29
    已检查 5 个文件
    已发现 3 个染毒文件
    发现 0 个可疑文件

jxxfcwb

C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\23bb9b86.avp
[0] Archive type: RAR
  --> 20604.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.M.10
  --> bind_50417.exe
      [DETECTION] Contains code of the Windows virus W32/Downloader.C
      [WARNING]   The file was ignored!


报2个

moonsilver

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： AdWare.NewWeb.a         
病毒： Win32.KLdown.g           

用户来源：互联网

软件版本：19.24.32

3个

zxy900906

LZ啊..会玩咖啡不..?咖啡想杀的话什么都可以杀哦..
杀软不适合杀毒那杀什么?杀人?