木马：Win32/Trojan.c0f

minchaovip

不是病毒把

时光鸟

金山卫士没报，小红伞也没报，应该没问题吧，360误报吧

hddu

2011-06-08 10:31:59    运行应用程序      操作:允许
进程路径:F:\virus\企鹅桌球瞄准器5[1].2\企鹅桌球瞄准器5.2\ZQ.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ273235.TMP
触发规则:所有程序规则->其它程序设置->*\Temp\*


2011-06-08 10:31:59    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ273235.TMP
文件路径:C:\Program Files\Common Files\Microsoft Shared\DAO\DA0O182491.dll
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\Common Files\Microsoft Shared\*


2011-06-08 10:31:59    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ273235.TMP
文件路径:C:\Program Files\Common Files\Microsoft Shared\DAO\DA0O182491.dll
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\Common Files\Microsoft Shared\*


2011-06-08 10:31:59    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ273235.TMP
文件路径:C:\Program Files\Common Files\Microsoft Shared\DAO\DA0O182491.dll
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\Common Files\Microsoft Shared\*


2011-06-08 10:32:42    运行应用程序      操作:允许
进程路径:F:\virus\企鹅桌球瞄准器5[1].2\企鹅桌球瞄准器5.2\ZQ.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ61397.TMP
触发规则:所有程序规则->其它程序设置->*\Temp\*


2011-06-08 10:32:42    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ61397.TMP
文件路径:C:\Program Files\Common Files\Microsoft Shared\DAO\DA0O291423.dll
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\Common Files\Microsoft Shared\*


2011-06-08 10:32:42    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ61397.TMP
文件路径:C:\Program Files\Common Files\Microsoft Shared\DAO\DA0O291423.dll
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\Common Files\Microsoft Shared\*


2011-06-08 10:32:42    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ61397.TMP
文件路径:C:\Program Files\Common Files\Microsoft Shared\DAO\DA0O291423.dll
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\Common Files\Microsoft Shared\*


2011-06-08 10:33:11    运行应用程序      操作:允许
进程路径:F:\virus\企鹅桌球瞄准器5[1].2\企鹅桌球瞄准器5.2\ZQ.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ586543.TMP
触发规则:所有程序规则->其它程序设置->*\Temp\*


2011-06-08 10:33:11    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ586543.TMP
文件路径:C:\Program Files\Common Files\Microsoft Shared\DAO\DA0O895198.dll
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\Common Files\Microsoft Shared\*


2011-06-08 10:33:11    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ586543.TMP
文件路径:C:\Program Files\Common Files\Microsoft Shared\DAO\DA0O895198.dll
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\Common Files\Microsoft Shared\*


2011-06-08 10:33:11    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\VQZ586543.TMP
文件路径:C:\Program Files\Common Files\Microsoft Shared\DAO\DA0O895198.dll
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\Common Files\Microsoft Shared\*


运行三次，每次生成的dll文件都不同。不明，求解。