Avast signale un virus

Bonjour Niouws,
En effet il y avait aussi:
C:\windows\system\h5u5dctf.exe

Cela ressemble au virus de la grippe aviaire !!!
Keseksa ?
guy

J'ai essayé de le supprimer mais Windows le protège. En allant voir le dossier Windows, System, j'ai trouvé ceci pour le contenu du fichier h5u5dctf.exe:


guy[Files]
SAHAgent=h5u5dctf.exe
SahHtml=nkiapsge.exe
SAHUninstall=6ht0m5gr.exe
lsp=gtl2ci63.dll
WEBInstaller=WEBInstaller.dll
v=qfjaeqob.dat
vg=7pj3ck3n.dat
vp=k3isade2.dat
vu=1dil86od.dat
vh=enhf603p.dat
sporder=sporder.dll
lsp_setup=update.exe
[SAHAgent]
PrefsServer=www.shopathomeselect.com
PrefsXML=/agent3/agentprefs3.sah
RenameFiles=yes
FileSahAgent=gah95on6
FileSahHtml=bln02nqv
FileSahUnInstall=70tovmto
FileLsp=2b3fsk0h
FileV=tm97pj39
FileVP=p1fumi62
FileVG=kdlmjh8r
FileVU=goreggbk
FileVH=b315cfed
WebInstall=no
KeyExistNai=Y
DllName=C:\WINDOWS\TEMP\KJK3FI2Q.dll
HtmlName=C:\WINDOWS\SYSTEM\l9f7hgeh.html
EulaDate=2005-06-02 17:35:01
EulaStatus=Displayed4002t
InstallLocation=downloads.shopathomeselect.com
InstPath=arcadecash/
BundleKey=arcadecash1005.sah
BundlePackage=setup4021.cab
PrefsPath=agent3/
iniName=setup4021.ini
PackageLocation=downloads.shopathomeselect.com
PackageName=/v4030/setup4030.cab
CookieUserAgent=iexplorer
BrowserType=Bundle
BundleProgress=4
CountKey=1
UniqueBundleKey=owner=arcadecash1005
UniqueBundleID=refer=290515205
GUID=GUID={A96CC3E0-D38C-11D9-B78A-0003C964F1EA}
CountStart=1
CountCab=1
LSPInstallNeed=yes
ReadyToInstall=complete
BundleInstall=installing
AgentVersion=4.0.3.2
NamedBy=MadAdam
AutoUpdate=
CreateDate=2005-06-02
UnInstallExecute=disable
UnInstallRequest=disable
DateToSendNextHeartbeat=2005-09-04 11:46:37
DateOfCheckForNewValidate=2005-11-12 16:40:41
LastPrefs=Mon, 24 Oct 2005 21:07:34 GMT
LastValid=Mon, 24 Oct 2005 21:07:43 GMT
LastGlobal=Mon, 24 Oct 2005 21:07:40 GMT
ValidateXMLversion={8496A6E5-7190-4166-A04F-41C849F7DE9A}
ValidatePath=/agent/validate.sah
TemplatePath=
Images=/images/mrchntimages/
PopupCloseButton=close.gif
PopupDefaultImage=popupDefault.gif
RedirectTo=http://www.shopathomeselect.com/frameset3.asp
Categories=
Popup=
LSPVersion=1.1.1.1
GlobalPath=/agent/global.sah
SiteNotAvailablePeriod=10
ResponseTime=20
SuppressTimeout=10
PongTimeout=180
RetryDays=5
PrefsXMLversion={8496A6E5-7190-4166-A04F-41C849F7DE9A}
Suppress1=afsrc=1
Suppress2==notused=
IncUpdateEnabled=no
SearchEngineEnabled=no
SearchPopunderCount=2
InitRegDelayTime=10
ServiceDomain=gr3.cc
ServicePath=s.dll
NumberOfDaysNextHearbeart=7
NumberOfDaysNextValidate=7
NumberOfDaysNextUpdate=7
validate=Y
validateURL=www.shopathomeselect.com/agent3/
update=Y
updateURL=downloads.shopathomeselect.com/v4030/setup4030.cab
LspSetupName=EulaUpgrade.exe
Country=FRA
IP=82.125.120.157
UID=88611156
GlobalXMLversion={8496A6E5-7190-4166-A04F-41C849F7DE9A}
AttemptDownloadPrefs=ok
DateToCheckForNewUpdate=2005-11-12 16:40:41
RetryModeFinish=
LastSearchPopUnder=2005-10-11
SearchPopunderNumber=0
UpgradeStatus=completed
AgentUpdateNeed=no
LSPUpdateNeed=no
CabDogVersion=4.0.3.1
CabDate=Tue, 14 Jun 2005 23:02:27 GMT
CabLastPrefsVersion=4.0.3.2
LastBce=
UpdateSucceeded=
FullImages=downloads.shopathomeselect.com/images/mrchntimages/
SiteNotAvailableCounter=0
Stealth=false
CID=1147910

[SAHPopup]
main=440
popunder=
name=Transformer
lastUpdateDate=2005-03-11
createDate=2005-03-11
locationX=100
locationY=100
dimensionX=100
dimensionY=100
showCloseButton=no
timer=0
delay=0
specialEffects=0
link=
top=
PopupRegType=
PopupAddress=
PopupPassword=
type=Popup
Popupname=Transformer
PopuplastUpdateDate=2005-03-11
PopupcreateDate=2005-03-11
PopuplocationX=100
PopuplocationY=100
PopupdimensionX=100
PopupdimensionY=100
PopupshowCloseButton=no
Popuptimer=0
Popupdelay=0
PopupspecialEffects=0
Popuplink=
LastLogin=2005-09-15
popup=
PopupRegTypePrev=



La dernière fois que j'ai fais du latin c'est ily a 50 ans !!
Cela te dit qqchose ?!!

Bonjour Niouws,
J'ai supprimé (méchament) ce fichier bizarre h5u5dctf.exe et tout semble tourner normalement. Merci de ton aide et à+
guy