Worm : Win32.Joleee.k - cannot remove it

[Geezee]

Hello,

This is my first visit here and my first request. Thanks to all for being here and for your help.

I use Spybot. After 1 year without any problem, I had yersterday one attack. When I run Spybot, I now have :

1. Microsoft.WindowSecurityCenter.FirewallOverride

2. Win32.Joleee.k

Win32.Joleee.k added an icon at the bottom right corner as if I had 2 internet connections working simultanously. If I go to "Parameter" and into the "Network connection" I have a new connection there that I did not create. If I erase it, my normal connection to the internet is down. If I restart the machine the "new" one or parasite one comes back. This is basically how it appears.

I check throughout the forum to find some help and used the manual removal here :

http://forums.spybot.info/showthread...win32.joleee.k

I applied these instructions and also ran "Rootalyzer" which did not find anything wrong. In spite of these 2 procedures, the 2 "worms" or malware are still present on the computer. (The 2nd internet connection icon is still there and Spybot detects both malwares when scanning).

For your info I have XP - I tried to re-activate the internet security suite to get rid of : Microsoft.WindowSecurityCenter.FirewallOverride, but after reboot, the 2 bugs come back again !

I also checked my system with ad-aware and a-squared, run analyser, but in spite of this I could not erase the worms although win32.joleee.j only appear when I scan with Spybot.

Thanks to all who may bring some light to solve this problem

Geezee

[pskelley]

Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance) http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

Make sure you read and follow the directions, anything else will slow the process and waste both of our time. I suggest you keep this computer offline except when troubleshooting, the junk may download more. If you have any tool I use, delete it and download it new from the link I provide. Read and follow the directions carefully, the tools will not work unless you do.
The junk can be tough to remove, so do not expect fast or easy.

Well, to tell you the truth, it appears you have not read the directions? I posted them above and they are pinned (sticky) to the top of this forum.

Here is some information about: Win32.Joleee.k
http://research.sunbelt-software.com/threatdisplay.aspx?name=Email-Worm.Win32.Joleee.k&threatid=394410
http://www.google.com/search?hl=en&q=Win32.Joleee.k&btnG=Google+Search&aq=f&oq=

Looks like someone on the computer has opened an infected email:sad:

I apologize for the wait, volunteers are swamped at all forums with infected computers. If you have not resolved your issues, then read and follow those directions and post the HijackThis log that is described plainly in those directions for starters.

If you have resolved your issues, please post to let me know so I can close this topic.

Thanks