I am fighting an OIN infection and was reading one of your forum posts at http://www.lavasoftsupport.com/index.php?showtopic=2802

In this thread, you discussed files that were called 1865.exe (and variations of this name, but always with the 1865.) I did a search for this on my computer, and while I didn't have any executables, I found two .jpg files with very long names, both starting with the letter "t" and containing this number. Both were added since June of this year (my first bombardment with ads wasn't until Oct. 20th, but the second file was shown as modified this morning when I was hit by the second - or residual - attack.)

Both files are photos of people I do not know.

Hi ,

Apologies for the late reply, we've been quite swamped in here as you can probably see.

Are you still needing help?

I'm now subscribed to this topic so I will receive a notice from the board as soon as you reply, so I can be here much more quickly than it has taken to get to your new topic.

If you still need help we need two things:

1. Your Adaware Scan log with the latest reference file update.

Please make sure that you are using
Ad-aware SE Build 106r1
Note: If your version is 6.0 and not the SE, you need to uninstall and get the latest version from the above link.

[if not Uninstall your old Ad-aware first then install SE]
See here for how to get the latest verison of Ad-Aware:
http://www.lavasoftsupport.com/index.php?showtopic=1163

Then use the WebUpDate
to get the latest Definition file
SE1R131 09-11-2006
To do this Open Ad-aware
Click the WebUpDate
button at the top right hand side of the Ad-aware screen (The world globe).
Click "Connect"
Ad-aware will then download the latest Definition file for you.
To make sure it is updated , look at the main
Ad-aware screen, and look under "Initialization Status"
It should say the Latest Definition file.
then scan doing a "Full Scan"
and then post your logfile here by using the Add-Reply Feature .
As Logs are stored in :
C:\Documents and Settings\USERNAME\Application Data\Lavasoft\Ad-aware\Logs\.
An easy way to get there is to
click Start,
click Run
And type in and press ENTER: %appdata%
then click Lavasoft
then Ad-Aware
and then Logs.
scroll down to find the latest one that you have
(by date & time)
and open it right Click select all
copy and then paste the contents of it here.
...............
2. A diagnostic log from this free tool called HijackThis
Instructions on creating a HijackThis Log
http://www.lavasoftsupport.com/index.php?showtopic=216