Mean executable

Score

0

Chris Finnerty November 4, 2001 at 02:16:42 Pacific

Hi, when I ran RegEdit and searched for WNAD,it came up with lots of stuff like WNAD, OSAMA, DIRECTX, MP3, AVI blah blah blah.. What should I delete? In a way, i'm new to computers. thanks Chris Finnerty

Score

0

Sam Grimbly November 5, 2001 at 07:17:11 Pacific

I could not get into www.newsbytes.com. Where or how do I access MSCONFIG or REGEDIT re the WNAD problem?

Score

0

Kevin Break November 5, 2001 at 12:37:01 Pacific

I've been annoyed by WNAD for a couple weeks and Norton keeps saying the program has changed. Finally I got around to sniffing it out and followed the advice above, and although it's scary for me to edit the registry, I am a happy camper! You guys are great!

Score

0

trojan hater November 8, 2001 at 08:39:34 Pacific

Wnad.exe appears to be some sort of annoying trojan,which can be killed easily using trojan remover which can be downloaded here,it will also check your whole system for thousands of other trojans at the same time,well worth the download. http://www.simplysup.com/tremover/details.html

Score

0

Joanne November 9, 2001 at 07:46:40 Pacific

This morning, my firewall tried to launch wnad.exe. With research, I located the following from McAfee's site. Yet another program the kids have downloaded that messes up the computer! ;-) http://vil.mcafee.com/dispVirus.asp?virus_k=99236& This is an AdWare program which gets installed when the "Yo Mama, Osama!" game is installed. It is a memory resident application which periodically connects to a webserver to download and display pop-up window advertisements. It creates a registry run key to load itself at startup and does not uninstall itself: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WNAD Detection of this program was initially added to the 4166 DAT files as the WinAd Trojan. It was later discovered that the "Yo Mama, Osama!" installer required users to agree to the terms of the program which include the installation of this adware. As such, trojan detection of the program was removed in the 4167 DAT files. For those wishing to remove this program, manual removal instructions are provided below and the command line scanner will detect/remove this program as Application WNAD when including the /PROGRAM switch. This is not a virus or trojan. Manual removal 1) Press CTRL-ALT-DEL, select WNAD.EXE, and click END TASK 2) Click START | RUN, type %WINDIR% and hit ENTER 3) Delete the following files (if they exist): WNAD.EXE WNAD.DAT WNAD-UPDATE.EXE 4) Click START | RUN, type REGEDIT and hit ENTER 5) Click on the plus sign next to HKEY_LOCAL_MACHINE 6) Click on the plus sign next to Software 7) Click on the plus sign next to Microsoft 8) Click on the plus sign next to Windows 9) Click on the plus sign next to CurrentVersion 10) Click on the Run folder 11) Click on WNAD on the RIGHT windows 12) Hit the DELETE key on the keyboard and hit ENTER 13) Close the REGISTRY EDITOR WINDOW

Score

0

Simon November 11, 2001 at 20:28:40 Pacific

Thanks to all those who've posted advice on getting rid of this scummy little piece of spyware. It's been bugging me for the last 2 days since the firewall alerted me to WNAD trying to phone home. I uninstalled the game over a week ago (the day I got it in fact) as I thought it was a bit, well, crap. I didn't even realise the connection with the game until I put WNAD into Google and found this forum among others. I have found another 2 files, which I think are related. OSAMA.1.LGC and Osama.lgc were in C:\windows\applog and were created about the same time as WNAD. They may well relate to the game, but like WNAD they have hung around on my PC after I uninstalled Yo Mama Osama. I only found them by using FileFind to look for anyhting modified since Sept 11, and guess what? Everything that came up related to either the game or bloody WNAD. To be on the safe side I got rid of the lot. The authors of this game deserve all the flak they get over this, and I'm hoping like hell someone comes up with a Yo Mama TwistedHumour game.

Score

0

Janet November 13, 2001 at 05:34:10 Pacific

Joanne, Thank you for your step by step instructions on how to get rid of the WNAD that was in my computer. I was a leary about getting into my registry by it worked just fine.

Score

0

Ultradeathmatcher November 13, 2001 at 23:37:53 Pacific

Yeah that silly thing bothered me for lotsa weeks. Cool that the uninstaller saved me some effort, instead of me having to search manually for the files in the registry.

Score

0

Markiss November 16, 2001 at 04:23:28 Pacific

Joanne, you are a star! Your easy to follow instructions sorted out the problem straight away. It's been bugging my system for three weeks. Thanks, I have printed your instructions off and emailed it to a few colleagues of mine who also have the same problem. I will in future be more vigilant when it comes to reading the "terms of the program"

Score

0

Vera November 17, 2001 at 06:49:51 Pacific

Go to www.lavasoft.com and download a program called Ad-Aware. It cleans out these annoying little spyware programs like WNAD and it is free.

Score

0

David November 18, 2001 at 00:46:45 Pacific

Unfortunately, I never downloaded that game and I have the wnad.exe program on my system. I also run Lavasoft's ad-aware every couple of days and it never found it (I double checked and I'm running the current version).

Score

0

David November 18, 2001 at 00:57:09 Pacific

I'm an idiot. I did a little more searching and I found that it was installed with Swapnut, a Gnutella based file sharing program. I remembered that it was associated with twistedhumor.com.

Score

0

frank November 18, 2001 at 05:25:01 Pacific

Yes, I also download the SwapNut,and got infected. I detect this only by intuition as i found Task-Manager of my win2k only show the programms, but processes cannot be shown. Anyone knows how i can recover the task-manager? Thanks

Score

0

Tyler November 21, 2001 at 20:58:02 Pacific

I am also dealing with the wnad.exe problem i tried to edit the registry which was recommended in Response Number 11 by Joanne but I could not complete step 9. I Have Win Me so that probally effected the process. How do you do this for Win Me. 9) Click on the plus sign next to CurrentVersion All help would be greatly appreciated. ThanX!!