|
Subject: Re: WNAD.EXE
Name:
 Sledge
Date: 10/10/2001 1:33:46 PM (GMT-7)
IP Address: 12.159.32.18
In Reply to: WNAD.EXE posted by
Hans Brown
Message:
I found this in a discussion list:
"My guess is that you installed Yo Mama Osama using 'Osama.exe' from
twistedhumor.com
Our 'friends' at twisted humor add this little bit of spyware that
doesn't unload when you uninstall 'yo mama osama'. It seems to pop ads
up in the background with out the need for a browser. Nice huh.
This WNAD.EXE program is placed in startup. It is located in the
Windows directory and has the following other files:
wnad.dat, wnad.exe, wnad-update.exe, wnad.lgc
Before you delete these file CTRL-ATL-DELETE and use end task to kill
wnad.exe you may have to do this a couple of times until it is gone
from the window. Then delete all the wnad files.
Nest run regedit and remove the entry out of your
hklm\software\microsoft\windows\run registry key (this is where it
starts on reboot)."
The person who posted the question to which this was one of the responses did follow the advice and says that everything has returned to normal.
Hope this works for you, too!
|