Wnad.exe is an Adware Trojan.

Question

Somehow I have obtained an application named "WNAD.EXE"

from some source. It keeps trying to connect to a site called rankyou.com. I try to delete it and it reads "Cannot delete, windows is using. It's not in the add/remove list and there are no readme files for it. Pls. help me with this.

Thanks,

Chuck

Phx.

Answer

This question was answered on September 26, 2002. Much of the information contained herein may have changed since posting.

This is an Adware Trojan You will have to delete this file from the registry.

For more information about the Adware Trojan, go to the following Web site: http://antivirus.about.com/library/weekly/aa101701b.htm?iam=dpile&terms=Wnad.exe

NOTE: The Adware Trojan may start from the Startup folder or from the following registry key

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

with the values:

Name: WNAD

Data: C:\Windows\WNAD.exe

Need Help with this Issue?

We help people with technology! It's what we do.
Schedule an Appointment with a location for help!

Author

Posted by Robin of Mesa Community College on September 26, 2002