The WNAD.EXE on *my* PC seems to be part of the "Yo mama, Osama!"
shooting game.  I haven't determined whether it's spyware, or just
trying to show me ads, but it looks like your version is corrupted,
or has been (a) truncated, and (b) set to launch automatically when
you reboot.
  (I think there's a FAQ about finding stuff that's set to launch
automatically, and removing it.)

David Gillett


On 4 Oct 2001, at 19:41, Allen Spencer wrote:

> Okay, I've had enough and I've decided to post this conundrum
> for PCSoft listers to possibly help me out here!  For the past
> few days whenever I start my computer it automatically dials
> up my Internet connection.  I don't want on the Internet.  Once
> I'm connected, sometimes before, I get the message:
>
>    WNAD caused an invalid page fault in
>    module <unknown> at 0000:00000000.
>    Registers:
>    EAX=00000000 CS=0000 EIP=00000000 EFLGS=00000000
>    EBX=00000000 SS=0000 ESP=00000000 EBP=00000000
>    ECX=00000000 DS=0000 ESI=00000000 FS=0000
>    EDX=00000000 ES=0000 EDI=00000000 GS=0000
>    Bytes at CS:EIP:
>
>    Stack dump:
>
> I click the Details button and I get:
>
> Application Error:
> Exception EAccess Violation i
> n module WNAD.EXE at 00028D2E
> Access violation at address 00428D2E in module 'WNAD.EXE'.
> Read of address  FFFFFFFF
>
> I don't know what WNAD.EXE is but it was created on my
> machine just yesterday and apparently 'modified' on my
> computer about six hours before it was placed there.
> Another file, wnad-update.exe was created about the same
> time.  What is this thing and does it have anything to
> do with my computer's need to dial me up?
>
> I also lost access to Outlook several weeks ago, but since
> I could not uninstall and reinstall it with my software,
> I just got rid of it.  Any connection there?
>
> I tried backtracking and geting rid of any and all stuff I
> downloaded in the past month.
>
> Thanks if you can,
>
> Allen Spencer
>
>               The NOSPIN Group is now offering Free PC Tech
>                      support at our newest website:
>                           http://freepctech.com
>

               The NOSPIN Group Promotions is now offering
              Mandrake Linux or Red Hat Linux CD sets along
         with our NOSPIN Power Linux CD...  at a great price!!!
             http://freepctech.com/goodies/promotions.shtml