NeoWin: NO it didnt come from here... In fact I did not post until now until I was certain of this, so here goes. I recieved this email today from Sully.

I was wondering if you ever heard of something call WNAD.EXE? It runs at startup and it is located in the WINNT directory. It also has a .dat file but I don't reconize any of the entries in it. I loaded that startup for Start up Control Panel for Windows so I could easily keep track of things. The file WNAD.EXE is in fact a trojan and "appears" to come from a flash plugin module that has been posted on twistedhumor.com. This flash page of a Osama Bin Laden game was posted in our forums here on Neowin. I played it myself and after retrieving NAV2002 Live Update it caught it but is unable to clean and delete the file.

Here's how you delete it. Download Startup Control Panel for Windows, install and start (from Control Panel) browse through the tabs until you see the entry:

C:WINDOWSWNAD.EXE (or C:WINNT for Windows 2000 or NT4)

delete it to disable it starting up on your system.

Then Reboot your system, browse to C:WINDOWS (or C:WINNT) and delete WNAD.EXE you can also delete the DAT file with the same name, although without the .exe it is harmless.

If you dont know what the hell I am talking about, try doing a search first for the filename WNAD.EXE on the C: drive. If you dont have it, dis-regard this post.