Help!

Unknown File In WinSock LSP - NWPROVAU.DLL

 
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> HijackThis Logs RSS
Next:  Unsolvable problem  
Author Message
POGIMAN



Joined: Jan 25, 2003
Posts: 43



PostPosted: Thu Jan 03, 2008 5:36 am    Post subject: Unknown File In WinSock LSP - NWPROVAU.DLL

This problem appears to be a common, reocurring item. I did a scan with HiJack This v2.0.2. Of all the items detected, most all of which are okay on my computer, one item is questionable. The HJT log entry is "O10 - Unknown file in Winsock LSP: C:\Windows\System32\nwprovau.dll". Nothing is being detected by anything except for HJT. The dll file NWPROVAU.DLL is valid and is required to run since it is part of the Windows OS (Windows XP Home). NWPROVAU.DLL is "client service for NetWare provider and authentication package DLL." I have the latest version of this dll file (v5.1.2600.3015) based on the last MS update to NetWare (MS06-066/KB923980). I did a scan with Spybot (v1.5.1.1Cool and nothing was detected. However, I did open the Winsock LSPs in Spybot and found this:
x-x-x-x-x-x
--- Spybot - Search & Destroy version: 1.5 (build: 20071005) ---
Namespace Provider 3: NWLink IPX/SPX/NetBIOS Compatible Transport Protocol
GUID: {E02DAAF0-7E9F-11CF-AE5A-00AA00A7112B}
Filename: %SystemRoot%\System32\nwprovau.dll
Description: Microsoft Windows NT/2k/XP Novell Netware name space provider
DB filename: %SystemRoot%\system32\nwprovau.dll
DB protocol: NWLink IPX/SPX/NetBIOS*
x-x-x-x-x-x
I did a scan of my registry and system drive for the CLSID/GUID and nothing was found. I did a Google seach for this CLSID/GUID and I didn't find anything that helped. I have been unable to determine what this CLSID/GUID is related to; whether it be an application or otherwise. I don't know if this is just a quirk with HJT or if there is, in fact, something amiss. I have run WinSock XP Fix (v1.2) and LSP Fix (v1.1) with nothing being detected or fixed. HiJack This will not fix/repair/remove this problem. My computer, from what I can tell so far, appears to be operating normally. I am wondering if, just maybe, the NWPROVAU.DLL file is, by itselt, bad. I am wondering also if I can delete this DLL file and replace it. Can anyone help please? Thanks.
Back to top
greyknight17



Joined: Feb 03, 2003
Posts: 5924

Location: Brooklyn, NY

PostPosted: Thu Jan 03, 2008 2:00 pm    Post subject:

Leave that file alone. HijackThis will show good and bad Winsock layers. In your case, it's a legitimate file;)
Back to top
AIM Address Yahoo Messenger
Display posts from previous:   
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> HijackThis Logs All times are: Eastern Time (US & Canada)
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum