This problem appears to be a common, reocurring item. I did a scan with HiJack This v2.0.2. Of all the items detected, most all of which are okay on my computer, one item is questionable. The HJT log entry is "O10 - Unknown file in Winsock LSP: C:\Windows\System32\nwprovau.dll". Nothing is being detected by anything except for HJT. The dll file NWPROVAU.DLL is valid and is required to run since it is part of the Windows OS (Windows XP Home). NWPROVAU.DLL is "client service for NetWare provider and authentication package DLL." I have the latest version of this dll file (v5.1.2600.3015) based on the last MS update to NetWare (MS06-066/KB923980). I did a scan with Spybot (v184.108.40.206
and nothing was detected. However, I did open the Winsock LSPs in Spybot and found this:
--- Spybot - Search & Destroy version: 1.5 (build: 20071005) ---
Namespace Provider 3: NWLink IPX/SPX/NetBIOS Compatible Transport Protocol
Description: Microsoft Windows NT/2k/XP Novell Netware name space provider
DB filename: %SystemRoot%\system32\nwprovau.dll
DB protocol: NWLink IPX/SPX/NetBIOS*
I did a scan of my registry and system drive for the CLSID/GUID and nothing was found. I did a Google seach for this CLSID/GUID and I didn't find anything that helped. I have been unable to determine what this CLSID/GUID is related to; whether it be an application or otherwise. I don't know if this is just a quirk with HJT or if there is, in fact, something amiss. I have run WinSock XP Fix (v1.2) and LSP Fix (v1.1) with nothing being detected or fixed. HiJack This will not fix/repair/remove this problem. My computer, from what I can tell so far, appears to be operating normally. I am wondering if, just maybe, the NWPROVAU.DLL file is, by itselt, bad. I am wondering also if I can delete this DLL file and replace it. Can anyone help please? Thanks.