Posted 01 January 2008 - 06:27 AM
This problem appears to be a common item. I did a scan with HiJack This v2.0.2. Of all the items detected, most all of which are okay on my computer. However, one item is questionable. The HJT log entry is "O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll". Nothing is being detected by any of the AV/AS, etc., softwares are detecting anything. Only HJT. The dll file NWPROVAU.DLL is valid and is required to run; part of the Windows OS. NWPROVAU.DLL is "client service for NetWare provider and authentication package DLL. And, I have the latest version of this dll file (v5.1.2600.3015) based on the last MS update to NetWare (MS06-066/KB923980). I did a scan with Spybot (v188.8.131.52) and nothing was detected. However, I did open the Winsock LSPs in Spybot and found this:
--- Spybot - Search & Destroy version: 1.5 (build: 20071005) ---
Namespace Provider 3: NWLink IPX/SPX/NetBIOS Compatible Transport Protocol
Description: Microsoft Windows NT/2k/XP Novell Netware name space provider
DB filename: %SystemRoot%\system32\nwprovau.dll
DB protocol: NWLink IPX/SPX/NetBIOS*
I did a scan of my registry for the CLSID/GUID and nothing was found for the CLSID/GUID. I did a Google seach for this CLSID/GUID and I didn't find anything that helped. I have been unable to determine what this CLSID/GUID is related to ... an application, whatever. I don't know if this is just a quirk with HJT or if there is, in fact, something amiss. I have run WinSock XP Fix (v1.2) and LSP Fix (v1.1) with nothing being detected or fixed. The problem still remains. My computer, from what I can tell so far, appears to be operating normally. Can anyone help please? Thanks.