| If you have used Hijackthis
to track down a virus, spyware, or malware, you may have seen the file
nwprovau.dll in your hijackthis log with the statement - "unknown file
in winsock lsp". Is it really something that needs to be deleted
or is it supposed to be there? The file nwprovau.dll is a legitimate file installed by Client Service for NetWare. Its usually installed for the IPX/SPX protocol that is rarely used anymore. This is why it doesn't show up in EVERY hijackthis log file. However, the question remains: is the file needed if Client Service for Netware is not running on the computer? In my testing, the entry in the Hijackthis log is not needed if you are not using Netware and the IPX/SPX protocol is not installed on your computer. Since most networks now have standardized on using the TCP/IP protocol, this shouldn't be a problem if its removed. |
Although there is a Windows Service Patch - MS06-066: Vulnerability in the Client Service could allow remote code execution that does update the file on Windows computers, the entry in hijackthis does not need to be there unless Client for Netware is installed. I understand this runs contrary to what many computer support sites state. Most other sites will say leave the entry alone since its a valid Windows file. I just don't like extra items loaded that don't need to be there.
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
In the Windows registry, the nwprovau.dll file will show up in the following registry key.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries
It will generally be shown under Key # 4 with the following information.
Can I Remove NWPROVAU.DLL From the Hijackthis log?
The answer to this question will depend on what you are doing. If your computer is connected to a Netware network, you should leave the file and entry intact. If, however, you find this log entry on a standalone computer or a personal computer that is NOT using Netware then you can for all practical purposes remove the file.
Unfortunately, you cannot remove this entry by using Hijackthis, you must download LSPFix and use it to remove the NWPROVAU protocol. To do this, follow these directions.
1) Click on the following link to download LSPFix to your desktop.
http://www.cexx.org/lspfix.htm
or click on this link to download the exe file directly
http://www.cexx.org/LSPFix.exe
2) Once the exe file is on your desktop, double-click on it to open
3) In the left hand column, you should see the NWPROVAU.DLL file listed. Click on it to highlight, then click the arrow in the middle of the screen that points to the right
This will move the filename to the right-hand column labeled Remove
NOTE: If the arrow is greyed out and does not allow you to click it, you need to check the box above labeled "I know what I'm doing"
Of course, it should be stated that if you are unsure of any of these procedures, please do not complete them and ask for assistance from a local computer tech, family friend, or other knowledgeable person.
4) Once the file has been transferred to the Remove column, click Finish at the bottom of the screen. You'll be presented with a results screen showing the file was removed from the Winsock layer entries in the registry. Close the LSPFix program now.
5) Run Hijackthis and the entry for NWPROVAU.DLL should now be gone from the list.
Written by Mark Hasting
Printer Friendly Version of This Page
Bookmark and Share this Article on PCHELL with these Social Networks:
Links to Other Important Information
Support for Windows XP and Windows Vista without latest service packs ends in 2010
Cannot Install Plugin after Installing or Upgrading to Wordpress 2.8
Computer shows Stop error and Continously Reboots after SP3 installed.
How to Remove MSBLAST.EXE worm
How to Remove Content Advisor Password in Internet Explorer
How to Remove Incredimail Automatically
How to Fix Problem of Limited or No Connectivity After installing Windows XP Service Pack 2
How to Recover From a Corrupted Registry in Windows XP
How to Speed Up Windows Boot Time
Acer ERecovery Service is Not Available
Acer Recovery CD Restore Failed Reason: 0xf0000051
How to Fix Problem with No Active Mixer Devices Available in Windows XP
Parents Guide to MySpace.com - a report every parent should read
Save and Restore Desktop Layout of Icons
What is Windows Genuine Advantage and How to Overcome Problems With It
Change Forgotten Administrator Password in Windows XP/2000/Vista
Not Enough Server Storage Error When Connecting to Computer on Network
Installing Windows Vista Upgrade on a Blank Hard Drive
How to Delete Your Windows Vista Logon Password
Remove Unwanted Icons from the Windows Vista Welcome Center
Cannot Connect to Network Printer with Windows Vista
How to Wipe, Delete, Degauss, and Destroy Data on a Hard Drive
Fixing RTHDCPL.EXE - Illegal System DLL Relocation Error in Windows XP
How to Fix Blank or Missing Title Bar in IE9
Unable to Open New Tab in IE9 - Spinning Favicon
What is the Config.Msi folder and Can I Delete It?
Flash Player Installation Issues
How to Set Yahoo Mail as your Default Email Program
Unknown File in Winsock LSP - NWPROVAU.DLL - Can it be Removed?
How to Delete a Service in Windows Vista
How to Disable the On-Screen Keyboard in Windows Vista
What is CTFMON.EXE and How Can I Remove It
How to Export MSN Favorites to Internet Explorer
How to Fix Registry Editing Has Been Disabled By Your Administrator Error
How to Change Default Editor in Windows and Fax Viewer
How to Fix Problem when Windows Security Center reports multiple antivirus programs installed
How to Fix Problem when Windows Updates will download but will not install
How to Fix Problem when Windows Automatic Updates Service wont Start
Cannot Download Files With Internet Explorer
How to Keep Your Computer Up-to-Date
How to Fix the Prompt for Click to Run an ActiveX Control on this webpage
How to Remove "This Page Contains Both Secure and NonSecure Items" Warning Message
How to Fix Problem with Blank Add/Remove Control Panel
How to Fix Windows Vista Update Error 80244019
Troubleshooting An Error Occurred During Directory Enumeration
How to View and Decipher Minidump files created by Blue Screen error messages
How to Fix BLService Error on HP Computer in Vista
Google Adsense Hijacking - How to Respond
Windows Defrag Does Not Complete
Review of BigString Recallable Email
Fix Incorrect Time Stamp on Hotmail Messages
Deleting or Editing Typed URLs in the Internet Explorer Address Bar
Belarc Advisor - Quick Computer Inventory Software
How to Get Out of Full Screen Mode in Internet Explorer
How to Correct Missing "Copy to CD" option in My Pictures Tasks
How to Fix Code 39 error with CD or DVD Drive
How to Fix Problems When Windows Installer Popups Error With Missing .MSI Files
How to Fix Problems When Network Setup Wizard and Network Connections Won't Open
How to Fix Problems with Windows Help Errors
How to Delete Individual Entries from Run Command History
Foxit - Adobe Reader Alternative
How to Fix Autochk Program Not Found error
Difference between Master/Slave and Cable Select on a Hard Drive
How to Use Microsoft SyncToy to backup your important files
How to Delete Temporary Internet Files, Cookies, and History files
Review of PCDecrapifer Software Removal Tool
How to Fix Security Flaw in Adobe Reader
Computer Speakers Sound like Chipmunks
How to SVCHOST.EXE Application Error 0x745f2780
Troubleshooting the Unmountable Boot Volume Error in Windows XP
How to Disable, Uninstall, and Remove Windows Messenger instant messaging from Windows XP
How to Remove Windows Messenger in Windows XP
Free DVD Decoder Software and Help
Free CD Burning Software and Help
How to Use Remote Desktop to Access Multiple Computer on Your LAN
HijackThis Tutorial for removing Spyware
Review of Adsense Detective, Getting Stats and Results from Adsense
How to Disable System Restore in Windows ME or Windows XP
How to Uninstall Internet Explorer 7
How to Install NetBEUI in Windows XP
What is the KB891711.exe file in Windows 98 or Windows ME?
How to Troubleshoot and Solve USB Device Error Code 10
Spooler Subsystem App has encountered a problem and needs to close Error and How to Fix it
How to Fix Problem opening Microsoft Outlook
How to Disable News Headlines in Netscape
How to Bring Back Missing Folders in Netscape Communicator
How to Fix Access Denied Error when Using MSCONFIG
How to Fix HPQKBFiltr.Sys Keylogger Error in Kaspersky Antivirus
How to Backup and Restore Outlook Express Mail, Address Book, Blocked Senders List and other Settings
How to Fix Error 501 Permission Denied when changing fonts in Outlook Express
What is the Tilde (~) File on my Desktop?
What is the thumbs.db file and can I remove it
Password is Not Saved in Outlook Express or Outlook in Windows XP
Allow Viewing of Attachments in Outlook Express 6
How to Fix Problem of No Spell Check in Outlook Express
How to Fix Problems Viewing or Accessing Secure Web Sites
How to Start or Boot Windows into Safe Mode
What is the Winmail.dat file attached to emails?>
How to Correct Unreadable Fonts in Norton Antivirus or Norton Systemworks
How to correct issue with No Visible Menu Bar or Tabs in Windows XP Task Manager
How Disable/Enable the Windows XP Welcome Screen
How to Fix RTLGINA2.DLL error with Windows XP Welcome Screen and Netgear WG111
How to Fix Windows Update Error 0x80070420
PopUp Ad Removal Software and Help
Review of ErrorNuker program to identify and fix problems with the Windows Registry
| Search PCHell.com |
|
| site search by freefind | advanced |
Tools for Removing Spyware, Adware, and Malware
PC HELL
Other Pages
Welchia (Dllhost.exe and SVCHost.exe) Worm Removal
Uninstall Antivir Instructions
How to Manually Run the Microsoft Malicious Software Removal Tool
Bloodhound.Exploit.6 Virus Removal
Backdoor SDBot.H Trojan Removal
iPadastic - News, Tutorials, Help, Tips, and Hints for the iPad
Download Hoyle Games
including Casino 3D, Card, Board, and Solitaire games.
