System : Windows XP Service Pack 3
If you have used the HijackThis to scan your computer to track down a virus, malware, trojan, backdoor, spyware etc, then you may see if it appear one component look like below :
O10 - unknow file in winsock LSp : c:windows\system32\nwprovau.dll
Then what is NWPROVAU.DLL?
The file nwprovau.dll is one of the file install by Client Service For Netware from our computer as Network Component, It purposely install for the IPX/SPX.
Then whether delete this file, or keep it in your computer?
If your computer are not using the IPX/SPX protocol and Netware, and you have not install about it. Because now day our Network protocol COMMONLY USED is TCP/IP Protocol, then DELETE this file from your computer is better (Since my case part : When it appear my computer system is starting to slow down for all my working, although I don't know when it start to installed on my system).
In the Windows registry, the nwprovau.dll file will be show up in the following registry key.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries
It will generally be shown under Key # 4 with the following information as show in below picture.
Step to REMOVE the NWPROVAU.DLL
1.) If you are decided to REMOVE it from your System, then you must used this program called LSPFix and save it to your DESKTOP. Click here to download directly, or go to Official Website to understand more about this program.
2.) Open the LSPFix from your Desktop, and follow the instruction. Now you can see like below Screen. If your Window don't have Buggy or improperly removed LSP software then you will see the message "NO PROBLEMS FOUND" appear in box screen.
3.) TICK "I know what I'm doing (or enjoy re-installing my operating system...)" option if not, you are not able to process (unable to click) for next step from button.
NOW at your LEFT SCREEN (Keep area) you can see the file name as "NWPROVAU.DLL" with description "NWLink IPX/SPX/NetBIOS Compatible Transport Protocol", and now Select this File name and click the BUTTON with ">>", and the file will transfer to "REMOVE area"
4.) Click Finish after transfer to REMOVE AREA. And you will get the following "Repair Summary" from below screen picture. Click OK to proceed. NOT NEED RESTART YOUR WINDOWS.
5.) Now open and run HijackThis, and you can see that "O10 - unknow file in winsock LSp : c:windows\system32\nwprovau.dll" NO MORE APPEAR in your scanning result list.
Hope it will work for you.
Find this topic NWPROVAU.DLL related in Facebook
NOTE : for whose are expert and professional Computer Trouble Shooting, then you are at your own risk TO DECIDE fully REMOVE/DELETE all related file name from your Windows Register. Go to START -- RUN -- type regedit -- CTRL+F, and type nwprovau.dll, DELETE all file in your register if you are know what you doing. For me, I delete all without backup. For your own safe, just backup your Registry before do anything.
