Anyone know if this is Malware?

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Disco Albino, Nov 4, 2007.

  1. Disco Albino

    Disco Albino Private E-2

    O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll

    O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll

    The HJT reader I used said:Winsock Hijacker
    Every time I've seen this its been a bad thing
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    They are both legit files! You have to be very careful using HJT log readers, they are not very accurate so please be careful and do not trust them. Also, do not remove anything with HJT unless an expert or you have enough experience with it to remove entries.

    The file "nlaapi.dll" is part of Windows Vista Network Location Awareness 2 component.

    The file "napinsp.dll" is part of Windows Vista E-mail Naming Shim Provider.
     
  3. Disco Albino

    Disco Albino Private E-2

    Thanks!! I'm glad to get that straightened out, good thing I didn't go in and manually delete them.
     
  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Yes! It is a good thing.:)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds