Avast WEBforum

Other => Viruses and worms => Topic started by: TerryWood on May 26, 2011, 12:49:02 PM

Title: Algo.dll
Post by: TerryWood on May 26, 2011, 12:49:02 PM
Hi I am using the free version of Avast 6 on Windows 7 64bit.

This morning Prevx threw up an alert about Algo.dll which is located in Program Files/AlwilSoftware/Avast5/defs/11052600/Algo.dll

Scanning with avast produces nothing nor with Superantispyware. Similarly uploading to Jotti and virustotal produces one alert from Prevx but no one else does.

Is this a genuine alert or not. Has anyone else picked this up?

Thank you

Terry
Title: Re: Algo.dll
Post by: igor on May 26, 2011, 12:51:21 PM
That's an avast!'s own file - part of its scanning engine (so it would be rather strange if avast! detected anything in there :)).
Clearly a false positive from Prevx.
Title: Re: Algo.dll
Post by: Pondus on May 26, 2011, 02:07:46 PM
False positive reporting in PrevX   http://www.wilderssecurity.com/showthread.php?t=266895


Quote
The two methods of sending in false positives will eventually get back to the same team. However, there are many malware writers who use the "Report as a false positive" function within the product to report a FP, so we have to spend more time manually sifting through them. If it is a low-volume FP or an uncommon program, it is best to send it to report@prevxresearch.com so that we will take a look at it closely as the "Report as a false positive" function prioritizes by the number of reports.
Title: Re: Algo.dll
Post by: polonus on May 26, 2011, 04:14:50 PM
Hi TerryWood,

Check these for Algo.dll

MD5   0e62aab48c81f8ae7d4fb1b99366f4a0  *
SHA256   e7be8e53b49b1e7599924f6d9612bbffaf0f3878ba9c434b4e824f4a9fccf422  *

polonus

P.S. " consider the info given in the reply posting from igor
Title: Re: Algo.dll
Post by: igor on May 26, 2011, 04:18:23 PM
Well, Algo.dll (i.e. its hash) changes basically in every virus database update.
Title: Re: Algo.dll
Post by: Asyn on May 26, 2011, 04:36:42 PM
Well, Algo.dll (i.e. its hash) changes basically in every virus database update.

I can confirm this.
Some months ago, I had to report it a couple of times to Emsisoft, as they also saw it as a problem.
The EAM FP has been fixed since then. ;)
Title: Re: Algo.dll
Post by: polonus on May 26, 2011, 10:23:44 PM
Hi igor,

So that could be at the base of the problem,

polonus
Title: Re: Algo.dll
Post by: bedex78 on June 01, 2011, 08:19:29 AM
I happen to receive an alert also in regards to the Algo.dll file, and also other files... but from the Avast Scan Results.

Here's what avast says: Error: Avast cannot find the path specified(3)

C:\Program Files\AVAST Software\Avast\defs\11053101\algo.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswcleanerdll.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswcmnbs.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswcmnis.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswcmnos.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswengin.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswscan.dll

When double-clicking these files from their folders, a REGSVR32 alert pops-up that says:
LoadLibrary("C:\Program") failed - The specified module could not be found.

I wanted to repair it but the 'Apply' button is greyed out.

How do I fix these? Any help will be appreciated. Tx!

(I'm using AVAST! Free Antivirus 6.0.1125 on Win XP)
Title: Re: Algo.dll
Post by: Asyn on June 01, 2011, 09:18:39 AM
How do I fix these? Any help will be appreciated. Tx!

Reboot your machine.
Solved..?
Title: Re: Algo.dll
Post by: DavidR on June 01, 2011, 03:10:41 PM
How do I fix these? Any help will be appreciated. Tx!

Nothing to fix:
- Nothing to worry about, those are old virus definitions folders and avast is doing some housecleaning to keep the size used on the hard disk to a minimum. This just happens to have occurred between the time you started the scan and it reaching that old defs folder.