Author Topic: aswar0.dll, clnr0.dll, exts0.dll...?  (Read 5691 times)

0 Members and 1 Guest are viewing this topic.

wursti

  • Guest
aswar0.dll, clnr0.dll, exts0.dll...?
« on: April 10, 2008, 08:22:22 PM »
Hello!
After startup I usually check Comodo Proactive Defense review list. Today I have noticed that these three files are under status "modified" although I have checked and removed them on previous time?
Does these files really change on every boot or why does they appear again and again in review section?
Comodo says that they are "safe" files...
They all exists in Avast DATA folder and I assume that they are legit files?


ps. Iadhide5.dll... does it have something to do with Avast!...?

Quote
iadhide5.dll is a F-Secure Backweb Component from BackWeb belonging to BackWeb Autoupdater. This is used for the automatic updates of many applications

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89002
  • No support PMs thanks
Re: aswar0.dll, clnr0.dll, exts0.dll...?
« Reply #1 on: April 10, 2008, 08:55:34 PM »
aswar?.dll belongs to the avast anti-rootkit module Alwil SoftWare, the 'asw' part and 'ar' the anti-rootkit. I placed a ? to indicate that this number could other than 0.

clnr0.dll (Virus/Worm Cleaner Application for avast!) is a component from the software avast! Virus Cleaner Tool

exts0.dll
Quote
These files may have the following Vendor, Product, Version Information in the file header ALWIL Software; Avast! Antivirus Scanner Extension Library; 1, 0, 0, 0

    * The following Vendor, Product, Version Information has also been reported:

ALWIL Software; ����t! Antivirus Scanner Extension Library; 1, 0, 0, 0

All of the above may have been recently updated either by program or vps update so the 'modified' may be correct.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

wursti

  • Guest
Re: aswar0.dll, clnr0.dll, exts0.dll...?
« Reply #2 on: April 10, 2008, 09:28:04 PM »
Ok, thanks for the info.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: aswar0.dll, clnr0.dll, exts0.dll...?
« Reply #3 on: April 10, 2008, 10:21:10 PM »
Does these files really change on every boot or why does they appear again and again in review section?
They're temporary files (aswar0.dll and clnr0.dll) that could change frequently.
I don't know about exts0.dll. Where is it located?

ps. Iadhide5.dll... does it have something to do with Avast!...?
I don't think so...
http://www.programchecker.com/file/21099.aspx says Kodak.
http://www.neuber.com/taskmanager/process/iadhide5.dll.html says F-Secure Backweb component
The best things in life are free.

wursti

  • Guest
Re: aswar0.dll, clnr0.dll, exts0.dll...?
« Reply #4 on: April 10, 2008, 10:45:07 PM »

They all exists in Avast DATA folder and I assume that they are legit files?


Exact address: C:\Program Files\Alwil Software\Avast4\DATA

internal file description is: Avast! Antivirus Scanner Extension Library
file type: Application Extension

There's also digital signature from ALWIL Software from 2007...

Seems legit.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: aswar0.dll, clnr0.dll, exts0.dll...?
« Reply #5 on: April 10, 2008, 10:48:10 PM »
Yes, all three files are extracted from 400.vps (the avast virus database) at the time of loading.
They basically change (=get overwritten) during every VPS update.

If at first you don't succeed, then skydiving's not for you.

wursti

  • Guest
Re: aswar0.dll, clnr0.dll, exts0.dll...?
« Reply #6 on: April 10, 2008, 10:56:43 PM »
Yes, all three files are extracted from 400.vps (the avast virus database) at the time of loading.
They basically change (=get overwritten) during every VPS update.



Thank you Vlk, that's what I thought also.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: aswar0.dll, clnr0.dll, exts0.dll...?
« Reply #7 on: April 10, 2008, 10:58:49 PM »
Sorry wursti, I've missed that info...
I don't have any of them there... ???
The best things in life are free.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89002
  • No support PMs thanks
Re: aswar0.dll, clnr0.dll, exts0.dll...?
« Reply #8 on: April 10, 2008, 11:15:06 PM »
Ok, thanks for the info.

Your welcome.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security