Algo.dll

Viruses and worms
1

Hi I am using the free version of Avast 6 on Windows 7 64bit.

This morning Prevx threw up an alert about Algo.dll which is located in Program Files/AlwilSoftware/Avast5/defs/11052600/Algo.dll

Scanning with avast produces nothing nor with Superantispyware. Similarly uploading to Jotti and virustotal produces one alert from Prevx but no one else does.

Is this a genuine alert or not. Has anyone else picked this up?

Thank you

Terry

2

That’s an avast!'s own file - part of its scanning engine (so it would be rather strange if avast! detected anything in there :)).
Clearly a false positive from Prevx.

3

False positive reporting in PrevX http://www.wilderssecurity.com/showthread.php?t=266895

The two methods of sending in false positives will eventually get back to the same team. However, there are many malware writers who use the "Report as a false positive" function within the product to report a FP, so we have to spend more time manually sifting through them. If it is a low-volume FP or an uncommon program, it is best to send it to report@prevxresearch.com so that we will take a look at it closely as the "Report as a false positive" function prioritizes by the number of reports.
4

Hi TerryWood,

Check these for Algo.dll

MD5 0e62aab48c81f8ae7d4fb1b99366f4a0 *
SHA256 e7be8e53b49b1e7599924f6d9612bbffaf0f3878ba9c434b4e824f4a9fccf422 *

polonus

P.S. " consider the info given in the reply posting from igor

5

Well, Algo.dll (i.e. its hash) changes basically in every virus database update.

6

I can confirm this.
Some months ago, I had to report it a couple of times to Emsisoft, as they also saw it as a problem.
The EAM FP has been fixed since then. :wink:

7

Hi igor,

So that could be at the base of the problem,

polonus

8

I happen to receive an alert also in regards to the Algo.dll file, and also other files… but from the Avast Scan Results.

Here’s what avast says: Error: Avast cannot find the path specified(3)

C:\Program Files\AVAST Software\Avast\defs\11053101\algo.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswcleanerdll.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswcmnbs.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswcmnis.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswcmnos.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswengin.dll
C:\Program Files\AVAST Software\Avast\defs\11053101\aswscan.dll

When double-clicking these files from their folders, a REGSVR32 alert pops-up that says:
LoadLibrary(“C:\Program”) failed - The specified module could not be found.

I wanted to repair it but the ‘Apply’ button is greyed out.

How do I fix these? Any help will be appreciated. Tx!

(I’m using AVAST! Free Antivirus 6.0.1125 on Win XP)

9

Reboot your machine.
Solved…?

10

Nothing to fix:

  • Nothing to worry about, those are old virus definitions folders and avast is doing some housecleaning to keep the size used on the hard disk to a minimum. This just happens to have occurred between the time you started the scan and it reaching that old defs folder.