Well, Algo.dll (i.e. its hash) changes basically in every virus database update.