Should I block it?

No, this file is 100% safe to run.

Additional versions

5.1.2600.5512 (xpsp.080413-2113)	69.57%
5.1.2600.5512 (xpsp.080413-2113)	4.35%
5.1.2600.5512 (xpsp.080413-2113)	8.70%
5.1.2600.5512 (xpsp.080413-2113)	4.35%
5.1.2600.5512 (xpsp.080413-2113)	4.35%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	8.70%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

SetServiceStatus, RegQueryInfoKeyW, RegConnectRegistryW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, RegisterEventSourceW, ReportEventW, DeregisterEventSource, RegisterServiceCtrlHandlerW

kernel32.dll

Sleep, GetLastError, ReadFile, CloseHandle, LocalFree, CreateMailslotW, LocalAlloc, GetTimeFormatA, GetDateFormatA, GetThreadLocale, DisableThreadLibraryCalls, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, MultiByteToWideChar, WideCharToMultiByte, FormatMessageW, LoadLibraryExW, FreeLibrary, GetComputerNameExW, GetTimeZoneInformation, SetUnhandledExceptionFilter

msvcrt.dll

DllMain

netapi32.dll

NetApiBufferFree, NetMessageBufferSend, I_NetNameCanonicalize, NetApiBufferAllocate, NetpIsRemote, I_NetNameCompare

ntdll.dll

RtlNtStatusToDosError, RtlCopySid, RtlLengthSid, RtlSetSaclSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlCreateSecurityDescriptor, RtlAddAce, RtlCreateAcl, RtlUnicodeStringToOemString, RtlxUnicodeStringToOemSize, NlsMbOemCodePageTag, RtlInitUnicodeString, RtlOemStringToUnicodeString, RtlxOemStringToUnicodeSize, RtlInitString, RtlInitAnsiString

Export table

ServiceMain

SvchostPushServiceGlobals

ALRSVC.dll

Alerter Service DLL by Microsoft

Remove ALRSVC.dll

Version:	5.1.2600.5512 (xpsp.080413-2113)
MD5:	a9a3daa780ca6c9671a19d52456705b4
SHA1:	43295c3a78d9fef4e4c778b5f1153ddf3f968e5b
SHA256:	67c959144b57ae0bbf1d82dbed197f32cdb06fecd883a80c441a0202fe83fab4

This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

alrsvc.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including NVIDIA Drivers published by NVIDIA Corporation and Chargoon Didgah Client Tools published by Chargoon Co.. This version is installed on Windows XP.

Details

File name:	alrsvc.dll
Publisher:	Microsoft Corporation
Product name:	Alerter Service DLL
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\alrsvc.dll
File version:	5.1.2600.5512 (xpsp.080413-2113)
Product version:	5.1.2600.5512
Size:	17 KB (17,408 bytes)
Digital DNA
PE subsystem:	Windows Console
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Programs

The following programs will install this file

Chargoon Didgah Client Tools

Chargoon Co.

3% remove

NVIDIA Drivers

NVIDIA Corporation

2% remove

The NVIDIA Driver is the software driver for NVIDIA Graphics GPU installed on the PC. It is a program used to communicate from the Windows PC OS to the device. This software is required in most cases for the hardware device to function properly. In most cases, drivers come with Windows or can be found by going to Windows Update in Control Panel and checking for updates as well as downloaded from the NVIDIA support website.