is there any solution to prevent decompression bomb from expanding.
A solution isn’t required, the name is the most dangerous thing about it, if you hadn’t scanned a highly compressed (dormant file) then it would simply sit there.
I have been saying this for years:
Decompression Bomb, a file that is highly compressed, which could be very large when decompressed. This used to be a tactic long ago to swamp the system.
The name really is the most dangerous thing about this and I wish they would change it or simply not report it, a real PITA.
These highly compressed files are generally ‘archive’ files which are inert, don’t present an immediate risk until they are unpacked. If you happen to select ‘All packers’ in your on-demand scans then you are more likely to come across this type of thing. Personally it is a waste of time scanning ‘all packers’ and that is why it isn’t enabled by default.