"decompressed bomb" and Avast! won't let me delete it. Can anyone help?

Viruses and worms
1

Hello,
I scanned my system yesterday, and one warning was “decompressed bomb”. I attached yesterday’s scan log. There was no detection when I downloaded things recently, even though Avast! is always on.

Any help is greatly appreciated!
RIchard

2

These are really compressed files, just a warning no infection. :wink:

3

it is just a highly compressed file, and avast is saying it will not unpack and scan it

suspicious files can be uploaded and tested at one of these places www.virustotal.com / www.metascan-online.com / www.jotti.org

4
  • Decompression Bomb, a file that is highly compressed, which could be very large when decompressed. This used to be a tactic long ago to swamp the system.

The name really is the most dangerous thing about this and I wish they would change it or simply not report it, a real PITA.

These highly compressed files are generally ‘archive’ files which are inert, don’t present an immediate risk until they are unpacked. If you happen to select ‘All packers’ in your on-demand scans then you are more likely to come across this type of thing. Personally it is a waste of time scanning ‘all packers’ and that is why it isn’t enabled by default.

5

Thanks for everyone’s help so far! I did another scan and I still have the same file as a “decompressed bomb.” My difficulty ATM is locating it, so I can delete it. I will use your suggestions and will be back.

6

Essentially you are always going to be notified about files that can’t be scanned and why, but there is absolutely no reason to delete it.

What scan are you doing Quick, Full System Scan or a Custom scan and crucially if you are using either of the first two have you changed any of the default settings ?

7

Hey DavidR,
I did a Full System Scan both times and didn’t change the default settings. That said, I found a forum on apple that says (for all future readers) that it could only be installed where it is, by getting the users permission…long story short it’s totally safe. Also, it doesn’t seem advisable to delete it. [https://discussions.apple.com/message/3712035#3712035]

I really appreciate all the help everyone gave me! I guess I fit the “Newbie” title well.

8

You’re welcome.

Unfortunately I’m unfamiliar with Apple systems. But as you mention if this is an installation file then it is very likely to be highly compressed, but shouldn’t be an issue. If there is a Quick scan option in the avast1 4 Mac, then I would choose that next time and see if you get the same notice.