Decompression Bomb Issues?

Viruses and worms
1

Hi, I’m kind of new to this forum but whenever I try to scan with avast, I keep getting an error 42110 because a file is a decompression bomb. I read that decompression bombs can be used to allow traditional viruses past antivirus and also can contain large amounts of data. How do I get rid of it?
I use Windows 10 btw.

The main problem is that it is in the NetworkServices folder that requires admin password to be accessed and the current admin won’t enter the password because he thinks that it will allow a virus admin privileges or something.

The pathway to the decompression bomb is:
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\mpam-e09cc4e9.exe

Basically I can’t access the folder that contains the decompression bomb and I want to get rid of it and solve the problem.
I really appreciate the help. Thanks!

2
  • Decompression Bomb, a file that is highly compressed, which could be very large when decompressed. This used to be a tactic long ago to swamp the system.

The name really is the most dangerous thing about this and I wish they would change it or simply not report it, a real PITA.

These highly compressed files are generally ‘archive’ files which are inert, don’t present an immediate risk until they are unpacked. If you happen to select ‘All packers’ in your on-demand scans then you are more likely to come across this type of thing. Personally it is a waste of time scanning ‘all packers’ and that is why it isn’t enabled by default.

3

The only packers selected in the Scan Settings are:
Self-extracting DOS executables
Self-extracting Win32 executables
Droppers
NTFS streams

Those are the only packers selected (I think this is the default setting, not sure though), and I don’t want to not scan a possible virus file (although I am being a bit paranoid). How often are packers considered to be malicious?

I don’t know which type the decompression bomb is. And how can a decompression bomb be unpacked?

4

i did a quick google search and it seems mpam(######).exe files seem to be updates to the Microsoft Malware protection center

5

If it is, then do you know how to get rid of the 42110 error in avast?

6

“The pathway to the decompression bomb is:
C:\Windows\ServiceProfiles\NetworkService\AppData\Local[b]Temp[/b]\mpam-e09cc4e9.exe”

Try run Temp file cleaner by Oldtimer > http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/

7

Thanks for the reply. The program is safe, i presume. But it requires admin access to run the program, and I doubt the admin will let me either, considering that he’s paranoid about running suspicious programs he doesn’t know about.
Is there another way without a need for admin access (sorry lol I know admin access is pretty crucial)?