Hello all,
I’m new to the forum and Avast so if i’m being glaringly noobish i offer an apology.
I play a game called Americas army and it runs an anti cheat program called Punkbuster.This is throwing me out of games saying " I have been thrown out for an api function 131127 violation.
I got in touch with the punkbuster tech support and they say I have a trojan.
I ran Avast evaluation copy to quarantine the animal and received 7 files in the log,4 of them being decompression bombs,a corrupted gzip file and the other 2 i deleted succesfully.
Being a newb i thought it would be best to put them in the chest until i could find out what to do with them but unfortunately there was an error message saying they couldn’t be moved.
What do I do now?
Also there was no mention of a trojan or any other malicious programs?
Ive read a little about decompression bombs on the forum but had to stop, cos i though my brains were going to start dribbling out of my ears ???So if anyone can please help a confused ,befuffled old noob, I would be eternally grateful,
Thanks froggo
A decompression bomb is simply a file that to all intents look small in size by using multiple compression methods and when decompressed would be very large.
In the past this type of thing was used to swamp and possibly crash your system. So avast is just trying to avoid this potential very large file size when unpacked.
What would be more helpful is the infected/suspect file names, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ? Check the avast! Log Viewer (right click the avast icon), Warning section, this contains information on all avast detections.
Deletion isn’t really a good first option (you have none left), ‘first do no harm’ don’t delete, send virus to the chest and investigate.
I doubt it was missed because of any of the files avast was unable to scan. Files that can’t be scanned are just that, not an indication they are suspicious/infected, just unable to be scanned. They should be investigated not deleted.
If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode.
- Ewido, a.k.a. avg anti-spyware If using winXP. or a-Squared free if using win98/ME.