MSI Installation Files and False-Positives

Avast Free Antivirus / Premium Security
1

Hi,
During my last boot-scan I received several False-positives for ordinary MSI Installation files for very well-known programs. Also,these were present on previous scans without issue? There was also an Error42110 “(the file is a decompression bomb)”.

2

could you attach a screen shot

3

Sorry I should have been more specific;it was actually several files within the same msi archive.I wasn’t wearing my specs and I thought it was several different msi files ;)There were four total and I found they are installation files for Acronis True Image recovery software.It is in the C:\Windows\Installer directory.

4

Welcome to the forum, :slight_smile:
Unfortunately with out specific information, there really isn’t very much
any one can check. :frowning:

5

I have told you the offending program’s name/path;what more would you need?

Edit: Now I receive the same for a newly downloaded Firefox 9.0 installation executable;at this point i just think your program is possibly flawed in some manner.

6
There was also an Error42110 "(the file is a decompression bomb)
Simply means that the file when expanded is a very large file. Doesn't mean it's dangerous.
7

There are many topics on decompression bomb if you use SEARCH:
http://forum.avast.com/index.php?topic=91034.0
http://forum.avast.com/index.php?topic=83851.0
See this quote from Igor

- decompression bomb is just something that unpacks to an unusually big amount of data even though it’s rather small (i.e. has a high compression ratio, for example). It’s nothing to worry about, you are just informed that avast! will not try to unpack the archive (you may not even know that it’s an archive, but it seems like it is) because it may take VERY long to process.
http://forum.avast.com/index.php?topic=15389.msg131213#msg131213

8

I don’t think you provided such info. Mentioning the name of a program that includes several MB (more than 100, by large) and a path used by all MSI installers, is not going to give any actual useful info.

Edit: Now I receive the same for a newly downloaded Firefox 9.0 installation executable;at this point i just think your program is possibly flawed in some manner.

Avast is not “our” program. We are simple users trying to help. And as already mentioned, if the only message you receive is that it is some decompression bomb, then you should READ the answers: it is NOT a malware, but just a general info.

If you actually received some other message of a real malware (not just general info), then please make it clearer so to provide you helpful info for you.