Since you don’t give any examples of the file/s considered as a decompression bomb (file name and file type), I can’t comment on that.

The decompression bomb name is not an indication that it is infected, just that it hasn’t been scanned as to do so would require extraction and that would be very large.

The name really is the most dangerous thing about this and I wish they would change it or simply not report it, a real PITA.