*SOLVED* Scan result - what should I do with these items please?

Avast Free Antivirus / Premium Security
1

The first 13 items seem to be something to do with IE6. My current Internet Explorer is 7.0.5730.11IS and according to Add or Remove Programs I don’t have any elements of IE6 installed.

C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\msoe.chm\msoe.hhk [E] CHM archive is corrupted. (42136) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\msoe.chm\#WINDOWS [E] CHM archive is corrupted. (42136) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\msoe.chm [E] CAB archive is corrupted. (42127) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\msoe.hlp [E] CAB archive is corrupted. (42127) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\msoe50.inf [E] CAB archive is corrupted. (42127) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\msoe.txt [E] CAB archive is corrupted. (42127) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\aleabanr.gif [E] CAB archive is corrupted. (42127) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\amaizrul.gif [E] CAB archive is corrupted. (42127) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\anabnr2.gif [E] CAB archive is corrupted. (42127) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\aswrule.gif [E] CAB archive is corrupted. (42127) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\blank.htm [E] CAB archive is corrupted. (42127) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\blankbkg.gif [E] CAB archive is corrupted. (42127) C:\bundle\Works\REDIST\IE6\TEMPFILE.CAB\btzhsepa.gif [E] CAB archive is corrupted. (42127)

The next 11 items seem to relate to Open Office.

C:\System Volume Information\_restore{A2F88BA6-CD59-4FEB-9EBC-F670424F967B}\RP709\A0273098.exe\$INSTDIR\openoffice.org- core01.cab\images_crystal.zip [E] CAB archive is corrupted. (42127) C:\System Volume Information\_restore{A2F88BA6-CD59-4FEB-9EBC-F670424F967B}\RP709\A0273098.exe\$INSTDIR\openoffice.org- core01.cab\images_hicontrast.zip [E] CAB archive is corrupted. (42127) C:\System Volume Information\_restore{A2F88BA6-CD59-4FEB-9EBC-F670424F967B}\RP709\A0273098.exe\$INSTDIR\openoffice.org- core01.cab\images_industrial.zip [E] CAB archive is corrupted. (42127) C:\System Volume Information\_restore{A2F88BA6-CD59-4FEB-9EBC-F670424F967B}\RP709\A0273098.exe\$INSTDIR\openoffice.org- core01.cab\images_tango.zip [E] CAB archive is corrupted. (42127) C:\System Volume Information\_restore{A2F88BA6-CD59-4FEB-9EBC-F670424F967B}\RP709\A0273098.exe\$INSTDIR\openoffice.org- core01.cab\DejaVuCondensedSans.ttf [E] CAB archive is corrupted. (42127) C:\System Volume Information\_restore{A2F88BA6-CD59-4FEB-9EBC-F670424F967B}\RP709\A0273098.exe\$INSTDIR\openoffice.org- core01.cab\DejaVuCondensedSansBold.ttf [E] CAB archive is corrupted. (42127) C:\System Volume Information\_restore{A2F88BA6-CD59-4FEB-9EBC-F670424F967B}\RP709\A0273098.exe\$INSTDIR\openoffice.org- core01.cab\DejaVuCondensedSansBoldOblique.ttf [E] CAB archive is corrupted. (42127) C:\System Volume Information\_restore{A2F88BA6-CD59-4FEB-9EBC-F670424F967B}\RP709\A0273098.exe\$INSTDIR\openoffice.org- core01.cab\DejaVuCondensedSansOblique.ttf [E] CAB archive is corrupted. (42127) C:\System Volume Information\_restore{A2F88BA6-CD59-4FEB-9EBC-F670424F967B}\RP709\A0273098.exe\$INSTDIR\openoffice.org- core01.cab\DejaVuCondensedSerif.ttf [E] CAB archive is corrupted. (42127) C:\System Volume Information\_restore{A2F88BA6-CD59-4FEB-9EBC-F670424F967B}\RP709\A0273098.exe\$INSTDIR\openoffice.org- core01.cab\DejaVuCondensedSerifBold.ttf [E] CAB archive is corrupted. (42127) C:\System Volume Information\_restore{A2F88BA6-CD59-4FEB-9EBC-F670424F967B}\RP709\A0273098.exe\$INSTDIR\openoffice.org- core01.cab\DejaVuCondensedSerifBoldItalic.ttf [E] CAB archive is corrupted. (42127)

The last item relates, I believe, to some RAR files that I downloaded but deleted in haste when a manual avast scan of them before decompression revealed a ‘decompression bomb’.

C:\WINDOWS\Internet Logs\tvDebug.zip\tvDebug_2007-07-29-13-03-59.log\PartNo_0#1455513266 [E] The file is a decompression bomb. (42110)

As ever your guidance would be much appreciated.

2

The short answer is do nothing. Files that can’t be scanned are just that, not an indication they are suspicious/infected, just unable to be scanned.

Longer answer:
Corrupted file, this could simply mean that avast is unable to unpack it to scan the contents of the archive and assuming it is because it is corrupt. Even if it were corrupt there is nothing that a user can do to resolve any corruption, short of replacing the file. This I wouldn’t recommend (especially for those in the \System Volume Information folder, part of the system restore function) unless you are getting problems relating to that file outside of the avast scan.

Decompression Bomb, a file that is highly compressed, which could be very large when decompressed. This used to be a tactic long ago to swamp the system, see http://forum.avast.com/index.php?topic=8943.msg73950#msg73950

3

Well that’s good news - I like not having to do anything more about them ;). Thanks sir.

Decompression Bomb, a file that is highly compressed, which could be very large when decompressed. This used to be a tactic long ago to swamp the system, see http://forum.avast.com/index.php?topic=8943.msg73950#msg73950

Thanks. I knew from Googling what it was [after I’d already deleted the RAR file including it] but thought I should check this scan entry was okay. Presumably as that entry is only in window’s internet log I can safely ignore this entry too?

4

You’re welcome.

Firstly - Deletion isn’t really a good first option (you have none left) or habit to get into, ‘first do no harm’ don’t delete, send virus to the chest and investigate.

No problem though, if the internet logs folder is just a temporary files files location.

5

Thanks, I appreciate the advice :).

No problem though, if the internet logs folder is just a temporary files files location.

Thanks :).

6

No problem, glad I could help.