Unable to scan the file is a decompression Bomb!

Hi Guys I am a new user of Avast. I did a scan and it come up with a decompression bomb file. I googled it and from what I have read I’m a little confussed!

I’m not to sure if I should be worried or s#*ting myself!!!

This is where it is however I can’t seem to locate this file.

c:\documents and settings\my name\local settings\temp\WER99cc.dir00\manifest.txt.(gzip)

Please help

Can this harm my computer? As some say “yes” others say ‘No don’t worry about it’!

Don’t worry about it.
All I’ve read here from the experts is that it (decompression bomb) is a bit of an old terminology that causes more alarm than is needed.
A decompression bomb is simply a file that is packed with an unusually high compression, making unpacking difficult. It probably is not infected. As it is a “temp” file it can safely be deleted, anyway, provided the application that created the files has done what it was doing with it.
I have no idea (nor does Google) what “WER99cc” might pertain to. If you do, let us know. It sounds like a random temp file name, just created to unpack the archive (for whatever) then no longer needed.

Hi again I have looked and looked. I’m no expert when it comes to computers but I can usually locate a file. I typed most of the name into my file finder and it opened up a page of gifs which gave me an option to stop straight away which I did due to not being sure what it may do. It seems so far (Touch wood if that was the right file?!) it has not corrupted anything as yet!

I was going to type the full name in whoever I’m not sure if it will find the file and display it or just open it as it did the last time!
I’m a little worried if I opens the right one my computer might crash.

The sub folder “local settings” is usually a hidden file. To locate it you’ll have to set the folder options to show hidden and system files. Then you should be able to navigate down the path indicated to the file.
With a file suffix of “.txt” it should open in Notepad. With it being zipped (gzip) it may use Winzip to open.
It seems unlikely to me the file suffix will be “.txt”, it is more likely to be a suffix used by a decompression program, like Winzip.
If the extension is something else, let us know.
If you right click the file and select “properties”, it may reveal a bit about it under the various tab headers.

“Decompression Bomb” as explained by DavidR:

Decompression Bomb, a file that is highly compressed, which could be very large when decompressed. This used to be a tactic long ago to swamp the system, also see http://forum.avast.com/index.php?topic=15389.msg131213#msg131213.

The name really is the most dangerous thing about this and I wish they would change it or simply not report it, a real PITA.

Files that can’t be scanned are just that, not an indication they are suspicious/infected, just unable to be scanned.

Tried all this still can’t locate it. When I type the full name into file finder it come up with. No results.

However if I try to do an advanced search it will tell me that: doc and settings\my name\Local settings\Temp refers to a location that is unavailible. It could be on the hard drive of this computer or on a network. Check to make sure that the disc is properly inserted, or that you are connected to the internet or your network and try again. If it still can’t be located, the information may have been moved to a different location.

I’ll say it again: select your folder options to show hidden and system files.
You running from an admin account?

Yes I’m running from an admin account.

And Yes I have selected system folders and hidden folders to be shown. via control panel

Any Ideas

Oh and when I look for the file using file search, it gives me a list of files to search through system, hidden ect even some back da da tape thingy. I searched them all still nothing.

Well, beats me. You could try additionally in folder options “show protected operating system files”, but I wouldn’t hold your breath.
Do you use any file cleaning software, Ccleaner for instance? Or recently run a disk cleanup?

Hi guys thanks for all your help! It was there in the local settings\temp\WER99cc.dir00\manifest.

I managed to locate th wer99cc.dir00. was in the temp file as it stated just my eyes failed me. so sorry. Anyhow the file was from when I once ran Trojan remover on my laptop.
Was able to delete this with no problems

A question if you don’t mind! Whilst looking for this file I have noticed a heap of updates amoung other files that just seem to be sitting around in temp files. If I deleted everything from these temps will that cause a problem if a program may need it. I’m thinking it would and I might be better off with a disc clean up. Unsure! pls help. As I have a lot of double files from when I had to reformat a few months ago. I am a L plater. lol

Cheers all for your help :slight_smile:

A lot of temp files are created by a program for various reasons, eg: updating, so are usually safe to delete. Ccleaner, by Piriform, is a popular program for doing this. (If you use this, do read the guide to operating it first; you can real easy delete more than intended without realizing it.)
Another useful and lightweight program for deleting temp (etc) files is ATF cleaner, by Atribune.
Both are often recommended at security forums, as part of a malware cleanup procedure.