Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: rodzthomas on November 22, 2007, 07:10:47 AM
-
Hi! Sometimes after i scan, the report states that "this is a decompression timebomb"
What does it mean? When i try to "chest" it, an error will occur. Pls Help!
Thanks in advance!
-
Hi rodzthomas,
http://en.wikipedia.org/wiki/Decompression_bomb (http://en.wikipedia.org/wiki/Decompression_bomb)
The detection can be a false positive- avast! detected an .iso image as a decompression bomb on my computer this morning. I know it's a false positive because it was an image of a working PCLinuxOS live CD!
Big files like this (CD/DVD size) are too big to move to the chest. Either ignore the detection if you're sure it's a legitimate file or delete the file directly- it may also be too big to move to the waste basket if you're in Windows.
If it's a legitimate file, the avast! people would want to remove the FP detection, but if it's a very large file, sending it by email would be out of the question. You could mention the name of the file, how it was created, where it was downloaded from etc. here: that might help remedy any FP.
If had been a smaller file, you could've uploaded it to VirusTotal (http://www.virustotal.com/) to check the detection.
-
Hi rodzthomas,
http://en.wikipedia.org/wiki/Decompression_bomb (http://en.wikipedia.org/wiki/Decompression_bomb)
The detection can be a false positive- avast! detected an .iso image as a decompression bomb on my computer this morning. I know it's a false positive because it was an image of a working PCLinuxOS live CD!
Big files like this (CD/DVD size) are too big to move to the chest. Either ignore the detection if you're sure it's a legitimate file or delete the file directly- it may also be too big to move to the waste basket if you're in Windows.
If it's a legitimate file, the avast! people would want to remove the FP detection, but if it's a very large file, sending it by email would be out of the question. You could mention the name of the file, how it was created, where it was downloaded from etc. here: that might help remedy any FP.
If had been a smaller file, you could've uploaded it to VirusTotal (http://www.virustotal.com/) to check the detection.
Hi Frank! Thanks for the reply. It was a nero file (Dont really remember.Sorry) I will put up more details on the next time i get this message. I do get stuff like, the file is corrupted and when i try to delete or move it to the chest, an error will occur.
Sorry for not being clearer. Will keep this in mind on the next scan and if something pop's up.
-
ahh... i finally did the scan. I tried deleting the last file and an error accured. Kindly have a look.
Thanks.
-
The 'corrupt' archive in NeroBackItUp I don't think is a problem. More likely avast! just can't read it. Unless somebody with more knowledge tells you otherwise, ignore similar messages.
The 'decompression bomb' warning seems to be a DVD data file: safe to ignore. If one of those .VOB files is less than 10MB, you could email it to avast! mentioning it's a false positive, although they may well be more like 100MB+: far too big to email.
avscan.dll is an AntiVir file. Do you still have AntiVir installed? Two AV programs will conflict: if you're going to use avast!, you'll need to uninstall AntiVir.
What is the full location of this entry:
E:\Computer Stuff\...\avscan.dll?
There are two more in System Restore you can ignore: If you no longer have AntiVir, avscan.dll will get flushed out of System Restore as new restore points are created.
-
Yeah ur right about the mail thing. With regards to Antivir, i have uninstalled it previously when a problem accured. The umbrella just didn't open. Really!
So in turn i found Avast! and its been working great until that issue i had. I also created more restore points after the uninstall of AntiVir.
The location for E:\Computer Stuff\...\avscan.dll is located on my partition and that file could not be found when i wanted to delete it manually. Even after "show all Folders" was ticked.
I will go home and check out the "..." after E:\Computer Stuff\
Thanks again for ur help!
-
:) Hi :
To COMPLETELY REMOVE AntiVir/Avira from your computer, follow the
Info at www.avira.com/en/support/av7_upgrade_tools.html . That
includes using the "Registry Cleaner" Tool and the appropiate
"Uninstallation Package" .
-
Thnks. Will try that
-
Thnks. Will try that
Please, post back the results ;)
-
hi Guys. I finally did the uninstaller for Avira and it didnt work. First time i had some program's running and it said to "close all running...". Then i closed all that was open including my Avast! and it still said the same thing. Any other ideas?
-
hi Guys. I finally did the uninstaller for Avira and it didnt work.
Did you try Control Panel before?
-
hi Guys. I finally did the uninstaller for Avira and it didnt work.
Did you try Control Panel before?
Yes. I uninstalled Avira through the "add/remove" section.
-
Yes. I uninstalled Avira through the "add/remove" section.
And then boot, and then used the uninstall tool (registry cleaner) for it?
-
yeah i just did it. Gonna run Avast! scan later on... but when i started my com earlier, it said that in "Lacals...delus.exe" cannot be found. What is that? Sorry, Im learning :)
-
It said that in "Lacals...delus.exe" cannot be found. What is that? Sorry, Im learning :)
Who said that?
Can you post a screenshot of the message?
The only way to know what is it, will be knowing what is behind the ... on the file name.
-
It said that in "Lacals...delus.exe" cannot be found. What is that? Sorry, Im learning :)
Who said that?
Can you post a screenshot of the message?
The only way to know what is it, will be knowing what is behind the ... on the file name.
I tried to get a screenshot. The thing is, It happened just before windows loaded. After that, windows loads as usual. Im using windows XPp2
-
here's a link on that file i mentioned
http://www.file.net/process/delus.exe.html
it seems its related to antivir.
-
It happened just before windows loaded. After that, windows loads as usual.
Any useful information into Control Panel > Administrative Tools > Events, specially 'Errors'.
-
It happened just before windows loaded. After that, windows loads as usual.
Any useful information into Control Panel > Administrative Tools > Events, specially 'Errors'.
Sorry for the late reply. Will check it tonight... I did a full registry cleaning and that prompt did not happen again... but i still will check the "specially errors"
Thanks again...
-
i couldn't find the section u mention. But this is the latest scan...
-
The error is 'unable to scan'. Files that can't be scanned are just that, not an indication they are suspicious/infected, just unable to be scanned. Two of them could be access protected into System Volume.
-
From the image, that looks like it is likely to be a virus signature file, avscan.dll so it would appear that this is unencrypted otherwise avast wouldn't be able to scan it. avast can't extract part of the avscan.dll 'archive' without corrupting the dll I would think so the operation is unsupported and failed.
Do you know what this avscan.dll came with, in your computer stuff\...(sub folder not shown in the image)\ if it is an installed AV I would suggest that you uninstall or remove it. It could be windows onecare or antivir
Component Name: avscan.dll
Description of avscan.dll
This is a component of Microsoft Windows OneCare Live. Windows Live OneCare, from Microsoft, is a suite designed to integrate anti-spyware, anti-virus, firewall and other security functions.
OR
Component Name: avscan.dll
Description of avscan.dll
This is a component of Avira AntiVir Personal. AntiVir PersonalEdition is a security software that can detect and remove viruses, unwanted programs, and other malware types. Scans can be configured and employ both database and behavior-based methods in detecting the presence of a virus on a computer. It can schedule single or recurring tasks such as updates and scans.
Or perhaps something different but using this file name.
I would suggest cleaning up the system information information folder and recover some HDD space.
Create Clean Restore Point - Clear old Restore Points.
Create a clean System Restore point:
1. Click Start, All Programs, Accessories, System tools, System Restore.
2. In the pop-up that appears fill in the radio button to Create a Restore Point
3. Click NEXT
4. Enter a useful name that you will remember if you need to find this again (Clean Restore Point)
5. Click CREATE
You now have a clean restore point, you should clear the old ones:
1. Click Start, All Programs, Accessories, System tools, Disk Clean Up
2. Click OK on the C: drive
3. Click the More Options tab
4. In the System Restore section click the Clean Up button
-
Thank you. Will get to it later.
Regarding the computerstuff... section, I had an installer there incase avast was not as good as avira. So when i was happy with avast i just deleted the avira installer.
-
Your welcome, looks like some remnants like that dll file were left.
-
did the "restore points" clean up and this is the results now.... How do i get rid of that? So far, thanks for all the help!
-
You don't have to 'get rid' of it.
Just because it seems a problem with the avast unpacker (RAR) and/or the archive itself.
A file that can't be scanned is not necessarily an infected file.
Don't worry with this particular file...
-
did the "restore points" clean up and this is the results now.... How do i get rid of that? So far, thanks for all the help!
<snip>
Regarding the computerstuff... section, I had an installer there incase avast was not as good as avira. So when i was happy with avast i just deleted the avira installer.
It doesn't look like you got rid of the installer.
Just clear out the redundant data from your computer stuff folder, since you said you got rid of avira, get rid of the remnants, antivir_workstation_win7u_eng_h.exe, that is the file that contains avscan.dll and end of messages.
-
Done. Thanks alot guys...
-
Your welcome.