Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Techtronic on December 19, 2011, 03:57:07 AM

Title: Decompression Bomb?
Post by: Techtronic on December 19, 2011, 03:57:07 AM

Just completed a boot-time scan and was surprised by this error message:
"The File is a Decompression Bomb:Error 42110"
The error refers to the file  tih_s_e.exe  which is the installation executable for Acronis True Image. About 30 days ago I ran the same boot-time scan and there were no error messages for this file. Oddly enough, when I scan the same file in Windows, avast completes the scan with the "No Threat Found" message.  Running avast IS 6.0.1367, Win 7 Pro x64. What's going on ???

Title: Re: Decompression Bomb?
Post by: iyogisolutions1 on December 19, 2011, 04:10:55 AM

Quote from Igor (avast! team)

decompression bomb is just something that unpacks to an unusually big amount of data even though it's rather small (i.e. has a high compression ratio, for example). It's nothing to worry about, you are just informed that avast! will not try to unpack the archive (you may not even know that it's an archive, but it seems like it is) because it may take VERY long to process.

http://forum.avast.com/index.php?topic=15389.msg131213#msg131213

Title: Re: Decompression Bomb?
Post by: Techtronic on December 19, 2011, 04:21:40 AM

Ok Thanks!

But now I have another question: Why did the previous boot-time scan had no issues scanning this file? What has changed??

Title: Re: Decompression Bomb?
Post by: iyogisolutions1 on December 19, 2011, 04:56:11 AM

There wont be a specific answer for that.. But may be some updates in the Behavior Shiled can be the issue.