Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Zwitterion on December 24, 2011, 01:32:34 AM

Title: MSI Installation Files and False-Positives
Post by: Zwitterion on December 24, 2011, 01:32:34 AM

 Hi,
During my last boot-scan I received several False-positives for ordinary MSI Installation files for very well-known programs. Also,these were present on previous scans without issue? There was also an Error42110 "(the file is a decompression bomb)".

Title: Re: MSI Installation Files and False-Positives
Post by: Pondus on December 24, 2011, 01:36:37 AM

could you attach a screen shot

Title: Re: MSI Installation Files and False-Positives
Post by: Zwitterion on December 25, 2011, 04:42:56 PM

Sorry I should have been more specific;it was actually several files within the same msi archive.I wasn't wearing my specs and I thought it was several different msi files  ;)There were four total and I found they are installation files for Acronis True Image recovery software.It is in the C:\Windows\Installer directory.

Title: Re: MSI Installation Files and False-Positives
Post by: bob3160 on December 25, 2011, 08:13:16 PM

Welcome to the forum,  :)
Unfortunately with out specific information, there really isn't very much
any one can check.  :(

Title: Re: MSI Installation Files and False-Positives
Post by: Zwitterion on December 30, 2011, 04:13:42 PM

Quote from: bob3160 on December 25, 2011, 08:13:16 PM

Welcome to the forum,  :)
Unfortunately with out specific information, there really isn't very much
any one can check.  :(

 I have told you the offending program's name/path;what more would you need?

Edit: Now I receive the same for a newly downloaded Firefox 9.0 installation executable;at this point i just think your program is possibly flawed in some manner.

Title: Re: MSI Installation Files and False-Positives
Post by: bob3160 on December 30, 2011, 04:47:32 PM

Quote

There was also an Error42110 "(the file is a decompression bomb)

Simply means that the file when expanded is a very large file.
Doesn't mean it's dangerous.

Title: Re: MSI Installation Files and False-Positives
Post by: YoKenny on December 30, 2011, 05:00:50 PM

Quote from: bob3160 on December 30, 2011, 04:47:32 PM

Quote

There was also an Error42110 "(the file is a decompression bomb)

Simply means that the file when expanded is a very large file.
Doesn't mean it's dangerous.

There are many topics on decompression bomb if you use SEARCH:
http://forum.avast.com/index.php?topic=91034.0
http://forum.avast.com/index.php?topic=83851.0
See this quote from Igor

Quote

- decompression bomb is just something that unpacks to an unusually big amount of data even though it's rather small (i.e. has a high compression ratio, for example). It's nothing to worry about, you are just informed that avast! will not try to unpack the archive (you may not even know that it's an archive, but it seems like it is) because it may take VERY long to process.

http://forum.avast.com/index.php?topic=15389.msg131213#msg131213

Title: Re: MSI Installation Files and False-Positives
Post by: ady4um on December 30, 2011, 05:24:05 PM

Quote from: Zwitterion on December 30, 2011, 04:13:42 PM

I have told you the offending program's name/path;what more would you need?

I don't think you provided such info. Mentioning the name of a program that includes several MB (more than 100, by large) and a path used by all MSI installers, is not going to give any actual useful info.

Quote

Edit: Now I receive the same for a newly downloaded Firefox 9.0 installation executable;at this point i just think your program is possibly flawed in some manner.

Avast is not "our" program. We are simple users trying to help. And as already mentioned, if the only message you receive is that it is some decompression bomb, then you should READ the answers: it is NOT a malware, but just a general info.

If you actually received some other message of a real malware (not just general info), then please make it clearer so to provide you helpful info for you.