Author Topic: ******DECOMPRESSION BOMBS******  (Read 5572 times)

0 Members and 1 Guest are viewing this topic.

Offline radicalb21

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 438
  • Be Safe. Be Smart. Use Common Sense.
******DECOMPRESSION BOMBS******
« on: February 09, 2004, 10:30:03 PM »
DOES ANYONE KNOW WHAT A DECOMPRESSION BOMB IS AND WHAT IT DOES? I RECIEVED FIVE FILES IN AN EMAIL TODAY WHERE FILES WERE COMPRESSED WITHIN COMPRESSED FILES THEMSELVES. I HAVE SENT THOSE FILES TO SUPPORT AT AVAST. IF ANY MODERATOR NEEDS MORE INFORMATION PLEASE FEEL FREE TO CONTACT ME VIA EMAIL OR SEND ME A MESSAGE VIA THE FORUM BOARD.
iMac 21.5 " Mid 2011 2.7 GHz Intel Core i5
4 GB 1333 MHz DDR3
AMD Radeon HD 6770M 512 MB

Offline .: Mac :.

  • Avast √úberevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:******DECOMPRESSION BOMBS******
« Reply #1 on: February 10, 2004, 12:32:09 AM »
I dont know what they are but please dont type in all caps it is the same as Yelling
"People who are really serious about software should make their own hardware." - Alan Kay

CoJo

  • Guest
Re:******DECOMPRESSION BOMBS******
« Reply #2 on: February 10, 2004, 12:49:46 AM »
Radicalb21,
I'm sure one of the experts will be along soon to help you with this...
There was an article in PC World (online newsletter) that discussed this, but I really didn't understand the article enough to help you.

cojo

ps Mac?...no offense, but sometimes people are upset and don't realize all caps aren't the correct way...and I also have to type in all caps at times due to my vision problems.
cojo

Offline pk

  • Avast team
  • Super Poster
  • *
  • Posts: 2078
Re:******DECOMPRESSION BOMBS******
« Reply #3 on: February 10, 2004, 02:30:28 AM »
So called decompression bomb is an archive file which is corrupted or modified - and after unpacking it will grow the huge size (100Mb+ or some Gbs). We're able to recognize if the file is unpacked from the invalid archive - but only after unpacking process. The unpacking to the enormous size is very dangerous: the process has very high priority, HDD is not infinite and Windows is unexpected.

I've already done some steps to handle these files and you will feel safe with the next avast build.

DroppinPackets

  • Guest

Offline radicalb21

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 438
  • Be Safe. Be Smart. Use Common Sense.
Re:******DECOMPRESSION BOMBS******
« Reply #5 on: February 10, 2004, 08:07:41 AM »
Thanks for the help guys. I really appreciate it.  Sorry for all caps at the begining of the post i wasn't paying attention. I already emailed the files I recieved today to support@asw.cz .
iMac 21.5 " Mid 2011 2.7 GHz Intel Core i5
4 GB 1333 MHz DDR3
AMD Radeon HD 6770M 512 MB

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11865
    • AVAST Software
Re:******DECOMPRESSION BOMBS******
« Reply #6 on: February 10, 2004, 09:40:04 AM »
For suspicious files, it's better to send them to virus@asw.cz (instead of support@)  :)

Offline radicalb21

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 438
  • Be Safe. Be Smart. Use Common Sense.
Re:******DECOMPRESSION BOMBS******
« Reply #7 on: February 10, 2004, 01:23:44 PM »
Thanks IGOR for the information I'll use that information next time when submitting a file.
iMac 21.5 " Mid 2011 2.7 GHz Intel Core i5
4 GB 1333 MHz DDR3
AMD Radeon HD 6770M 512 MB