Author Topic: Scan't scan a file  (Read 2576 times)

0 Members and 1 Guest are viewing this topic.

Miles

  • Guest
Scan't scan a file
« on: June 10, 2009, 11:05:50 PM »
Using 4.8 during a scan, receive a window that a file can't be scanned (it's a kept email msg in a folder in Thunderbird) which reads:

path -- "partno_0#1551300465/partno_0#3771491968/partno_0#3519077097/f/learning to 8751946/learning to like mouthfulls of salt-ndsp: Was a mistake made? What 661048528.   

Unable to scan - the file is a decompression bomb."

Presumably the part numbers relate to something added by Thunderbird as an ID for each msg?  And if so, the user certainly can't relate to it.  I searched the subject file for "salt" and apparently that's a word used whenever a photo is attached?  Also searched for "was a mistake made" and found nothing.

In the window that opens attempted without success, delete, delete on reboot, move, chest, and scan.  Any ideas as to what this means and the danger of keeping such a msg? 

Miles

  • Guest
Re: Scan't scan a file
« Reply #1 on: June 10, 2009, 11:37:48 PM »
Guess I should have simply quoted the entire text from the log:

* avast! Report
* This file is generated automatically
* Task 'Simple user interface' used
* Started on Wednesday, June 10, 2009 10:47:57
* VPS: 090609-0, 06/09/2009
*
D:\Program Files\Thunderbird Profile\kwkhdnru.Thunderbird Profile\Mail\pop.pacbell.yahoo.com\KEPT MAIL.sbd\Personal.sbd\SLS\PartNo_0#1551300465\PartNo_0#3771491960\PartNo_0#3519077097\PartNo_0#708751946\learning to like mouthfuls of salt?  Was a mistake made?  What #661048528 [E] The file is a decompression bomb. (42110)
Infected files: 0
Total files: 484
Total folders: 30
Total size: 1.6 GB
* Task stopped: Wednesday, June 10, 2009 10:53:29
* Run-time was 5 minute(s), 32 second(s)

spg SCOTT

  • Guest
Re: Scan't scan a file
« Reply #2 on: June 10, 2009, 11:56:52 PM »
Decompression bombs are not much of a problem:

Decompression Bomb, a file that is highly compressed, which could be very large when decompressed. This used to be a tactic long ago to swamp the system, also see http://forum.avast.com/index.php?topic=15389.msg131213#msg131213.
 
The name really is the most dangerous thing about this and I wish they would change it or simply not report it, a real PITA.

Files that can't be scanned are just that, not an indication they are suspicious/infected, just unable to be scanned.

I think there is nothing to worry about there.

Hope this helps,

-Scott-

Miles

  • Guest
Re: Scan't scan a file
« Reply #3 on: June 11, 2009, 01:13:40 AM »
Thanks and it's as I thought as it's been dormant for years.  The trouble is that frequently when I plug the thumb drive into a foreign computer it's program indicates a virus which is annoying -- And I believe it's caused by this msg, so would like to find a way to identify the msg and delete it.  FYI Thunderbird doesn't keep each email in a separate file, so could only search for the verbiage displayed in the report, and that didn't do it.