Author Topic: MSI Installation Files and False-Positives  (Read 2993 times)

0 Members and 1 Guest are viewing this topic.

Offline Zwitterion

  • Newbie
  • *
  • Posts: 3
MSI Installation Files and False-Positives
« on: December 24, 2011, 01:32:34 AM »
 Hi,
During my last boot-scan I received several False-positives for ordinary MSI Installation files for very well-known programs. Also,these were present on previous scans without issue? There was also an Error42110 "(the file is a decompression bomb)".

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37014
Re: MSI Installation Files and False-Positives
« Reply #1 on: December 24, 2011, 01:36:37 AM »
could you attach a screen shot

Offline Zwitterion

  • Newbie
  • *
  • Posts: 3
Re: MSI Installation Files and False-Positives
« Reply #2 on: December 25, 2011, 04:42:56 PM »
Sorry I should have been more specific;it was actually several files within the same msi archive.I wasn't wearing my specs and I thought it was several different msi files  ;)There were four total and I found they are installation files for Acronis True Image recovery software.It is in the C:\Windows\Installer directory.
« Last Edit: December 25, 2011, 04:47:59 PM by Zwitterion »

Offline bob3160

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 45284
  • 61 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: MSI Installation Files and False-Positives
« Reply #3 on: December 25, 2011, 08:13:16 PM »
Welcome to the forum,  :)
Unfortunately with out specific information, there really isn't very much
any one can check.  :(
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v20H2 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Zwitterion

  • Newbie
  • *
  • Posts: 3
Re: MSI Installation Files and False-Positives
« Reply #4 on: December 30, 2011, 04:13:42 PM »
Welcome to the forum,  :)
Unfortunately with out specific information, there really isn't very much
any one can check.  :(

 I have told you the offending program's name/path;what more would you need?

Edit: Now I receive the same for a newly downloaded Firefox 9.0 installation executable;at this point i just think your program is possibly flawed in some manner.
« Last Edit: December 30, 2011, 04:47:12 PM by Zwitterion »

Offline bob3160

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 45284
  • 61 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: MSI Installation Files and False-Positives
« Reply #5 on: December 30, 2011, 04:47:32 PM »
Quote
There was also an Error42110 "(the file is a decompression bomb)
Simply means that the file when expanded is a very large file.
Doesn't mean it's dangerous.
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v20H2 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline YoKenny

  • Serious Graphoman
  • **
  • Posts: 8784
Re: MSI Installation Files and False-Positives
« Reply #6 on: December 30, 2011, 05:00:50 PM »
Quote
There was also an Error42110 "(the file is a decompression bomb)
Simply means that the file when expanded is a very large file.
Doesn't mean it's dangerous.
There are many topics on decompression bomb if you use SEARCH:
http://forum.avast.com/index.php?topic=91034.0
http://forum.avast.com/index.php?topic=83851.0
See this quote from Igor
Quote
- decompression bomb is just something that unpacks to an unusually big amount of data even though it's rather small (i.e. has a high compression ratio, for example). It's nothing to worry about, you are just informed that avast! will not try to unpack the archive (you may not even know that it's an archive, but it seems like it is) because it may take VERY long to process.
http://forum.avast.com/index.php?topic=15389.msg131213#msg131213

E5200 2.5GHZ, 4GB RAM, 320GB HD, Windows 7 Home Premium 64bit, avast! V9.0 Free, IE10
P4 2.8GHZ, 1.5GB RAM, 40GB HD, XP Pro SP3 32bit, avast! V9.0 Free, Google Chrome
with hpHosts, MVPS HOSTS files, SpeedFan, WinPatrol PLUS

Offline ady4um

  • Massive Poster
  • ****
  • Posts: 2667
Re: MSI Installation Files and False-Positives
« Reply #7 on: December 30, 2011, 05:24:05 PM »
I have told you the offending program's name/path;what more would you need?

I don't think you provided such info. Mentioning the name of a program that includes several MB (more than 100, by large) and a path used by all MSI installers, is not going to give any actual useful info.

Quote
Edit: Now I receive the same for a newly downloaded Firefox 9.0 installation executable;at this point i just think your program is possibly flawed in some manner.

Avast is not "our" program. We are simple users trying to help. And as already mentioned, if the only message you receive is that it is some decompression bomb, then you should READ the answers: it is NOT a malware, but just a general info.

If you actually received some other message of a real malware (not just general info), then please make it clearer so to provide you helpful info for you.
ADD/REMOVE PROGS -> avast -> CHANGE/REMOVE -> REPAIR & REBOOT
Avast! 7 FAQ | FAQ & KB | Docs | Removal Utils | Configure Mail Shield | report FP | License Registration | UNSECURED?