Author Topic: MSI Installation Files and False-Positives  (Read 3637 times)

0 Members and 1 Guest are viewing this topic.

Zwitterion

  • Guest
MSI Installation Files and False-Positives
« on: December 24, 2011, 01:32:34 AM »
 Hi,
During my last boot-scan I received several False-positives for ordinary MSI Installation files for very well-known programs. Also,these were present on previous scans without issue? There was also an Error42110 "(the file is a decompression bomb)".

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37505
  • Not a avast user
Re: MSI Installation Files and False-Positives
« Reply #1 on: December 24, 2011, 01:36:37 AM »
could you attach a screen shot

Zwitterion

  • Guest
Re: MSI Installation Files and False-Positives
« Reply #2 on: December 25, 2011, 04:42:56 PM »
Sorry I should have been more specific;it was actually several files within the same msi archive.I wasn't wearing my specs and I thought it was several different msi files  ;)There were four total and I found they are installation files for Acronis True Image recovery software.It is in the C:\Windows\Installer directory.
« Last Edit: December 25, 2011, 04:47:59 PM by Zwitterion »

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: MSI Installation Files and False-Positives
« Reply #3 on: December 25, 2011, 08:13:16 PM »
Welcome to the forum,  :)
Unfortunately with out specific information, there really isn't very much
any one can check.  :(
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Zwitterion

  • Guest
Re: MSI Installation Files and False-Positives
« Reply #4 on: December 30, 2011, 04:13:42 PM »
Welcome to the forum,  :)
Unfortunately with out specific information, there really isn't very much
any one can check.  :(

 I have told you the offending program's name/path;what more would you need?

Edit: Now I receive the same for a newly downloaded Firefox 9.0 installation executable;at this point i just think your program is possibly flawed in some manner.
« Last Edit: December 30, 2011, 04:47:12 PM by Zwitterion »

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: MSI Installation Files and False-Positives
« Reply #5 on: December 30, 2011, 04:47:32 PM »
Quote
There was also an Error42110 "(the file is a decompression bomb)
Simply means that the file when expanded is a very large file.
Doesn't mean it's dangerous.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

YoKenny

  • Guest
Re: MSI Installation Files and False-Positives
« Reply #6 on: December 30, 2011, 05:00:50 PM »
Quote
There was also an Error42110 "(the file is a decompression bomb)
Simply means that the file when expanded is a very large file.
Doesn't mean it's dangerous.
There are many topics on decompression bomb if you use SEARCH:
http://forum.avast.com/index.php?topic=91034.0
http://forum.avast.com/index.php?topic=83851.0
See this quote from Igor
Quote
- decompression bomb is just something that unpacks to an unusually big amount of data even though it's rather small (i.e. has a high compression ratio, for example). It's nothing to worry about, you are just informed that avast! will not try to unpack the archive (you may not even know that it's an archive, but it seems like it is) because it may take VERY long to process.
http://forum.avast.com/index.php?topic=15389.msg131213#msg131213


ady4um

  • Guest
Re: MSI Installation Files and False-Positives
« Reply #7 on: December 30, 2011, 05:24:05 PM »
I have told you the offending program's name/path;what more would you need?

I don't think you provided such info. Mentioning the name of a program that includes several MB (more than 100, by large) and a path used by all MSI installers, is not going to give any actual useful info.

Quote
Edit: Now I receive the same for a newly downloaded Firefox 9.0 installation executable;at this point i just think your program is possibly flawed in some manner.

Avast is not "our" program. We are simple users trying to help. And as already mentioned, if the only message you receive is that it is some decompression bomb, then you should READ the answers: it is NOT a malware, but just a general info.

If you actually received some other message of a real malware (not just general info), then please make it clearer so to provide you helpful info for you.