GZIP Logic bomb in Avast files

  dave1933 11:40 07 Mar 2013

System XP SP3. A couple of days ago I installed Iolo System Shield and following a scan it reported finding 5 copies of Gzip Logic Bomb in Windows\temp\avast. this seems rather strange. Can anyone suggest a reason for this. Avast (free) has been on the machine for about 2 weeks. Thanks Dave.

  Fruit Bat /\0/\ 12:20 07 Mar 2013

A zip bomb, also known as a Zip of Death or decompression bomb, is a malicious archive file designed to crash or render useless the program or system reading it. It is often employed to disable antivirus software to create an opening for more traditional viruses.

Rather than hijacking the normal operation of the program, a zip bomb allows the program to work as intended, but the archive is carefully crafted so that unpacking it (e.g. by a virus scanner in order to scan for viruses) requires inordinate amounts of time, disk space or memory.

from here

Avast opens files in a temporary directory to scan them that's why you are seeing them in that folder.

So you have had something nasty on your machine trying to get round Avast could have come from a wesite that Avast uesed its realtime scanner to look at any files attempting to be downloaded.

  1. look at the date of these files

  2. use something like CCleaner to regularly clean temporay files off your machine

I have run Avast for years without problems.

  lotvic 13:14 07 Mar 2013

Fruit Bat /\0/\, Is it okay to run both programs? (Avast and iolo System Shield Antivirus) Won't that lead to problems?

  Fruit Bat /\0/\ 13:35 07 Mar 2013

Yes 2 antivirus can often see each others "viurs defitions" and call it up as a problem.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Best Black Friday Deals 2017

Black Friday Deals for Designers & Artists: Adobe, Apple, Corel Painter, Microsoft Surface, Wacom &e…

Best Black Friday Apple Deals 2017

Black Friday 2017 : date, sites participants & bonnes affaires