GZIP Logic bomb in Avast files

  dave1933 11:40 07 Mar 2013

System XP SP3. A couple of days ago I installed Iolo System Shield and following a scan it reported finding 5 copies of Gzip Logic Bomb in Windows\temp\avast. this seems rather strange. Can anyone suggest a reason for this. Avast (free) has been on the machine for about 2 weeks. Thanks Dave.

  Fruit Bat /\0/\ 12:20 07 Mar 2013

A zip bomb, also known as a Zip of Death or decompression bomb, is a malicious archive file designed to crash or render useless the program or system reading it. It is often employed to disable antivirus software to create an opening for more traditional viruses.

Rather than hijacking the normal operation of the program, a zip bomb allows the program to work as intended, but the archive is carefully crafted so that unpacking it (e.g. by a virus scanner in order to scan for viruses) requires inordinate amounts of time, disk space or memory.

from here

Avast opens files in a temporary directory to scan them that's why you are seeing them in that folder.

So you have had something nasty on your machine trying to get round Avast could have come from a wesite that Avast uesed its realtime scanner to look at any files attempting to be downloaded.

  1. look at the date of these files

  2. use something like CCleaner to regularly clean temporay files off your machine

I have run Avast for years without problems.

  lotvic 13:14 07 Mar 2013

Fruit Bat /\0/\, Is it okay to run both programs? (Avast and iolo System Shield Antivirus) Won't that lead to problems?

  Fruit Bat /\0/\ 13:35 07 Mar 2013

Yes 2 antivirus can often see each others "viurs defitions" and call it up as a problem.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Best Amazon Echo: What’s the best Alexa speaker?

Kano Computer Kit Complete review: A fun DIY 'laptop' that teaches kids to code

Best pro photo editors for Mac 2018

TV & streaming : comment regarder les Jeux olympiques d’hiver 2018 ?