Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on October 21, 2014, 08:51:24 PM
-
Hi Guys,
I am currently having problems with the "Avast SecureDNS". It seems that when the SecureDNS is enabled I get a message informing me that the DNS servers are not responding. I have tried manually changing the DNS as well...
The "SecureDNS" has Hijacked my current DNS provider without consent via the upgrade interface...
Update 1: It seems I am one of the few people having problems with HTTPS intercepts via web shield affecting my web spotify access/auth handshake. To bypass the problem you can disable https in the active protection settings under the web shield. This is something that certainly needs tinkering with.
Running Avast 2015 build 2015.10.0.2206
Problematic Module: Web Shield
Browser: FF33
Application: Flash Player
Problematic Element: HTTPS
Affecting: http://play.spotify.com
Temp Solution: Disable HTTPs Scanning on Web Shield.
Error Logs
21/10/2014 21:54:39 AAVM - initialization error: AvResRun failed, ahressecdns.dll.
21/10/2014 21:54:51 AAVM - initialization error: AvResRun failed, ahressecdns.dll.
21/10/2014 21:55:05 AAVM - initialization error: AvResRun failed, ahressecdns.dll.
21/10/2014 21:56:13 AAVM - initialization error: AvResRun failed, ahressecdns.dll.
21/10/2014 21:56:30 AAVM - initialization error: AvResRun failed, ahressecdns.dll
-
Hi, where do you see the message about dns servers not available?
-
Hi Lukor,
In the browser, Attempting to flush the dns via ipconfig /flushdns and releasing and renewing the connection seems invaild.
I'm going to try and reinstall avast again and see if the problem happens then. If it does ill post back up.
-
Ok, After installing Avast i get this message. "SecureDNS can't run on this network."
I'm wondering why.
-
On startup we are trying to establish connection with the best of our secure dns servers all around the world. SecureDNS Shield is briefly measuring the network latencies and choosing the best server / port for your particular connection. We run many servers in our datacenters, so it doesn't really matter if some of them are inaccessible (for whatever reason), but if all are blocked - say your firewall is blocking the traffic on all the ports we use - avast presents you this message - "SecureDNS can't run on this network".
So we have here two questions:
- why this happens on your particular network (can be perfectly ok, just strict network settings)
- why this wasn't reported on the first install and instead of turning off, secureDNS was trying to communicate, which when failed caused your network connections to fail as well.
You can also try to enable secure dns logging and then uploading (or sending to my email directly) the resulting SecureDns.log file.
To enable securedns logging:
- disable self-defence in settings/troubleshooting
- download http://public.avast.com/dev/streamfilter.ini and place it into C:\ProgramData\Avast Software\Avast
- restart all shields or the service process
- when the problem occurs - stop SecureDNS shield and send me the resulting file: C:\ProgramData\Avast Software\Avast\log\SecureDns.log
Thank you,
Lukas.
-
Hi Lukor,
Just wanted to give you a quick update, It seems that Spotify may be blocking DNS queries from the web player. I was using the web player today before installing Avast 2015 without problems. I suspect there's a problem with Avast.
Are you guys by any chance blocking abmr.net?
-
Actually just traced the fault to Avast it's self, Disabling the web shield system seems to have brought back the play.spotify.com url. I suspect Avast has broken. (cant start up components now.) Ill reinstall (3rd time lucky)
-
Ok, I can confirm there is a bug with the active web scanning engine and the Spotify Web Player.
The URL: http://play.spotify.com (http://play.spotify.com)
Problem: If you visit play.spotify.com you get the message "connecting to spotify please wait", if you disable the web shield you can connect without problems.
Have you reinstalled Avast 2015? Yes twice using the AvastClear Utility.
This seems to be a Avast Problem, Would be more than happy to email over any logs needed.
-
I can connect to that site with no problem AIS 2015, IE11
-
I can connect to that site with no problem AIS 2015, IE11
Hi essexboy,
I am using FF33.0 (which uses the flash plugin that isn't ActiveX enabled.) I'm guessing the blockage is between the normal flash plugin, ff33 and avast's web shield.
-
I have no problem with the site ... using Firefox 33
TerraX
-
Ok,
I have been narrowing down the bug even further, Reinstalled Avast again, After tinkering around I think Ive found a bug in the HTTPS web shield mode. If you disable the HTTPS mode when using the web shield the problem fixes it's self. This is a major problem for my setup for some reason...
Glad everyone else isn't having problems with the install...Just wishing I had kept a copy of Avast 2014 handy... :-(
Happy yo send any logs to avast. (pm'd lukor so i can email him them.)
-
I have spoken to Lukor about the problem,
I was given a utility to run/change settings in Avast. Unfortunately the application crashed during it's run-time and cannot be terminated.
I am waiting for Lukor to get back in touch about the matter.
-
I decided to reboot the computer, the utility was able to run and I was able to gather 3 samples of the problem.
All the data has been emailed over to Lukor for closer inspection.
-
Ok,
I have reinstalled the browser (with a new profile), Reinstalled a clean copy of Avast and the problem still persists.
Disabling the HTTPs element of the web shield fixes the problem tempoarily. My guess is that the decryption module is struggling with one of spotify's js files, Not sure as of yet thought.
-
Hi All,
Got a response back from Lukas
Oliver, thank you. Several devs here are already looking into this bug. It is related to https scanner, but only indirectly – when https scanner is disabled, no processing is done on that particular connection and therefore no problems are visible. Currently it seems the problem is inside the http parser itself. We are able to reproduce it, so we are going to fix it soon.
Thanks again for reporting this, I’ll let you know about any progress.
So it seems Avast is on the case for fixing this bug.
-
How do you disable SecureDNS in FREE ?
I installed V10 on one PC and it and other PCs not longer could see internet thru my router.
I only installed CUSTOM shields only but I saw SecureDNS with "?" without ability to not install.
I assume somewhere in settings this can be disabled ?....I'd like to see if that solves issue.
-
How do you disable SecureDNS in FREE ?I installed V10 on one PC and it and other PCs not longer could see internet thru my router.I only installed CUSTOM shields only but I saw SecureDNS with "?" without ability to not install.I assume somewhere in settings this can be disabled ?....I'd like to see if that solves issue.
Secure DNS is not available in the free version.
-
How do you disable SecureDNS in FREE ?
I installed V10 on one PC and it and other PCs not longer could see internet thru my router.
I only installed CUSTOM shields only but I saw SecureDNS with "?" without ability to not install.
I assume somewhere in settings this can be disabled ?....I'd like to see if that solves issue.
SecureDNS is not offered for free version as far as I know. Only Premium version have it. That is why there is no box for it in installer.
-
Ok if you do have the paid for version of Avast you can uninstall SecureDNS by going to the uninstaller and selecting it under the active protection tab.
Hope this helps.
-
How do you disable SecureDNS in FREE ?
I installed V10 on one PC and it and other PCs not longer could see internet thru my router.
I only installed CUSTOM shields only but I saw SecureDNS with "?" without ability to not install.
I assume somewhere in settings this can be disabled ?....I'd like to see if that solves issue.
SecureDNS is not offered for free version as far as I know. Only Premium version have it. That is why there is no box for it in installer.
OK.....thx..........then I have no idea why when I installed V10 FREE on only one of my PCs that all of the other PCs in the house could no longer get onto the internet thru my Dlink router. Once I uninstalled V10 from that PC all the other PCs (they have combo of V8 & V9 on them) could then get out to the internet.
-
OK.....thx..........then I have no idea why when I installed V10 FREE on only one of my PCs that all of the other PCs in the house could no longer get onto the internet thru my Dlink router. Once I uninstalled V10 from that PC all the other PCs (they have combo of V8 & V9 on them) could then get out to the internet.
Wow, this is really scary and I must say unbelivable. Do you have to have the V10-PC running in order for the others to be blocked from the net?
-
OK.....thx..........then I have no idea why when I installed V10 FREE on only one of my PCs that all of the other PCs in the house could no longer get onto the internet thru my Dlink router. Once I uninstalled V10 from that PC all the other PCs (they have combo of V8 & V9 on them) could then get out to the internet.
Wow, this is really scary and I must say unbelivable. Do you have to have the V10-PC running in order for the others to be blocked from the net?
I did not try too much experimentation.........the machine is HP DM4 2Ghz so very fast....and I use Avast & MBAM Pro.....very clean.
I have DLink DIR655 Router.....four other PCs and even have Guest in house with MAC Pro notebook.
So, I did a CLEAN uninstall on V8.....installed V10 FREE (Custom, Shields Only)........came up OK at login and seemed a LITTLE slow.....not a lot. I could immediately login to the internet and even tried my router....was OK. Then after about few minutes the PC started to slow to almost unresponsive. I tried to do CTRL-ALT-DEL for tasks manager to see what was taking the resources and it delayed so long that Windows said some message about this could not be launched, etc.....trying to get even Windows Explorer to come up was 15+ minutes. I clicked on Avast 10 and console took 10 minutes to come up. During all that time my guest on the MAC said she could not get on internet and I also tried other PCs.....all of which would not work. The router activity LEDs were banging away with something going on. So, I was not able to really do a reboot thru Windows so HARD reset and into safe mode where I uninstalled V10. I then did a clean uninstall and now unless I can find the V9 offline installer will have to go back to V8 since I still have it. Once the machine came back from reboot after uninstall all other PCs & MAC could now see internet.
-
OK.....thx..........then I have no idea why when I installed V10 FREE on only one of my PCs that all of the other PCs in the house could no longer get onto the internet thru my Dlink router. Once I uninstalled V10 from that PC all the other PCs (they have combo of V8 & V9 on them) could then get out to the internet.
Wow, this is really scary and I must say unbelivable. Do you have to have the V10-PC running in order for the others to be blocked from the net?
I did not try too much experimentation.........the machine is HP DM4 2Ghz so very fast....and I use Avast & MBAM Pro.....very clean.
I have DLink DIR655 Router.....four other PCs and even have Guest in house with MAC Pro notebook.
So, I did a CLEAN uninstall on V8.....installed V10 FREE (Custom, Shields Only)........came up OK at login and seemed a LITTLE slow.....not a lot. I could immediately login to the internet and even tried my router....was OK. Then after about few minutes the PC started to slow to almost unresponsive. I tried to do CTRL-ALT-DEL for tasks manager to see what was taking the resources and it delayed so long that Windows said some message about this could not be launched, etc.....trying to get even Windows Explorer to come up was 15+ minutes. I clicked on Avast 10 and console took 10 minutes to come up. During all that time my guest on the MAC said she could not get on internet and I also tried other PCs.....all of which would not work. The router activity LEDs were banging away with something going on. So, I was not able to really do a reboot thru Windows so HARD reset and into safe mode where I uninstalled V10. I then did a clean uninstall and now unless I can find the V9 offline installer will have to go back to V8 since I still have it. Once the machine came back from reboot after uninstall all other PCs & MAC could now see internet.
In the future I would recommend attempting to ping your router to see if you can get a response.
press the windows key + R, type CMD.exe, Then type ipconfig /all, You should see your default gateway ip address, note this down for future use. Then type Ping followed by your gateway's ip address.
You should see that theres packets commuicating between the router, if not then something certainly has gone wrong. You can also ping the gateway from the mac using the network utility application (use the spotlight search to locate the program.) click ping and then input the default gateway, It will ping the same as your windows ping would.
-
I would have pinged but could not even get command prompt to come up.....the system was SO slow.
As FYI, I do know my router & gateway IP address.
Seems a lot of other posts on V10 about WebShield & HTTPS scanning.
Could my issue have been that Avast 10 was out there scanning on this single PC so much links that it killed bandwidth at the router which blocked other PCs getting online ? Also maybe this also killed my memory & CPU on the PC ? I'm just reading various posts and connecting the dots....but perhaps not accurate.
Other datapoint is that I have SugarSync installed on this PC which at reboot checks to make sure all my files are synced with web. I was able to EXIT out of this hoping that its closing would have helped the performance and/or web issue but it did not.
-
I would have pinged but could not even get command prompt to come up.....the system was SO slow.
As FYI, I do know my router & gateway IP address.
Seems a lot of other posts on V10 about WebShield & HTTPS scanning.
Could my issue have been that Avast 10 was out there scanning on this single PC so much links that it killed bandwidth at the router which blocked other PCs getting online ? Also maybe this also killed my memory & CPU on the PC ? I'm just reading various posts and connecting the dots....but perhaps not accurate.
Other datapoint is that I have SugarSync installed on this PC which at reboot checks to make sure all my files are synced with web. I was able to EXIT out of this hoping that its closing would have helped the performance and/or web issue but it did not.
WebShield (with or without HTTPS Scanning) does not generate any traffic on its own, so it has not the capability to kill your bandwidth. Currently I have hard times imagine how this (and also anything else in current avast) could ever affect your (or anyone else's) other computers. If in doubt there is nothing easier that plug the computer of the ethernet socket for a while and see if the problem goes away.
-
I have been experiencing intermittent issues which I believe are related to secure dns.
Windows 8 machine. Name resolution would randomly stop working.
The following were symptoms:
- Upon running command "ipconfig /release && ipconfig /renew" problem went away for about 30 seconds. After that renewing an IP address made no difference (i.e. problem persisted).
- nslookup would not attach to listed dns server. I was using google server 8.8.8.8 for testing purposes. I could ping the address, however simultaneously could not perform nslookups.
- I have a router between my client and my firewall. I ran a packet sniff on the port for all traffic destined to 8.8.8.8. I could see my pings going through, however did not see my nslookup requests.
- I turned off secure dns under active protection in avast, still did not fix my problem.
- I turned off the avast firewall service under services.msc (I'm not sure, but I still don't think this fixed it)
- utilizing "netstat -on" I found numberous connections associated with a PID I later looked up via windows taskmanager. This PID was associated with an avast service. Upon ending this task I believe I was finally able to gain name resolution.
Thus, I believe my name resolution problems were directly related to avast, and likely related to securedns.
-
Just an update.
After restarting avast firewall service "services.msc" I still had an error message in AVAST. Something about Avast Background Services failed to start... I am surmising this is why simply turning off "Secure DNS" did not immediately solve my problem.
Anyway, I have since stoped the "Secure DNS" feature in Active Protection.
I am hoping that a reboot of the computer with "Secure DNS" turned off will solve my problem long term. It's hard to know however since the problem is intermittent... Has happened two other times in the past few days.
-
Yet another update....
It happened again. I have still not rebooted the machine, so still a good test machine...
This time I went directly to services and stopped all 3 avast services. (Antivirus, Firewall, Vbox). Upon restarting all 3 services problem immediately went away. (In fact the web page I was trying to access came up instantly without having to re-request).
I may have still been correct on my initial assumption that a reboot (or service restart) is still required for the disabling of "Secure DNS" to take effect.
If it happens again I will try to determine which of the 3 service restarts fixed the issue.
-
This Avast Secure DNS setting is not a good thing to have if you have any type of parental controls on your network..
example, I use OpenDNS, and if "secure DNS" is enabled, it bypasses all filtration from OpenDNS and my network is free as a bird and anyone with this "secured DNS" feature enabled on their computers can go to any website they wish..
How can a piece of software like a Avast circumvent the DNS settings I have a t the router level? - I have even enabled "Intercept port 53" on my router which prevents users from using their own dns server..yet, Avast can bypass it like it was nothing.
Not very good Avast... not very good at all.
-
Hello,
I have the same problem. After restarting the PC following an update, I was cut out of the internet (Ethernet connexion). Troubleshooting (Window 7 32 bit) said "the DNS server cannot be reached". Funny, another PC (Wifi connexion) connected to the same router showed no problem. After turning off Web shield protection, the problem was gone.
Well, what could I have done wrong, I asked to myself? Oh yes, Avast update AND Windows update, but only one reboot. How stupid of me. OK, uninstalled completely Avast, run Crap Cleaner and Glary Utilities, got rid of broken registry entries, clean install of Avast.... and the problem is there again! I am not with Web Shield protection turned off: if I turn it on I lose the DNS.
-
Hi guys. I just had new installs of Avast Free 2015 kill two customer's internet connectivity. The one from last night was a real emergency situation and the only thing I could come up with was to eliminate the IE icons and just use Chrome (which worked where IE quit). (Brand new Asus laptop Win8.1)
The second situation (today) I uninstalled using Revo... but the Win7 connectivity tray icon still said "No Internet Connection". I could ping locally 127.0.0.1 and 192.168.1.1 (router) but nothing outside AFTER the uninstall. (Win7HmPrem Gateway dsktp abt 1 year old).
So? Forced to use my smart phone to beg for help through Google - and found a barely understandable Pakistani guy's YouTube video where he simply loaded OpenDNS's DNS settings - immediately fixed the problem. For some stupid reason Avast (even after complete uninstall) has overridden the native DNS settings... and NOTHING you do will fix that - short of using Google's 8.8.8.8 and 8.8.4.4 or OpenDNS's 222 and 220, etc., etc.
So Avast? WTF. Fix this total train wreck mess or loose whatever's left of your customer base. I, for one, do NOT have time to dick around with small crap like this when I'm at a customers HOUSE cleaning viruses for a small living - for crying out loud.
Sure - I'll give this thing a second chance - but only after I read here (and elsewhere) that this problem has been overcome. Good lord what a hassle.
Bill Trail
PC Doctor
Macon, Georgia July 3, 2015
PS: SO MUCH FOR YOUR BIG WOOP CONSUMER GUIDE MAGAZINE 1ST PLACE. Kiss THAT magazine goodbye too.
-
How did you remove the pr-installed trial of the third party AV that comes on an Asus computer ???
Not removing it properly before installing Avast or any other resident AV can result in all sorts of problems.
See my signature for help in successfully installing Avast.
-
The latest update is horrible if you have a LAN and need to access computers locally. Avast has added a plug-in to verify DNS requests and changes the IPs without any warning. So you end up with an external IP instead of the internal IP which causes programs to fail of course, your only option is to use the IP and not the name. There is no way to disable this behavior, at least not in the free version, without disabling Avast totally. I used wireshark to find out that some Avast DNS server was accessed and modified the IP.
This new feature might be useful to detect/prevent "Man-in-the-middle" attacks or such, but it should at least be in the settings with some options to disable it or add exceptions.
Until this is fixed I have to disable Avast or rollback to a previous version.
-
Since my post in May I have uninstalled Avast, upgraded to Win10, tried Panda, removed it because it would not let me finishing install another software, cleaned registries, removed remnant files with Glary Utilities, Crap Cleaner and Revo Uninstaller, removed Windows.old.... Today I have reinstalled Avast, hopin no memory effect, but the Web Shield problem is still there! The only way to get a connection to the internet is to turn off the web shield.
I even tried to add the Web Shield to the list of authorized programs in Windows Firewall, thinking that might be the culprit, but I do not find any executable corresponding to the Web shield, just a dll.
I'm now staying with Web shield turned off, but it's quite surprising that such an issue affecting so many users (do a web search and you'll see how many!) has not been addressed yet.