Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Raj_goswami on September 26, 2017, 07:55:51 PM

Title: WIFI Inspector Alert
Post by: Raj_goswami on September 26, 2017, 07:55:51 PM
Seeing the below error while Wifi Inspector runs. Any ideas how to fix it.
I have set the DNS to Google DNS in the WIfi Adapter and in the router too. Still seeing those alerts.

This device has been compromised and your network connections are being routed through a malicious remote DNS server.
This device's settings have been changed by an attacker.
Traffic to important sites (like banks) can be redirected to fake copies created by attackers.
Attackers can intercept and view all communications on your network.
Hijacked domain myspace.com
Hijacked domain vk.com
Title: Re: WIFI Inspector Alert
Post by: Pondus on September 26, 2017, 08:18:24 PM
If you click on "Details" what does it say?

Check router here  >>  https://www.f-secure.com/en/web/labs_global/router-checker
what does it say

Title: Re: WIFI Inspector Alert
Post by: Raj_goswami on September 26, 2017, 08:37:37 PM
DDNS is disabled as per the troubleshooting of router. DNS set to and
F-Sucure Router Checker is good. Unsure what is the exact issue.
Title: Re: WIFI Inspector Alert
Post by: Raj_goswami on September 26, 2017, 08:39:43 PM
However, my router account gets locked out and I have to forcibly reset my router to log in.
Any ideas!!!!

Title: Re: WIFI Inspector Alert
Post by: Raj_goswami on September 26, 2017, 08:42:41 PM
However, interestingly the alert is showing for the desktop not for the router by avast.
I have set the DNS in the WIfi NIC to and

Now, im really connfused whether there is an issue with the router or the laptop
Title: Re: WIFI Inspector Alert
Post by: Pondus on September 26, 2017, 08:43:16 PM
Try factory reset your router, if avast still report the same issue i recomend follow instructions here  >> https://forum.avast.com/index.php?topic=194892.0

Attch requested diagnostic logs and a malware expert will have a look

Title: Re: WIFI Inspector Alert
Post by: Raj_goswami on September 26, 2017, 08:48:12 PM
Let me do that first thing in the morning. Will revert back as soon as i can.
Title: Re: WIFI Inspector Alert
Post by: Raj_goswami on September 26, 2017, 09:21:17 PM
Below is my hosts file which malwarebyte continue to detect as malware.
Everything else is good. I'm going to do a router reset and see what happens.

# Copyright (c) 1993-2009 Microsoft Corp.
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
# For example:
#     rhino.acme.com          # source server
#     x.acme.com              # x client host

# localhost name resolution is handled within DNS itself.
#       localhost
#   ::1             localhost a.ads1.msn.com a.ads2.msads.net a.ads2.msn.com a.rad.msn.com a-0001.a-msedge.net a-0002.a-msedge.net a-0003.a-msedge.net a-0004.a-msedge.net a-0005.a-msedge.net a-0006.a-msedge.net a-0007.a-msedge.net a-0008.a-msedge.net a-0009.a-msedge.net ac3.msn.com ad.doubleclick.net adnexus.net adnxs.com ads.msn.com ads1.msads.net ads1.msn.com aidps.atdmt.com aka-cdn-ns.adtech.de a-msedge.net apps.skype.com az361816.vo.msecnd.net az512334.vo.msecnd.net b.ads1.msn.com b.ads2.msads.net b.rad.msn.com bs.serving-sys.com c.atdmt.com c.msn.com ca.telemetry.microsoft.com cache.datamart.windows.com cdn.atdmt.com cds26.ams9.msecn.net choice.microsoft.com choice.microsoft.com.nsatc.net compatexchange.cloudapp.net corp.sts.microsoft.com corpext.msitadfs.glbdns2.microsoft.com cs1.wpc.v0cdn.net db3aqu.atdmt.com db3wns2011111.wns.windows.com df.telemetry.microsoft.com diagnostics.support.microsoft.com ec.atdmt.com fe2.update.microsoft.com.akadns.net fe3.delivery.dsp.mp.microsoft.com.nsatc.net feedback.microsoft-hohm.com feedback.search.microsoft.com feedback.windows.com flex.msn.com g.msn.com h1.msn.com i1.services.social.microsoft.com i1.services.social.microsoft.com.nsatc.net lb1.www.ms.akadns.net live.rads.msn.com m.adnxs.com m.hotmail.com msedge.net msftncsi.com msnbot-207-46-194-33.search.msn.com msnbot-65-55-108-23.search.msn.com msntest.serving-sys.com oca.telemetry.microsoft.com oca.telemetry.microsoft.com.nsatc.net pre.footprintpredict.com preview.msn.com pricelist.skype.com rad.live.com rad.msn.com redir.metaservices.microsoft.com reports.wes.df.telemetry.microsoft.com s.gateway.messenger.live.com s0.2mdn.net schemas.microsoft.akadns.net secure.adnxs.com secure.flashtalking.com services.wes.df.telemetry.microsoft.com settings.data.microsof.com settings-sandbox.data.microsoft.com settings-win.data.microsoft.com sls.update.microsoft.com.akadns.net sO.2mdn.net spynet2.microsoft.com spynetalt.microsoft.com sqm.df.telemetry.microsoft.com sqm.telemetry.microsoft.com sqm.telemetry.microsoft.com.nsatc.net ssw.live.com static.2mdn.net statsfe1.ws.microsoft.com statsfe2.update.microsoft.com.akadns.net statsfe2.ws.microsoft.com survey.watson.microsoft.com telecommand.telemetry.microsoft.com telecommand.telemetry.microsoft.com.nsatc.net telecommand.telemetry.microsoft.com.nsat-c.net telemetry.appex.bing.net telemetry.appex.bing.net:443 telemetry.microsoft.com telemetry.urs.microsoft.com ui.skype.com v10.vortex-win.data.microsoft.com view.atdmt.com vortex.data.microsoft.com vortex-bn2.metron.live.com.nsatc.net vortex-cy2.metron.live.com.nsatc.net vortex-sandbox.data.microsoft.com vortex-win.data.microsoft.com watson.live.com watson.microsoft.com watson.ppe.telemetry.microsoft.com watson.telemetry.microsoft.com watson.telemetry.microsoft.com.nsatc.net wes.df.telemetry.microsoft.com win10.ipv6.microsoft.com www.msftncsi.com keystone.mwbsys.com license.piriform.com www.mefeedia.com www.mefeedia.com delivery.anchorfree.us/land.php http://www.hsselite.com http://www.hsselite.com/trial/step2.php techbrowsing.com/away.php techbrowsing.com/away.php http://www.driver-soft.com www.driver-soft.com telecommand.telemetry.microsoft.com.nsat-c.net telecommand.telemetry.microsoft.com.nsat-c.net telecommand.telemetry.microsoft.com.nsat-c.net www.mefeedia.com www.mefeedia.com delivery.anchorfree.us telemetry.malwarebytes.com keystone.mwbsys.com