Author Topic: Avast SecureDNS & HTTPS Web Shield Problems... (Avast 2015)  (Read 22052 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast SecureDNS & HTTPS Web Shield Problems... (Avast 2015)
« on: October 21, 2014, 08:51:24 PM »
Hi Guys,




I am currently having problems with the "Avast SecureDNS". It seems that when the SecureDNS is enabled I get a message informing me that the DNS servers are not responding. I have tried manually changing the DNS as well...

The "SecureDNS" has Hijacked my current DNS provider without consent via the upgrade interface...


Update 1: It seems I am one of the few people having problems with HTTPS intercepts via web shield affecting my web spotify access/auth handshake. To bypass the problem you can disable https in the active protection settings under the web shield. This is something that certainly needs tinkering with.


Running Avast 2015 build 2015.10.0.2206

Problematic Module: Web Shield
Browser: FF33
Application: Flash Player
Problematic Element: HTTPS
Affecting: http://play.spotify.com

Temp Solution: Disable HTTPs Scanning on Web Shield.

Error Logs
21/10/2014   21:54:39   AAVM - initialization error: AvResRun failed, ahressecdns.dll.
21/10/2014   21:54:51   AAVM - initialization error: AvResRun failed, ahressecdns.dll.
21/10/2014   21:55:05   AAVM - initialization error: AvResRun failed, ahressecdns.dll.
21/10/2014   21:56:13   AAVM - initialization error: AvResRun failed, ahressecdns.dll.
21/10/2014   21:56:30   AAVM - initialization error: AvResRun failed, ahressecdns.dll

 
« Last Edit: October 21, 2014, 11:49:17 PM by OliPicard »

Offline lukor

  • Administrator
  • Super Poster
  • ***
  • Posts: 1884
    • AVAST Software
Re: Avast SecureDNS renders Internet Connection Useless. (Avast 2015)
« Reply #1 on: October 21, 2014, 09:10:00 PM »
Hi, where do you see the message about dns servers not available?

REDACTED

  • Guest
Re: Avast SecureDNS renders Internet Connection Useless. (Avast 2015)
« Reply #2 on: October 21, 2014, 09:11:23 PM »
Hi Lukor,

In the browser, Attempting to flush the dns via ipconfig /flushdns and releasing and renewing the connection seems invaild.

I'm going to try and reinstall avast again and see if the problem happens then. If it does ill post back up.

REDACTED

  • Guest
Re: Avast SecureDNS renders Internet Connection Useless. (Avast 2015)
« Reply #3 on: October 21, 2014, 09:22:22 PM »
Ok, After installing Avast i get this message. "SecureDNS can't run on this network."

I'm wondering why.

Offline lukor

  • Administrator
  • Super Poster
  • ***
  • Posts: 1884
    • AVAST Software
Re: Avast SecureDNS renders Internet Connection Useless. (Avast 2015)
« Reply #4 on: October 21, 2014, 10:05:18 PM »
On startup we are trying to establish connection with the best of our secure dns servers all around the world. SecureDNS Shield is briefly measuring the network latencies and choosing the best server / port for your particular connection. We run many servers in our datacenters, so it doesn't really matter if some of them are inaccessible (for whatever reason), but if all are blocked - say your firewall is blocking the traffic on all the ports we use - avast presents you this message - "SecureDNS can't run on this network".

So we have here two questions:
 - why this happens on your particular network (can be perfectly ok, just strict network settings)
 - why this wasn't reported on the first install and instead of turning off, secureDNS was trying to communicate, which when failed caused your network connections to fail as well.

You can also try to enable secure dns logging and then uploading (or sending to my email directly) the resulting SecureDns.log file.

To enable securedns logging:
 - disable self-defence in settings/troubleshooting
 - download http://public.avast.com/dev/streamfilter.ini and place it into C:\ProgramData\Avast Software\Avast
 - restart all shields or the service process
 - when the problem occurs - stop SecureDNS shield and send me the resulting file: C:\ProgramData\Avast Software\Avast\log\SecureDns.log

Thank you,
Lukas.

REDACTED

  • Guest
Re: Avast SecureDNS renders Internet Connection Useless. (Avast 2015)
« Reply #5 on: October 21, 2014, 10:50:14 PM »
Hi Lukor,

Just wanted to give you a quick update, It seems that Spotify may be blocking DNS queries from the web player. I was using the web player today before installing Avast 2015 without problems. I suspect there's a problem with Avast.


Are you guys by any chance blocking abmr.net?

« Last Edit: October 21, 2014, 10:53:23 PM by OliPicard »

REDACTED

  • Guest
Re: Avast SecureDNS renders Internet Connection Useless. (Avast 2015)
« Reply #6 on: October 21, 2014, 10:55:54 PM »
Actually just traced the fault to Avast it's self, Disabling the web shield system seems to have brought back the play.spotify.com url. I suspect Avast has broken. (cant start up components now.) Ill reinstall (3rd time lucky)

REDACTED

  • Guest
Re: Avast SecureDNS renders Internet Connection Useless. (Avast 2015)
« Reply #7 on: October 21, 2014, 11:19:26 PM »
Ok, I can confirm there is a bug with the active web scanning engine and the Spotify Web Player.

The URL: http://play.spotify.com

Problem: If you visit play.spotify.com you get the message "connecting to spotify please wait", if you disable the web shield you can connect without problems.

Have you reinstalled Avast 2015? Yes twice using the AvastClear Utility.

This seems to be a Avast Problem, Would be more than happy to email over any logs needed.

Offline essexboy

  • Malware removal instructor
  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Avast SecureDNS renders Internet Connection Useless. (Avast 2015)
« Reply #8 on: October 21, 2014, 11:21:43 PM »
I can connect to that site with no problem AIS 2015, IE11

REDACTED

  • Guest
Re: Avast SecureDNS renders Internet Connection Useless. (Avast 2015)
« Reply #9 on: October 21, 2014, 11:24:20 PM »
I can connect to that site with no problem AIS 2015, IE11

Hi essexboy,

I am using FF33.0 (which uses the flash plugin that isn't ActiveX enabled.) I'm guessing the blockage is between the normal flash plugin, ff33 and avast's web shield.




Offline TerraX

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6563
Re: Avast SecureDNS renders Internet Connection Useless. (Avast 2015)
« Reply #10 on: October 21, 2014, 11:27:03 PM »
I have no problem with the site ... using Firefox 33

TerraX
Win10 64bit / Avast Premium Security / MBAM Free / Firefox ESR [NS/uBO] / Thunderbird / AOS/ASB

REDACTED

  • Guest
Re: Avast SecureDNS renders Internet Connection Useless. (Avast 2015)
« Reply #11 on: October 21, 2014, 11:36:00 PM »
Ok,

I have been narrowing down the bug even further, Reinstalled Avast again, After tinkering around I think Ive found a bug in the HTTPS web shield mode. If you disable the HTTPS mode when using the web shield the problem fixes it's self. This is a major problem for my setup for some reason...

Glad everyone else isn't having problems with the install...Just wishing I had kept a copy of Avast 2014 handy... :-(


Happy yo send any logs to avast. (pm'd lukor so i can email him them.)
« Last Edit: October 22, 2014, 12:02:13 AM by OliPicard »

REDACTED

  • Guest
Re: Avast SecureDNS & HTTPS Web Shield Problems... (Avast 2015)
« Reply #12 on: October 22, 2014, 04:54:52 PM »
I have spoken to Lukor about the problem,

I was given a utility to run/change settings in Avast. Unfortunately the application crashed during it's run-time and cannot be terminated.

I am waiting for Lukor to get back in touch about the matter.

REDACTED

  • Guest
Re: Avast SecureDNS & HTTPS Web Shield Problems... (Avast 2015)
« Reply #13 on: October 22, 2014, 05:20:00 PM »
I decided to reboot the computer, the utility was able to run and I was able to gather 3 samples of the problem.

All the data has been emailed over to Lukor for closer inspection.

REDACTED

  • Guest
Re: Avast SecureDNS & HTTPS Web Shield Problems... (Avast 2015)
« Reply #14 on: October 22, 2014, 05:44:35 PM »
Ok,

I have reinstalled the browser (with a new profile), Reinstalled a clean copy of Avast and the problem still persists.

Disabling the HTTPs element of the web shield fixes the problem tempoarily. My guess is that the decryption module is struggling with one of spotify's js files, Not sure as of yet thought.