Avast 11.1.2241-11.2.2261 random bug preventing DNS resolve

[Dwarden]

Avast has very annoying bug which causes DNS resolve to cease work,
the only error indicating such in Event log is unable to resolve "ocsp.entrust.net"

stopping avast services and restarting them resolves this issues

it's extremely annoying as this happens random and causes various software freezes as they hang on the DNS resolving timeout ...

OS: Windows 7 SP2 x64

[Be Secure]

Hello Dwarden.Pls try out SP1 Beta 1 (2016.11.1.2242) of avast!https://forum.avast.com/index.php?topic=179067.0
+ Fixes in SecureDNS.If problem is slove

[Dwarden]

thanks will give it try ... those issues were really worrysome

[Dwarden]

unfortunately, this isn't fixed in beta 2016.11.2244

[lukor]

Dwarden, what about turning SecureDNS off. Wouldn't that help?

Does this happen only right after reboot/resume of the PC, or anytime during work?

[Dwarden]

this is another error I get

Name resolution for the name domrep.ff.avast.com timed out after none of the configured DNS servers responded.

@lukor this is bug with Avast! free , afaik there is no Secure DNS in it ... (this is shame considering there're free opensource DNSsec solutions already)

it's happening random, multiple times per day ... restarting/terminating Avast! service usually fixes it

note: I'm using multiple DNS servers (my, ISP, Google, NIC etc.) .... so it's highly unlikely they all 'unreachable' at same time while rest of internet services works

[Lisandro]

Dwarden:
1. What are the settings for DNS Client service?
2. Do you use any hosts manager? Is your hosts file the default one?

[Dwarden]

still unfixed in 11.1.2245 ... seriously dissapointed

[Dwarden]

Dwarden:
1. What are the settings for DNS Client service?
2. Do you use any hosts manager? Is your hosts file the default one?

using Google DNS, Czech NIC as priority (DNSsec and other security improvements supported)
normal Windows 7 x64 SP1 with all updates

everything was fine until 11.1.x

yes I have some custom hosts file but it's just some static additions (i barely edit anything in it for some years)

[Dwarden]

still unfixed in 11.1.2253

[bob3160]

Dwarden:
1. What are the settings for DNS Client service?
2. Do you use any hosts manager? Is your hosts file the default one?

using Google DNS, Czech NIC as priority (DNSsec and other security improvements supported)
normal Windows 7 x64 SP1 with all updates

everything was fine until 11.1.x

yes I have some custom hosts file but it's just some static additions (i barely edit anything in it for some years)

Have you tried the default Host File to see if that makes a difference

[MartinK]

Dwarden, please try to turn off Web Shield for a while. We would like to know if it helps.

[Dwarden]

I think it did but not 100% sure ,
the time until I had similar problem (but that could be just unlucky server/browser hiccup) was N times longer

note: I'm using EMET 5.2 just in case that's important

[Dwarden]

still unfixed https://forum.avast.com/index.php?topic=185203.0

note: not using EMET atm.

[Dwarden]

usually when Avast! has issue with DNS those events appear in Windows Event Log

DNS client events: There was an error while attempting to read the local hosts file.

and random domains related one

DNS client events: Name resolution for the name dsn13.d.skype.net timed out after none of the configured DNS servers responded.