Hi @dtcm9527 ,
I can confirm that, in some cases, Avast may temporarily add entries to the Windows hosts file when certain web protection features are enabled.
Examples of possible entries:
127.0.0.1 gen-webserver.local www.gen-webserver.local # gen digital helper server
1.2.3.4 redirector.gen-webserver.local www.redirector.gen-webserver.local # gen digital helper server
127.0.0.1 revocation.gen-webserver.local www.revocation.gen-webserver.local # gen digital helper server
These entries support specific Avast browser-security functions, such as Web Guard (formerly Web Shield) warning and related protection experiences. They are limited to Avast-controlled destinations used by those features and are not used to redirect your normal browsing to unrelated third-party websites.
Because some security tools monitor the hosts file for unexpected changes, you may occasionally see an alert when Avast adds or removes these entries. If the change relates to a Avast-managed entry associated with this feature, the behavior is expected and does not by itself, indicate that your device is compromised.
When the relevant feature is disabled or no longer active, Avast removes the associated entries.