HNS_DNS_HIJACK Alert

Viruses and worms
1

Hi Everyone.
I am getting a HNS_DNS_HIJACK Alert from Avast.

I tried scanning with Malwarebytes and it comes up clean. But my free version MWB doesn’t seem to allow download of scan log. Is there another way? To seek help?

I want to check if I really do have a problem.
I use TunnelBear VPN and have used Hotspot shield and Hide.me in the past.
Could these be triggering it? I just want to be sure.

Any help is much appreciated

2

Follow the instructions here >> https://forum.avast.com/index.php?topic=194892.0

3

I was on autopilot mode when I read this (I still sort of am).

Can you post a screenie (screenshot) of the Avast! detection for me? It’s entirely possible that you’ve connected to DNS server belonging to Tunnelbear/Hotspot or Hide Me

4

HI.
Thanks for trying.

Screenshot file limit is 1024kb… >:(
and avast is not letting me attach 831KB pic. >:( >:(

Cheers

5

heres another

6

And here is the last one.
Its a long alert.

Does this help? Need anything else?

Cheers again

7

Are you using free or payed avast

If payed, does message go away if you turn off avast real site?

Real site faq. https://support.avast.com/en-ww/article/Antivirus-Real-Site-FAQ

8

Hey.
I’m on Mac.
The alert first popped up with Avast Free Security. I am using trial Avast Premium Security (Different from Avast AntiVirus?) and it still pops up.

thanks for asking and help

9

Trial Security is the Antivirus. Can you post a screenshot of your DNS Settings on your Mac and Router?

Mac >> http://kb.mit.edu/confluence/display/istcontrib/How+to+check+DNS+settings+on+Mac+OS+X+10.7
Router >> https://www.tp-link.com/us/support/faq/1710/

10

Hey.
I was being proactice and and changed them to GoogleDNS like like.
I even rebooted the router after.
Still getting the alert
wtf :smiley:

thanks for helping

11

Google’s DNS Servers shouldn’t be causing any alerts. I suspect it’s Avast! being an annoyance, but let me grab Sass Drake, see if he has any suggestions. I don’t know enough about Mac’s to give solid advice (we’re a mostly Windows forum around here :P, and I deal primarily in Windows and Linux.)

Mac Forum, just in case >> https://forum.avast.com/index.php?board=5.0

I know on the Free version of Avast! the alerts can be annoying “Your IP is visible! Correct it now for $XX.XX”

12

To cdmusser and Michael 9alan1998),

On a side line:
Read why TunnelBear is a questionable service:
https://restoreprivacy.com/tunnelbear/
It is McAfee’s and has certain notable shortcomings.

Just wanted to let you know,

polonus

13

Looks like Avast false alarm to me.

14

У меня стоит роутер-маршрутизатор TP-Link AC1200 EC220-G5
Кабель от роутера идёт к ноутбуку ASUS.
Кабель от роутера идёт к игровой консоли PS 3.
В роутере прописаны DNS 1.1.1.2 и 1.0.0.2
В ноутбуке прописаны DNS 1.1.1.2 и 1.0.0.2
В игровой консоли PS 3 прописаны DNS 1.1.1.2 и 1.0.0.2
При запуске в программе Avast Premium Security функции Защита сети происходит проверка сети.
И выдаётся результат : смотрите скрин !
Результат поражает ! В роутере защита нормальная,в игровой консоли защита нормальная.
А в ноутбуке есть Подмена DNS !!! Раз анализ показывает в роутере и в консоли защита нормальная,
то почему в ноутбуке Подмена DNS ? Ведь везде стоит DNS один и тот же.Объясните мне пожалуйста.

I have a router-router TP-Link AC1200 EC220-G5
The cable from the router goes to the ASUS laptop.
The cable from the router goes to the PS 3 game console.
DNS 1.1.1.2 and 1.0.0.2 are registered in the router, DNS 1.1.1.2 and 1.0.0.2
are registered in the laptop, DNS 1.1.1.2 and 1.0.0.2
are registered In the PS 3 game console, DNS 1.1.1.2 and 1.0.0.2
are registered When the Network Protection function is launched in the Avast Premium Security program.
And the result is given : see the screen !
The result is amazing ! In the router, the protection is normal, in the game console, the protection is normal.
And there is DNS Substitution in the laptop !!! If the analysis shows normal protection in the router and in the console,
then why is DNS Substitution in the laptop? After all, DNS is the same everywhere.Please explain to me.

Менял DNS на DNS от Google,результат такой же ! Объясните пожалуйста это явление.
I changed DNS to DNS from Google, the result is the same! Please explain this phenomenon.

15

Что-то никто сюда не заглядывает вообще.
А жаль !

16

Avast WEBforum » Non-English Zone » Русский https://forum.avast.com/index.php?board=28.0

17

Given you have posted in a topic that was 3.5 years old - it would have been better placed in its own new topic - be that in the English or Russian sub-forums.

And were you getting the Avast Alert as in the Original poster first screenshot.

18

Я помещал свой комментарий по данной проблеме в русской ветке форума.Но там простые пользователи промолчали по данной проблеме.Поэтому я решил написать в английской ветке форума как раз по данной проблеме.
I posted my comment on this issue in the Russian forum thread.But there ordinary users remained silent on this problem.Therefore, I decided to write in the English branch of the forum just on this problem
[/quote]
author=DavidR link=topic=230533.msg1704254#msg1704254 date=1683214602]

Given you have posted in a topic that was 3.5 years old - it would have been better placed in its own new topic - be that in the English or Russian sub-forums.
And were you getting the Avast Alert as in the Original poster first screenshot.
[/quote]
Я разместил свой комментарий в этой ветке https://forum.avast.com/index.php?topic=323225.new#new И получил два ответа.Но они не по моей проблеме.В русской ветке форума очень редко бывают ваши разработчики,поэтому я и решил написать в английской ветке.Проконсультируйте меня по данной моей проблеме.Всего хорошего.
I posted my comment in this thread https://forum.avast.com/index.php?topic=323225.new#new And I got two answers.But they are not on my problem.Your developers are very rarely in the Russian branch of the forum, so I decided to write in the English branch.Consult me on this problem of mine.Good luck.

19

Сегодня после проверки сети программой Avast Premium Security результат удивил меня !
Вчера было обновление операционной системы Windows 10 Домашняя.
На данной момент версия системы стала 22Н2 19045.3086
Версия Avast Premium Security стоит 23.5.8195.786 от 1.06.2023
DNS в операционной системе стоит от провайдера Dom.ru
109.195.192.1
109.195.193.1
А в браузере Microsoft Edge в настройках раздела
“Использовать безопасные DNS, чтобы указать способ просмотра сетевого адреса для веб-сайтов”
стоит «https://secure.avastdns.com/dns-query»
И головная боль исчезла !
Что повлияло на такой результат неизвестно !

Today, after checking the network with the Avast Premium Security program , the result surprised me !
Yesterday there was an update of the Windows 10 Home operating system.
At the moment, the system version has become 22H2 19045.3086
The Avast Premium Security version costs 23.5.8195.786 from 1.06.2023
DNS in the operating system is from the provider Dom.ru
109.195.192.1
109.195.193.1
And in the Microsoft Edge browser, in the settings of the section
“Use secure DNS to specify how to view the network address for websites”
it is worth "https://secure.avastdns.com/dns-query "
And the headache disappeared !
What influenced this result is unknown !