today, doing a network scan with Avast 26.2.10802g (build 26.2.10802.762) the antivirus found a DNS hijacking issue on my private modem with this code HNS-DNS-HIJACK.
I have activated avast on another laptop and I connected it to another private internet connection with another modem, and it found the same issue of Hijack on that modem.
I have tried to rest both modem, changed id of wi-fi and changed wi-fi password but the problem remain.
It sound a bit strange to me, can I consider it a false positive? Maybe a too aggressive update on this software?
Thank you, could be but honestly I don’t think I’m so skilled to do that kind of analysis.. Anyway I succeded in checking the IP address of DNS server that I am connected to and indeed I am connected to the same 15.161.99.28.
But it seems an Amazon DNS, it should be a trusted DNS, right? Why this should be an hijack?
that’s an amazon compute server, it could do anything for what i know, even responding as a normal dns server and tracking everything you search and selling it around/redirecting you to phishing websites. i found that very suspicious and uninstalled. funny that avast itself triggered the hijack alert.
Thank you for the explanation, did you report the issue to Avast? Now, while I’m writing the hijack alert disappear but I see that i am still connect to Amazon dns server