Home Support

AVG Support Community

Share tips and solutions on AVG Products

Have a question?

Community topics

AVG Gurus

These community experts are here to help

  • (AB) Alan Binch
  • (BA) Borislav Angelov
  • (VB) Vladimir Bartl
  • (SK) Subhadeep Kanungo
  • (MS) Miloslav Serba
Andreas vRAndreas vR 

Huge number of DNS requests

I am using AVG Internet Security and observed that nearly half of all DNS requests within my local network are coming from AVG. There are two domains that are getting requested every 4 seconds.

analytics.ff.avast.com

avaststat.mailshell.net

I would like to know why this huge overhead is happening, where's the benefit in that and what will happen if I simply will block these requests?

Any ideas?

Andreas

Dinesh KrishnanDinesh Krishnan (Foundever)
Hi Andreas,

We're glad to look into this & help you.
However, as we're uncertain about the mentioned servers, we'd like to check this with our next level of support.
Once we receive the info, we'll write back to you. Thank you for your understanding in advance!
Shawn EnglemanShawn Engleman (Avast)
Hello Andreas. The DNS requests may be associated to an outdated version of AVG Internet Security. If you may confirm, what version of AVG Internet Security you have installed on your computer? Thanks ~ Shawn
Andreas vRAndreas vR
I have automatic updates configured. End of last week there was a push update and I was aksed to reboot my computer. Since then there's a dramatic reduction of these DNS requests. So thanks for that. However, even though significantly less these two domains still get querried and it would be nice to understand what data gets transmitted?

I might set a a network sniffer to better understand that.

Andreas
Priyanga SekarPriyanga Sekar (Sitel)
Hello Andreas, 

We'd be glad to clarify this for you. 

Could you confirm the version number of AVG Internet Security (Open the AVG program > Menu > About) installed on your PC? 

We had a check with our senior team and learnt that the DNS request “analytics.ff.avast.com” was used for sending anti-spam statistics years ago, however that domain does not exist anymore. You should not be receiving any querries to this domain. If they are, then it is most likely a bug or different software doing that.

Regard to “avaststat.mailshell.net,” we need a log files to further determine the root cause. To collect logs, please open AVG Internet Security > Menu > Settings > General > Troubleshooting > Enable debug logs.

You can locate this log files in the following path (C:ProgramData\AVG\AVlog)

We sent you an e-mail to your registered e-mail address and revert to us with the log files. 

Thank you.

 
Andreas vRAndreas vR

SW Ver 19.5.3093 (build 19.5.4444.505)
Virus def ver 190624-2
UI ver 1.0.171

Logs are enabled and I will send them through once some data has been collected.


 

Priyanga SekarPriyanga Sekar (Sitel)
Sure, Andreas. 

Awaiting for the log files to proceed further. Thank you.
Andreas vRAndreas vR
I just checked the directory /c/ProgramData/Avg/Antivirus/log and there's a huge number of log files. Do you need all of them or just some specific ones?
Balasubramanian SBalasubramanian S (Avast) 
Thank you for the information, Andreas.
Yes, we request you to put those files in a Zip folder and send it through the email that we sent earlier.
Once, we receive it, we will be able to proceed with the analysis.
Shawn EnglemanShawn Engleman (Avast)
Hello Andreas. I am writing on behalf of the AVG senior team. Thank you for submitting the requested log details.

First and foremost, as a recap with regard to “avaststat.mailshell.net,” years ago it was used for sending anti-spam statictics, however that domain does not exist anymore. You should not be receiving any querries to this domain. If you are, then it is most likely a bug or different software doing that.

With regard to “analytics.ff.avast.com,” upon inspection of the logs, it was determined the issue is being caused by two factors:

1. We cannot connect to analytics.ff.avast.com
2. We get a lot of "network connectivity changed" notifications as we try to send the failed http requests again when connectivity changed.

This analytics bug will be fixed in the next released version of software. Thank you for your time and patience
s ws w
Since it is December 2020, I would like to reopen this thread and ask for the reason about the dns queries. I have a 10 device tuneup util subscription and it is quering those sites. What is the purpose for this. 
Shawn EnglemanShawn Engleman (Avast)
Hello SW. Thank you for taking the time to write.

Although this is a dated posting that has since been resolved, specific to the author of the post, I understand you are experiencing some related disruption.

You referenced that you are subscribed to AVG TuneUp (Multi-Device). Can you further clarify if you have any other AVG product(s) installed (i.e. AVG Free AntiVirus)?

As a troubleshoot, I suggest performing an uninstall and to reinstall to the latest version of each AVG product installed on your computer, to ensure you do not have an outdated version of software.

Good luck. Let me know if the troubleshoot helps resolve your disruption. Regards, Shawn
John SmithJohn Smith
Old thread but I too am seeing amassive amount of calls for analytics.ff.avast.com and v7event.stats.avast.com to my DNS server every time I boot up my computer. So many that it is rate-limited (current config allows up to 1000 queries in 60 seconds).

I'm guesing the reason is that it can't reach these domains, but it's horifically poorly written code if it tries 1000+ times in less than a minute when it doesn't get the response it's hoping for.

I'm running the latest version.
Delli GaneshDelli Ganesh (Foundever)
Hello John. 
Thank you for contacting AVG Community Support.
We will certainly check and help you.
To proceed further, please create a separate AVG community post by clicking the link below and post your questions in your own post, so we will check with your AVG account and help you accordingly.
https://support.avg.com/support_ask
Thank you for your understanding.
Ask a question
Struggling with non-AVG technology? We can fix that, too!