DNSFIXSETUP.EXE (fix leak test for Open VPN)

[redleg]

This has been popping up past week or so. checking at Virustotal (Virustotal detection report) lists as clean by all engines although with a few down votes by users. Basically it creates batch files to run a script to help auto-configure all internet adapters (ethernet and wifi) to static, clears all DNS servers then sets windows firewall rules to block all DNS except those added by openVPN to TAP32 adapter when connected to VPN server/service, as well restores all adapters to prior state when connection is closed. It is obvious *how* this could be exploited but as the file stands it is clean and does exactly what it clearly says it will do.

Spoiler

https://www.dnsleaktest.com/how-to-fix-a-dns-leak.html

If you are using OpenVPN on Windows XP/Vista/7 then a fully automated solution is available.

Download dnsfixsetup.exe - (md5 checksum: f212a015a890bd2dae67bc8f8aa8bfd9)

After installation, when you connect to a VPN server, a batch file will be run executing the 3 steps above.

Three scripts are generated for each OpenVPN configuration file;

1. configfilename_pre.bat - executed when you initiate the connection but before the connection is established - Calls pre.vbs - If any active DHCP adapters exist, switch to static
2. configfilename_up.bat - executed when the connection is established - Calls up.vbs - Clear the DNS servers for all active adapter except the TAP32 adapter
3. configfilename_down.bat - executed after the connection is disconnected - Calls down.vbs - Reconfigure adapters back to their original configuration

Please confirm file as good or bad. log and zip of file detected attached, thanks!

 

dnsfixsetup.zip

dnsfix-detected.txt

[TwinHeadedEagle]

Hello,

We confirmed it is a false detection and it shall be fixed in the next update.

Thank you!

[redleg]

very good, thanks for the clean confirmation!