Note: Please do not post Personally Identifiable Information like email address, personal phone number, physical home address, product key etc.
Issue abstract: DNS Hijack Found
Detailed description: So after a few days I decided to check my Norton history to see if there is anything wrong and I found “DNS hijack found message”. After this huge Norton change I’m not looking at my history very often but this message appeared on 12.05.2025 for the first time and I can see it every day and I weird thing is it always around 10 pm. Looks like a very serious problem or this might be an error after update?
Product & version number:
OS details: Windows 10
What is the error message you are seeing? “DNS hijack found”
If you have any supporting screenshots, please add them:
Also note that this is sometimes a “scare tactic” to sell-up services from companies. Take the issue serious from the outset though until proven this is a false positive on the part of Norton.
Hello
I tried /flushdns and smart scan is not showing any wifi problem this time,
But after every smart scan I can see red warning in norton history “wifi security vulnerabilities detected”.
I tried Chrome option but I think it’s all the same, I’m a bit sacred to mess with router settings right now
You may want to get a different opinion from others here on the forums. Maybe I am missing something. Running Smart Scan is known to give false indications there are things happening that aren’t for the sake of clicking on another fix solution that wants to see something else. Versions 24.xx and 25.xx have that issue.
Someone you trust that is tech savy should assist you with your router settings checks. IF, there is something legit happening it will also be logged in your router security logs as well.
Nevermind Smart Scan still show issues with internet security.
I found a suggestion to use ipconfig /all to chech the dns I’m using right now and confirm if it’s suspicious/changed and check for the same thing in the router settings.
So if I understand this correctly Norton message says “your network connections are being rerouted through a malicious remote DNS” so if the message is right if I check it there should be a different dns than my isp or one I used previously
Your router security history SHOULD, have the same IP address entries as Norton is specifying for this to be a legitimate issue. If they differ something is amiss with your ISP. Additionally, as stated earlier. Running Smart Scan religiously is not suggested because it will find false pretenses to have you run it, it finds bogus issues and direct you to click for a fix. Next will be a sell-up.
IMA that Norton is blocking whatever this may be, my professional opinion is this is a false positive by Norton. If you can get an IP address from history logs go here and run a check for it being malicious. Or I can do that for you.
I spent quite a long time to check every single option in my modem(it’s also a router) to find security history or logs but I found out that there is no option to check it and it’s not storing this data. Also I found out that there is no option to change DNS from my modem settings but Windows only.
When I checked what DNS I’m using right now in my Windows settings I don’t think there is anything suspicious or changed there.
I’m aware that Smart Scan can find problems just to buy more things but I found out about this issue from my Norton “Wi-Fi security” history without Smart Scan. This red warning message “wifi security vulnerabilities detected” for some reason appears only around 10 pm without using Smart Scan.
What router ( make and model) do you have from your ISP and who is your ISP? I’d like to look at the settings for it. The only other suggestion I have is checking your Windows Hosts file for random IP addresses.
Have a look at this screenshot. I believe you MAY be able to assign DNS entries in this area of your router settings. As a note, make sure this won’t break your internet connectivity before doing so. Consult your ISP first.
It’s pretty difficult to have a normal conversation with my ISP since they are using AI for customer service so I’ll have to try again tomorrow. I can’t risk breaking my internet connection right now.
I tried with a different device that is not used very often so with older Norton version. Last time I used this laptop on 16.05.2025 and the current Norton version is 250516-4. I ran Smart Scan twice and no wi-fi issue detected and no red warning in my Norton security history. I left it for an hour and before closing it I checked current version again and i got update to version 250521-2.
Now everytime I run Smart Scan I have the same warning on my laptop.
So this MIGHT be a false positive after update but on my pc this warning appeared on 12.05.2025 so that’s even older Norton version than version installed on my laptop
I posted earlier here that this is suspected sell-up scare tactics, but as a precaution to check things out. Running Smart Scan, as stated earlier produces this for other users as well. If you have a device that isn’t getting these alerts on the same network its bogus.
Oh well after Norton updated itself on my laptop it also found “wifi security vulnerabilities detected”.
I just don’t know how is that possible my pc on 12.05.2025 found “wifi security vulnerabilities detected” for the first time but today my laptop with Norton version I downloaded 16.05,2025 couldn’t find anything and after latest update found the same issue just like my pc.
If they are doing this for “scare tactic” there should be more people having this issue
Right now I can’t risk losing my internet connection if I try factory reset. Knowing my ISP it’s gonna take at least 2 weeks for them to find time and fix my internet connection.
RIght now everytime I run Smart Scan it says my network is safe (not showing DNS hijack found) BUT everytime after scan there is red warning message “wifi security vulnerabilities detected” and in details DNS spoofing detected so the same message like before when Smart Scan detected DNS hijack after each scan. Yes I know Smart Scan is not 100% right all the time but still worth mention.
I was hoping that next bigger update will fix the issue and confirm a false positive but sadly after the update today the problem still persists
Understood. I would NOT be running smart scan in the manner you are as that appears to be the source of these false detections. Hoping Norton gets this issue corrected soon. The list of issues just keeps growing without any relief.
It’s been a while since last update and looks like this might be a real problem and not false positive. Last few days my internet slowed down and I had some random internet disconnects. I checked my ISP app and there was a maintenance 3 days ago and stormy weather could also be the reason why my internet is slower BUT I also noticed that my ISP app shows my modem is not working right (sadly the only solution they mentioned on the app was to turn off, wait one minute and turn on again and of course it didn’t work). I tried basic windows troubleshooting and it found this “Your computer appears to be correctly configured , but the device or resource (DNS server) is not responding” even tho I have internet connection right now.
Maybe my modem is broken but right now it looks like a real problem and Norton was right
