D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-655 => Topic started by: Namura on June 07, 2010, 07:46:05 AM

Title: Major Router problem!!!!
Post by: Namura on June 07, 2010, 07:46:05 AM
Okey, so here's the deal:

Sometime during the last two days, some b*st*rd has been hacking my router and changing password on it.
And to make it worse, everytime i try to change the password (even after i do a factory reset and take out the internet connection) the password change just a second after i change it. WTH do i do???????????

Seriously, i think i'm going crazy over this problem. Please help!
Title: Re: Major Router problem!!!!
Post by: JimMonz on June 07, 2010, 07:54:52 AM
1. Remove antennae
2. Disconnect WAN.
3. Default router.
4. Connect to router via ethernet to port 1.
5. Set it up, Create a strong password (>12 characters, Caps, numbers and specials).
6. Write it down, too!!!

After that, dunno what to do. Hunt down the A**HOLE messing with your router.
Title: Re: Major Router problem!!!!
Post by: Namura on June 07, 2010, 07:56:19 AM
Okey, i'll try that, thanks for the tip.

By the way, do you know a good place to buy a hunting rifle? :P
Title: Re: Major Router problem!!!!
Post by: JimMonz on June 07, 2010, 08:34:10 AM
Don't forget to create a strong WEP key, also.
Title: Re: Major Router problem!!!!
Post by: Sammydad1 on June 07, 2010, 08:42:45 AM
Hi,

Do NOT use WEP if you want a strong key.... Use WPA2 per the stickie.

The compromise may well be on your pc and have nothing to do with your router.....router's typically can't be hacked other than to get the admin password, and what's somebdy going to do with your router anyhow ?

If your pc has been compromised say with a key logger, then you have bigger issues.
Title: Re: Major Router problem!!!!
Post by: Namura on June 07, 2010, 08:55:43 AM
i use WPA2 with a 13 character long password...

I guess the keylogger thing is the only option left, but i still don't get it how they can change the password when the only computer logged onto the network is the one i work on. And the router isn't connected to the internet at all, just saying, it's rather weird :|
Title: Re: Major Router problem!!!!
Post by: Sammydad1 on June 07, 2010, 09:05:42 AM
did you change your admin login password ?

DLink default password's are well known....
Title: Re: Major Router problem!!!!
Post by: Namura on June 07, 2010, 09:10:58 AM
well yeah, as i said. I log in with the default password and everything, the first thing i do is to change the admin password. then it reboots, i try to log in with the password i changed to and it doesn't work.
Title: Re: Major Router problem!!!!
Post by: JimMonz on June 07, 2010, 09:19:36 AM
Yeah, that's what I meant WPA2 key, whoops!!!
Title: Re: Major Router problem!!!!
Post by: Sammydad1 on June 07, 2010, 09:31:07 AM
sounds like you may well have some type of spyware infection, possible some sort of rootkit w/keylogger.

Title: Re: Major Router problem!!!!
Post by: thecreator on June 07, 2010, 09:34:42 AM
Okey, so here's the deal:

Sometime during the last two days, some b*st*rd has been hacking my router and changing password on it.
And to make it worse, everytime i try to change the password (even after i do a factory reset and take out the internet connection) the password change just a second after i change it. WTH do i do???????????

Seriously, i think i'm going crazy over this problem. Please help!

Hi Namura,

What firmware is being used on your Router?

Do a Factory Reset on the Router.

http://192.168.0.1/Tools/Admin.shtml (http://192.168.0.1/Tools/Admin.shtml)

Make sure that Remote Management is disabled.

Use RoboForm to defeat Keyloggers.

Use SpyBot Search and Destroy 1.62 and do a complete run.

Title: Re: Major Router problem!!!!
Post by: Namura on June 07, 2010, 09:49:54 AM
I am running 1.32Eu version, i'm doing the cleanup after keyloggers now.

Or i used to run 1.32EU, but i switched back to my old router for now, i'm gonna consult my brother later on after som more answers. But thanks for all the help ^^
Title: Re: Major Router problem!!!!
Post by: JW on June 08, 2010, 10:09:01 AM
Hi, JW here.

When you finish reprogramming the router check in the web page "Advanced" across the top then Wi-Fi Protected Setup on the left to see if you have put a check mark in the top group next to "Lock Wireless Security Settings".

May help or not.  JW
Title: Re: Major Router problem!!!!
Post by: kthaddock on June 08, 2010, 12:05:40 PM
Use 63 random printable ASCII characters: for best security

https://www.grc.com/passwords.htm (https://www.grc.com/passwords.htm)
Title: Re: Major Router problem!!!!
Post by: Fehrles on June 08, 2010, 01:36:58 PM
Okey, so here's the deal:

Sometime during the last two days, some b*st*rd has been hacking my router and changing password on it.
And to make it worse, everytime i try to change the password (even after i do a factory reset and take out the internet connection) the password change just a second after i change it. WTH do i do???????????

Seriously, i think i'm going crazy over this problem. Please help!

Can I venture a guess that u recently upgraded the firmware? what you are describing is exactly what is happening to me. I'm on a freshly reset unit, wireless turned off, on a known secure(corporate) network trying to setup via an Apple iMac. I am suspecting a problem with the firmware update since i get anywhere from 2-5 failed logs with a known good password before it just lets me in despite the authentication error. It was logging in just fine prior to my loading the 1.34NA update.

I'm not saying it wasn't hacked in the first place but if you did the firmware update as part of your fix, this may just be a symptom. IF you can try a previous version of the firmware. BE CAREFUL though no all their firmware updates are reversible so look before you leap. Headed to try a downgrade myself now. hopefully just one step back will work.
Title: Re: Major Router problem!!!!
Post by: Namura on June 08, 2010, 01:53:08 PM
Okey, so we fixed the problem, i got no idea how, it just all of the sudden worked again.

And yeah, i updated the firmware just last week.
Title: Re: Major Router problem!!!!
Post by: Fehrles on June 09, 2010, 06:39:03 AM
Glad to hear its working for you again :D, sorry to hear you don't know why. :(  Will just have to keep plugging away at mine till providence or troubleshooting prevails  :-\