Britec Tech Support Forum

Full Version: Router is getting hacked all the time?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hi,

So we have a home client that keeps having his details in his modem changed.
(such as funny new names for the wireless, turning back on WPS, Remote etc)

We disabled wireless.
Turned off Remote to the modem.
Disabled WPS
changed Admin login to modem.
(Replaced modem)
Scanned with Malwarebytes/HitmanPro/Adware/
And he still gets in.

The hacker still gets into the modem and changes all of the latter..
What program is suggested to catch the latest KEYLOGGERS.
Any suggestions would be appreciated.

Tomorrow we are asking Century link to change the external IP.

Thanks  Dodgy
what is the name of modem do you guess network enable?
(10-26-2017, 11:50 PM)zINc Wrote: [ -> ]Hi,

So we have a home client that keeps having his details in his modem changed.
(such as funny new names for the wireless, turning back on WPS, Remote etc)

We disabled wireless.
Turned off Remote to the modem.
Disabled WPS
changed Admin login to modem.
(Replaced modem)
Scanned with Malwarebytes/HitmanPro/Adware/
And he still gets in.

The hacker still gets into the modem and changes all of the latter..
What program is suggested to catch the latest KEYLOGGERS.
Any suggestions would be appreciated.

Tomorrow we are asking Century link to change the external IP.

Thanks  Dodgy

I would look at the client's computer(s). Whoever it is may have installed some sort of remote agent... With that being said, you can change whatever you want and they will still see the computer or computers. I would look for installed programs like Teamviewer, AeroAdmin, Ammy, or Splashtop. If you can't find anything, or just for good measure, I would reinstall Windows on all the clients PC's

Why am I suggesting this? Is because if an agent is installed, it doesn't matter what network the PC is on, they can still get into the PC. The programs I listed have the capability of running also as a service, giving the so called Hacker access... From there, they can get access and change anything in whatever modem the PC is connected to...
Here is a free anti-keylogger program like Larry said scan all computers for malware, rootkits, viruses, etc. Once you are 100% sure the systems are clean reset the router to factory settings and use different passwords. 
Thanks for the advice ppl.
I think a clean install of all the Network computers is a safe idea
but I have a feeling this h@cker is a bove 'kiddy scrpt' lvl and might be using the external
ip by now.. :/ We have asked his provider to change it...we shall see.
I will update this post later this weekend.
Thanks Again.


(10-27-2017, 03:46 PM)Britec Wrote: [ -> ]Here is a free anti-keylogger program like Larry said scan all computers for malware, rootkits, viruses, etc. Once you are 100% sure the systems are clean reset the router to factory settings and use different passwords. 
Solved Thread Close