Yahoo Answers is shutting down on May 4th, 2021 (Eastern Time) and beginning April 20th, 2021 (Eastern Time) the Yahoo Answers website will be in read-only mode. There will be no changes to other Yahoo properties or services, or your Yahoo account. You can find more information about the Yahoo Answers shutdown and how to download your data on this help page.

Why is there repeated admin login failures to my router?

The logs for my netgear router show repeated admin login attempt failures from my roommates computer...she is definitely not trying to hack the network and nothing appears to be running on her laptop. The attempts were coming in at about 3 per second until I downloaded malwarebytes and ran a scan on her computer that found 200 infected items...after they were removed and she restarted her computer I checked the logs and the attempts were still occurring but at exactly 1 per minute to the second. Does anyone know what else I can do to her computer to find what is making this happen?

Update:

UPDATE: I changed the encryption to WPA2 and changed the password around the same time that I ran the MBAM on her laptop...

4 Answers

Relevance
  • 10 years ago
    Favorite Answer

    Viruses can be FUD, Fully Undetectable.

    I know because I used to make viruses, check her regedit for odd startup programs.

    Email me @ seanofeire@gmail.com for manual removal help.

    What were you using, wep? A 12yr old could crack that. WPA2 is safer ofcourse, but there's still the virus. You should really consider my virus removal offer, I know where and how these things install, I used to make them, test them, and use them. They can watch you from your webcam, track your ever key stroke, use your computer as a proxy to download Child porn, or hack websites. This is no joke, Trojans (assuming it's a trojan of course, which I believe it to be. Probably a skiddy using Cybergate RAT)

  • Anonymous
    10 years ago

    Assuming you're using a wireless router, someone may be spoofing her MAC address. This is an address used to uniquely identify a machine. However, you can change this address to masquerade as someone else. This is easy to do because you can sniff wireless network traffic and see the wireless access points and machines that are connected to them.

    It sounds like someone may be trying to brute force the admin password by doing this. Check your router's manual to see if there is a way on the administration page to set a maximum number of login attempts. They shouldn't even be able to attempt to login unless they are authenticated to your network, meaning they might have broken your password. Change your router password to a strong one and make sure it's using strong encryption, e.g. WPA2.

  • 10 years ago

    hay u gave me best answer to this Q yesterday but in addition, reset your router by findind a little hole on the side, then press a tooth-pick or simalar size into the hole,wait 10 or so seconds, till your lights go out, then take the "tooth-pick" out u wont delete nothing it just gets rid of bad cache...trackers basically, then run m/bytes on quick scan in safe mode....(restart then while your comp is restarting, continuosly tap F8 till u see a menu that says "safe mode")let it load files

    (it will look completely different to ur used to) then run m/bytes in quick scan, get rid of any infections, then restsrt ur comp as normal

    Source(s): had this problem more than once
  • 10 years ago

    Tell her to stop searching for pronz on her laptop. Then bury your router and buy a new one.

Still have questions? Get your answers by asking now.