• January 20, 2022, 12:30:51 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: How to recover user account history  (Read 1683 times)

helloworld369

  • Level 1 Member
  • *
  • Posts: 1
How to recover user account history
« on: March 24, 2016, 01:23:56 PM »

My router was recently hacked (by a roommate who moved out) and I think that they removed all of the history. I think that they are trying to hide all the evidence and so went into our d-link interface and created their own username and password.  I need an engineer or someone to be able to help me recover this information and help me figure our what has been happening with our network. The authorities are requesting hard evidence and it has been really challenging to provide this information when she is erasing all her tracks. Please I need help.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49884
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: How to recover user account history
« Reply #1 on: March 24, 2016, 02:39:54 PM »

Link>Welcome!

  • What Hardware version is your router? Look at sticker under the router case.
  • Link>What Firmware version is currently loaded? Found on the routers web page under status.
  • What region are you located?

The router doesn't store any historical data as far as user sites and where they have been to. It does store diagnostic data and I think router accessed by the admin or user account. However if the router was factory reset or you can't gain access to the routers web page using the Admin log in account, the logs would be deleted on a factory reset and if you would have to factory reset the router again to gain access if the Admin or User PW have been set up and you don't know what they are. If you can gain access to the routers web page you can see the UP time it's been online. If the time is short or with in a day, then you'll know someones been messing with the router if there hasn't been any power outages.

I recommend that you phone contact your regional D-Link support office and ask for level 2 or higher support to see if there is any other way to gain access. I presume there may not be.

I recommend that when you get to the point where you can configure the router for your needs, I would place the router in a locked room where no body can gain access to the router. This will help someone doing a factory reset with the button.
Set up the routers Admin account with a PW and don't give it out. Disable the User account or set up a PW for it and don't give it out.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.