Doesn't the router run a DHCP server?
Time for wireshark... see what the server is feeding (the DHCP server).
On another thought, is a phone or tablet getting the correct settings? Or a known clean machine with the firewall on before connecting to network.
Virus or some VPN client comes to mind...