Please provide the make and model of your router, and we'll grab the manual and guide you through.
Normally you access the router using a browser (eg, Internet Explorer) using 192.168.0.1 or similar as the URL. Then a password is normally necessary. If you don't know it, its probably the default password for your brand - which is probably why your "friend" could get in there and screw around.