This topic

Router compromised?

Wingreen — Fri, 08 Apr 2022 16:44:18 GMT

I've had slow upload speeds for a while. I recently reset my smartphone as it wouldn't connect. I then rebooted my router and, of course, had to enter my WiFi password on my smartphone. Almost immediately I had an email headed "Please verify your new device". I didn't open it as it is clearly spam as it was sent to an email address I no longer use (but still have access). It made me think.....coincidence? Or, in some way, how did the spam "know" I'd reset my smartphone? Made me think that maybe my router has been compromised in some way. Is that possible? If so...how can I check.....and how can I fix it? Or maybe it's just a red herring?

Re: Router compromised?

Les-Gibson — Fri, 08 Apr 2022 19:45:23 GMT

It sounds more likely that you still have Smart Setup enabled on your router. See the instructions at What is Smart Setup on the BT Hub? How can I turn it on and off? | BT Help for details of how to disable it

Re: Router compromised?

gg30340 — Fri, 08 Apr 2022 21:40:54 GMT

It is doubtful that the email was spam or your router has been compromised. It is more likely that you have two factor authentication set up on your MyBT. If you do, because you reset your phone it will register as a new device rather than a trusted device.

As regards the "old" email address, it is possibly because it was the email address that you had previously registered on your MyBT

See link

Two-step authentication | BT Help

Re: Router compromised?

Wingreen — Sat, 09 Apr 2022 07:52:40 GMT

Many thanks. I checked and Smart SetUp is already off.

Re: Router compromised?

Wingreen — Sat, 09 Apr 2022 07:54:30 GMT

Its reassuring to know its unlikely that my router has been compromised. The rest of your comments make sense. Still getting slow upload speeds so I think the issue regarding that may have nothing to do with my router.

Re: Router compromised?

Les-Gibson — Sat, 09 Apr 2022 08:48:46 GMT

How are you testing? I know that the Broadband Performance Test facility on my router doesn't work (page loading error) So I'm guessing you're using an internet speed tester? If so and you're testing by Wi-Fi then your speeds will appear to be lower than they really are.

Re: Router compromised?

gg30340 — Sat, 09 Apr 2022 08:53:19 GMT

Use this speed tester and post the results.

https://speedtest.btwholesale.com

Also post what you were given as your guaranteed minimum speed when you first took out your broadband package.

Re: Router compromised?

Wingreen — Sat, 09 Apr 2022 09:06:29 GMT

I got 46.23Mbps download and 8.35Mbps using that speed test link. The PC I'm on is connected directly to the router. I have been using testmy.net to test speeds - where I am getting much slower speeds - which seem to be more consistent with how slow my PC is when accessing the internet. Having said that, I suppose it could more be an issue with my PC - which is quite old. Although I check it frequently with MalwareBytes and I run Kaspersky on it. We also have quite a lot of "gadgets" connected to our broadband (including smartphones, tablets, Alexas and other laptops and TVs) - maybe I'm barking up the wrong tree!

Re: Router compromised?

Les-Gibson — Sat, 09 Apr 2022 09:53:04 GMT

How does that compare to the speeds you're paying for ?

Re: Router compromised?

Wingreen — Sat, 09 Apr 2022 11:14:36 GMT

Those speeds are in line with what BT promise

Re: Router compromised?

Les-Gibson — Sat, 09 Apr 2022 11:19:53 GMT

In that case I would take a guess that the Windows registry full of junk. Try downloading the free version of ccleaner from https://www.ccleaner.com/ccleaner/download/standard and run a registry clean, you may need to run it more than once

Re: Router compromised?

Wingreen — Sat, 09 Apr 2022 12:07:15 GMT

Thanks. Funnily enough I already use CCleaner and use it quite often. Just run it again to check registry and no issues found.

Re: Router compromised?

gg30340 — Sat, 09 Apr 2022 12:25:06 GMT

As you already have CCleaner on your PC you should go to "Tools" > "Start Up" and see what programs are set to run when you start up your PC. Look for the ones that you feel are essential to you to have running when the PC starts and also for those that you only need to be running when you actual want to use them.

Once you decided on that you should disable the ones that you only want to run when being used. They will still work when required but will not be using up your PC's resources.

It is also worth using the "Custom Clean" to clear out your "Temp" files and browser Cookies and Cache History.

You should also check your Internet Browser for "add ons" that are installed. Again check for the ones that you actually need and delete the others. You may find that you have different "add ons " that are all doing the same job.

The use resources and will slow your PC down and Internet browsing down. Select one and delete the others.

You should also check your Antivirus Program for "add ons" that are doing the same job as ones that you may have on your browser.

Re: Router compromised?

Wingreen — Sat, 09 Apr 2022 15:29:09 GMT

Ummmm.....how do I find "Tools"?

Re: Router compromised?

Les-Gibson — Sat, 09 Apr 2022 18:12:55 GMT

It's below 'Registry' in the menu on the left, if you can't see it then check your version of ccleaner

Re: Router compromised?

Wingreen — Sun, 10 Apr 2022 08:51:24 GMT

Ah....I thought it was something that was part of Windowsd 10, not CCleaner. My mistake. it a go - and I found a LOT of things set to run on start up in relation to "Windows", "Scheduled Tasks", "Context Menu" and "Windows Services". I'm no computer geek so I'm very wary of disabling anything as I know it might end up with affecting (badly) how my PC runs, or even stop it from booting up properly. Perhaps I'll just have to live with a slower PC.

Re: Router compromised?

Les-Gibson — Sun, 10 Apr 2022 09:08:58 GMT

Post a screen shot of all process es which run at startup and maybe we can help. I've disabled those I don't consider important for years and never suffered any ill effects from doing so. Just make sure you disable and not delete, that way you can always go back and re-enable if you need to

Re: Router compromised?

Wingreen — Sun, 10 Apr 2022 09:22:08 GMT

This is the Windows one - which looks fine (Just 2 processes running on start up). If the screenshot works OK (I'm not sure best of way of posting them) , I will do same with the other Start Up tabs.

Re: Router compromised?

Les-Gibson — Sun, 10 Apr 2022 12:48:07 GMT

Sorry, I can't read that but it does look like an abnormally long list.

use the keyboard shortcut Ctrl+Shift+Esc, a new window will open.

Look on the Processes tab for any Non- Microsoft resources highlighted in red and using excessive resources (CPU, Memory, Disk, GPU and Power) then click on the Startup tab and disable that resource to prevent it from loading at startup and then restart.

Re: Router compromised?

gg30340 — Sun, 10 Apr 2022 15:19:50 GMT

Going by what you have posted, there are no programmes running that would be causing you any problems.

The ones that are listed could have been running at start up but it appears that when they were installed or at a later time that option was not enabled so they are not causing any issues.

Unless you fully know what you are doing I would suggest that you do not go into the Processes Tab and start turning off processes. You could very easily turn of your Antivirus and processes that have been installed by the computer manufacture, HP, that have been installed rather than using the Microsoft process along with other services such as those used by Intel.