Was hacked

Nightingale1989

Today someone have access to may computer, from this account: **Please do not post TeamViewer IDs**, with name   SUPPORTS. Is this real support account? I don't give anyone onetime password and have easy access disabled.

Also: I can't press submit button on https://www.teamviewer.com/en/report-a-scam/ from any of my browser.

TotalPC

Sounds like you may be misunderstanding what "easy access" means. That's ok, I did too up until recently. "Easy Access" sure doesn't sound secure so I avoided it for some time. Easy Access enables an online TeamViewer user account, what you created for writing this topic, the ability to remote into the system without needing any password set on the system's TeamViewer App.

More about Easy Access can be found here.

TeamViewer offers many ways to remotely access a system. The most common I have numbered and screenshotted below.

1. This is the fixed password. You can set this to whatever you want, there's also the ability to "manage additional passwords" so you don't have to give yours out if you want to give someone else access. You want this to be very secure since it never changes. Looks like this is what was compromised in your situation.
2. This is the easy access option which allows you to remotely control a system without needing to set a password in options 1 & 3. It instead allows you to remote into the system using your TeamViewer.com account as the authentication method.
3. This is that random password you see on the main Remote Control area of the app.

 

Let me know if you have more questions.

Cheers!
-Josh

TotalPC

Hello @Nightingale1989,

Welcome to the TeamViewer Community!

With a generic name like "SUPPORTS" it doesn't sound like a legitimate support account. Just to be safe I recommend changing all TeamViewer passwords used to access your system. If you use the random password option increase it's strength.

I also attempted a test on that form and I wasn't able to get it to submit either, but I was feeding it fake log files, not my real ones. Make sure you fill out all required fields and include the TeamViewerXX_Logfile.log and TeamViewer_LogfileXX_OLD.log files. They may be required and their system may be able to tell the test files I'm feeding it are not real log files. I'll alert someone that can better test that form for us.

Cheers
-Josh

Nightingale1989

From logs:

AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using dynamic password was denied
AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using fixed password was successful

So someone connected via my personal password but, sorry for repeating, i don't allowed easy access. Furthermore i don't have account for enable this. I only created account for writing this topic. So how could this happen?

TotalPC

Sounds like you may be misunderstanding what "easy access" means. That's ok, I did too up until recently. "Easy Access" sure doesn't sound secure so I avoided it for some time. Easy Access enables an online TeamViewer user account, what you created for writing this topic, the ability to remote into the system without needing any password set on the system's TeamViewer App.

More about Easy Access can be found here.

TeamViewer offers many ways to remotely access a system. The most common I have numbered and screenshotted below.

1. This is the fixed password. You can set this to whatever you want, there's also the ability to "manage additional passwords" so you don't have to give yours out if you want to give someone else access. You want this to be very secure since it never changes. Looks like this is what was compromised in your situation.
2. This is the easy access option which allows you to remotely control a system without needing to set a password in options 1 & 3. It instead allows you to remote into the system using your TeamViewer.com account as the authentication method.
3. This is that random password you see on the main Remote Control area of the app.

 

Let me know if you have more questions.

Cheers!
-Josh

Nightingale1989

Well, it's a little confusing, too many passwords) And yes, i think you right. Thanks for answers. I will try to understand how my password could have been compromised.