Found Teamviewer on my Mac, but I didn't install it

wilddog

I'm a developer... I have found an installation of Teamviewer on my mac but I didn't install it. I am the only user on this mac.

Teamviewer does not show up in Applications. I found it when the computer was running slow and checked the logs...

A few lines from the logs:

[FB7D36FA-1F35-3A7A-B0FF-B1FAA70E4ED5]: 0x2

Jan 25 09:21:46 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.desktop[17044]): Service exited with abnormal code: 78

Jan 25 09:21:46 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.desktop): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.

Jan 25 09:21:51 Davids-iMac com.apple.xpc.launchd[1] (com.apple.mdworker.shared.01000000-0400-0000-0000-000000000000[16987]): Service exited due to SIGKILL | sent by mds[162]

Jan 25 09:21:51 Davids-iMac com.apple.xpc.launchd[1] (com.apple.mdworker.shared.02000000-0600-0000-0000-000000000000[16985]): Service exited due to SIGKILL | sent by mds[162]

Jan 25 09:21:52 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.desktop[17045]): Service could not initialize: Unable to set current working directory. error = 2: No such file or directory, path = /Applications/TeamViewer.app/Contents/Helpers: 19H1615: xpcproxy + 14537 [673][FB7D36FA-1F35-3A7A-B0FF-B1FAA70E4ED5]: 0x2

Jan 25 09:21:52 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.desktop[17045]): Service exited with abnormal code: 78

Jan 25 09:21:52 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.desktop): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.

Jan 25 09:21:52 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.service[17046]): Service could not initialize: Unable to set current working directory. error = 2: No such file or directory, path = /Applications/TeamViewer.app/Contents/MacOS: 19H1615: xpcproxy + 14537 [673][FB7D36FA-1F35-3A7A-B0FF-B1FAA70E4ED5]: 0x2

Jan 25 09:21:52 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.service[17046]): Service exited with abnormal code: 78

Jan 25 09:21:52 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.service): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.

Jan 25 09:21:52 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.teamviewer[17047]): Service could not initialize: Unable to set current working directory. error = 2: No such file or directory, path = /Applications/TeamViewer.app/Contents/MacOS: 19H1615: xpcproxy + 14537 [673][FB7D36FA-1F35-3A7A-B0FF-B1FAA70E4ED5]: 0x2

Jan 25 09:21:52 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.teamviewer[17047]): Service exited with abnormal code: 78

Jan 25 09:21:52 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.teamviewer): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.

Jan 25 09:21:56 Davids-iMac com.apple.xpc.launchd[1] (com.teamviewer.desktop[17048]): Service could not initialize: Unable to set current working directory. error = 2: No such file or directory, path = /Applications/TeamViewer.app/Contents/Helpers: 19H1615: xpcproxy + 14537 [673][FB7D36FA-1F35-3A7A-B0FF-B1FAA70E4ED5]: 0x2

Searching Finder for 'Teamviewer' lists the following files and folders.

Is it possible that my network has been compromised and a hacker is using teamviewer on my mac? Is it possible that a hacker could access my computer with teamviewer without my knowledge?

How do I get rid of it? Is it safe to just delete these files?

JoshP

Hello @wilddog

Thank you for your post, and welcome to the TeamViewer community.

First and foremost, please know it is not possible for someone to access your computer without your knowledge via TeamViewer.

With any TeamViewer connection, a tray appears on the remote computer with the TeamViewer branding, and includes controls so that the remote user can disconnect or prevent control/access.

While this tray can be minimized, the TeamViewer logo still appears on the remote user's screen.

TeamViewer's default installation location is the Applications folder, but it is possible to use TeamViewer without installation, using the QuickSupport module - regardless, access still requires your consent or knowledge of the current random password and the TeamViewer ID of the device.

If TeamViewer is installed on your device, we always recommend using the built-in uninstall feature found in TeamViewer for Macs:

https://community.teamviewer.com/English/kb/articles/4165-uninstall-teamviewer-on-macos

There are some files that macOS requires from all applications that, if deleted incorrectly, can cause issues on subsequent boot-ups (you can read more about the occurrences, and the resolution offered by our staff, here). Therefore we always recommend uninstalling using the methods you can find in the above article.

In any case, if you suspect someone may have accessed your device via TeamViewer, you can provide more information (and logs) directly, by emailing privacy@TeamViewer.com

I hope this helps clarify for you!