So This morning my son thought I was on remotely accessing my wife's machine but I wasn't. Fortunately he called me and I told him to pull the Ethernet Cable and Leave the PC alone.
I was able to gain enough info that the attacker accessed my wife's amazon account which she had the PW saved (shakes head) and they ordered 8,000 USD worth of stuff. I was able to get it canceled but I did file a police report and they want the access logs to help them track down the attacker. Since TeamViewer uses Tunneling my router logs are not very helpful without the TeamViewer logs.
I managed to get the name and phone number of the person who intended to pick up the goods in Maryland but that's not enough lol. How do I find my TeamViewer logs that show when someone connected to my PC and from where (IP ADDR)?