Did an Unauthorized User Gain Access via TeamViewer?
Out of nowhere, my mouse suddenly began moving on my screen. When I attempted to gain control, it was as if there was someone else also controlling my mouse. I powered off the WiFi on my laptop and immediately went to look at my TeamViewer log to see if I could find anything. Here's what I found in my log shortly before I disconnected my adatper.
2017/10/09 11:07:28.707 6056 6060 G1 CMainWindow::OnSessionChange [OnlineState] 7
2017/10/09 11:07:28.741 2844 2848 S0 SERVICE_CONTROL_SESSIONCHANGE session=1, statusCode=WTS_SESSION_LOCK
2017/10/09 11:08:14.791 2844 2848 S0 SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:08:14.792 2844 2848 S0 SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:08:30.003 2844 2848 S0 SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:08:30.005 2844 2848 S0 SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:10:18.929 2844 2848 S0 SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:10:18.930 2844 2848 S0 SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:10:21.735 6056 6060 G1 CMainWindow::OnSessionChange [OnlineState] 8
2017/10/09 11:10:21.769 2844 2848 S0 SERVICE_CONTROL_SESSIONCHANGE session=1, statusCode=WTS_SESSION_UNLOCK
2017/10/09 11:48:40.395 2844 3652 S0! CTcpConnection[13]::KeepAliveBeepTimerHandler(): No KeepAliveBeepAnswer was sent. Stopping connection.
2017/10/09 11:48:50.522 2844 3652 S0 CarrierReconnectLogic[13]::StartReconnectAsClientInternal: TCP connect successful
2017/10/09 11:48:50.549 2844 3644 S0 TcpCarrier[13]::ProcessReconnectToSessionAnswer(): Reconnect was successful with client 936696466. SendQueueEmpty: 1
2017/10/09 11:48:50.549 2844 3644 S0 TcpCarrierBase[13]::ResendSendCache(): SendCacheSize 0 (0 Bytes) [0,0]
2017/10/09 11:50:56.693 2844 4796 S0 NetWatchdog: Internet is now disconnected
2017/10/09 11:50:56.696 2844 3640 S0 CKeepAliveClientClient::HandleStartKeepAlive: doing nothing, state = 4
2017/10/09 11:50:57.825 2844 4796 S0 NetWatchdog: Completely disconnected. Going offline.
2017/10/09 11:50:57.825 2844 4796 S0 NetWatchdog: LAN is now disconnected
Comments
-
Hi Jarbow,
Thanks for your post!
Sorry to hear that someone may have connected to your computer without your consent.
We ask that you please contact our Privacy team at privacy@teamviewer.com so that we can assist further with your inquiry.
All the best,
Jonathan
0 -
Thanks for your reply. Are you able to gather anything from the logs that I pasted above? I uninstalled TeamViewer after copying this snippet, so I'm pretty sure my logs on my computer -- which I'm not in front of at the moment -- have been deleted.
0 -
Yes, I have that sequence prior to access and also the identifiers, I have sent the files to Teamviewer and the response has been, let's say, disappointing, they send me to the police and they point out that my password may not be strong enough or I may have granted the access
0