TeamViewer pops-up Awaiting Authentication by itself?

Options
Labsy
Labsy Posts: 40 ✭✭

Hi,

this is my 5th time writing the same post. It looks like this Board has some BUG, because as soon as I add <CODE> to the post, it get's deleted. Nevermind...let's get to the question:

I have TeamViewer HOST installed on 3 of my PCs (2 offices and 1 at home). Weird thing is happening from time to time, when I work on some of my computers on some other application, like Word or Outlook or something...then all of the sudden TeamViewer window pops-up from behind into focus, and I can see in bottom line: Awaiting Authentication...
Then after few seconds it gets denied: Authentication Denied.

What could that be?

  • Is it me accidentally hitting some CTRL or ALT something keys combination to trigger this behaviour? I tried ALT+TAB to TeamViewer window, then hitting ENTER, but nothing happens.
  • Is is some CLIENT compromised, trying to access my HOST install from customized CLIENT install?
  • Is it some CLIENT maybe just rebooted in the middle of the night, and it authenticates somehow when it boots up again?
  • Or just and internet connection hiccup, on my side or at one of the clients?
  • Hacking attempt?
  • Something else?

Here is the LOG from my HOST, when it happened last time. IDs and hashes are changed to protect privacy (I will NOT use <CODE> block, because if I do so, the post is being deleted instantly):

2020/05/03 03:50:10.228 5448 6716 S0 Activating Router carrier
2020/05/03 03:50:10.228 5448 6716 S0 CommandHandlerRouting[15]::CreatePassiveSession(): incoming session via PL-WAW-ANX-R005.teamviewer.com, protocol Tcp
2020/05/03 03:50:10.262 5448 6716 S0 CTcpConnectionBase[28]::ConnectEndpoint(): Connecting to endpoint 217.146.13.136:5938
2020/05/03 03:50:10.397 5448 6716 S0 CToken::GetSystemToken() set session 1
2020/05/03 03:50:10.405 5448 6716 S0 ProcessControlBase[4]: Start Desktop process in session 1, pid 26636
2020/05/03 03:50:10.695 5448 6716 S0 ConnectionGuard: incoming remote control in sessions: 1(1)
2020/05/03 03:50:10.696 11924 12404 G1 Connection incoming, sessionID = -**Please do not post TeamViewer IDs**
2020/05/03 03:50:10.722 5448 6728 S0 AcceptServer::HandleAccept: new connection from 127.0.0.1:63852
2020/05/03 03:50:10.725 11924 12396 G1 Received Control_InitIPC processtype=4
2020/05/03 03:50:10.766 5448 6724 S0 ProcessControlBase[4]::ProcessConnected: Process pid 26636 in session 1 connected
2020/05/03 03:50:10.479 26636 3228 D1 Logger started.
2020/05/03 03:50:10.670 26636 3228 D1 TeamViewerDesktop started, PID=26636
2020/05/03 03:50:10.676 26636 3228 D1 Monitors: AOC Q3279WG5B, \\.\DISPLAY1, 2560x1440 (0,0), flags=3, dpi=96
2020/05/03 03:50:10.681 26636 25316 D1 WindowsDesktopDispatcherThread::InitThread(default): ChangeThreadDesktop(): SetThreadDesktop to default successful
2020/05/03 03:50:10.682 26636 23692 D1 WindowsDesktopDispatcherThread::InitThread(winlogon): ChangeThreadDesktop(): SetThreadDesktop to winlogon successful
2020/05/03 03:50:10.682 26636 19872 D1 WindowsDesktopDispatcherThread::InitThread(default): ChangeThreadDesktop(): SetThreadDesktop to default successful
2020/05/03 03:50:10.683 26636 29044 D1 WindowsDesktopDispatcherThread::InitThread(winlogon): ChangeThreadDesktop(): SetThreadDesktop to winlogon successful
2020/05/03 03:50:10.684 26636 3228 D1 Changing keyboard layout to: 04240424
2020/05/03 03:50:10.694 26636 3228 D1 MachineHooks: Initialized Shm
2020/05/03 03:50:10.694 26636 3228 D1 MachineHooks: refcount = 2
2020/05/03 03:50:10.694 26636 3228 D1 MachineHooks: x64 Machine detected
2020/05/03 03:50:10.694 26636 3228 D1 RemoveLoginScreenWallpaper: inputDesktopName=Default
2020/05/03 03:50:10.718 26636 3228 D1 InterProcessBase::StartTcpCommunicationInternal(): setting m_NetworkConnector to new TCP connector
2020/05/03 03:50:10.721 26636 3228 D1 Opening local TCP connection to 127.0.0.1:5939
2020/05/03 03:50:10.722 26636 20536 D1 Local TCP connection established
2020/05/03 03:50:10.736 26636 28588 D1 SettingsIPCReception receive a SYNCHRONISE Settings command : UserSettings
2020/05/03 03:50:10.744 26636 28588 D1 Received Control_InitIPC_Response processtype=1
2020/05/03 03:50:10.744 26636 28588 D1 Received Control_InitIPC_Response runningProcesses=7
2020/05/03 03:50:10.762 26636 28588 D1 Received Control_InitIPC_Response processtype=2
2020/05/03 03:50:10.762 26636 28588 D1 Control_InitIPC_Response: all processes 7 completely initialized
2020/05/03 03:50:10.826 26636 3228 D1 InterProcessBase::SecureNetwork created
2020/05/03 03:50:10.835 26636 28260 D1 LoginDesktopWindowImpl::GuiThreadFunction(): ChangeThreadDesktop(): SetThreadDesktop to winlogon successful
2020/05/03 03:50:10.836 26636 20536 D1!! SessionManagerDesktop::SessionTerminate: no session with ID=-**Please do not post TeamViewer IDs**, aborting logins
2020/05/03 03:50:10.836 26636 20536 D1 Connection incoming, sessionID = -**Please do not post TeamViewer IDs**
2020/05/03 03:50:10.836 26636 20536 D1!! InterProcessBase::ProcessControlCommand Command 39 not handled
2020/05/03 03:50:10.836 26636 25912 D1 CLogin::run()
2020/05/03 03:50:10.836 26636 20536 D1 IpcRouterClock: received router time: 20200503T015011.521102
2020/05/03 03:50:10.836 26636 25912 D1 CLogin::NegotiateVersionServer()
2020/05/03 03:50:10.837 5448 6716 S0 LegacyDataCmdSender[15]::SendAllData(): encryption not ready!
2020/05/03 03:50:11.342 5448 6728 S0 Negotiating session encryption: client hello received from **Please do not post TeamViewer IDs**, RSA key length = 2048
2020/05/03 03:50:11.342 5448 6728 S0 Negotiating session encryption: client hello received from **Please do not post TeamViewer IDs**, RSA key length = 2048
2020/05/03 03:50:11.348 5448 6716 S0 Negotiating session encryption: server hello sent
2020/05/03 03:50:11.944 5448 6724 S0 Negotiating session encryption: client handshake received
2020/05/03 03:50:11.944 5448 6724 S0 Negotiating session encryption: client handshake received
2020/05/03 03:50:11.951 5448 6724 S0 Negotiating session encryption: server handshake sent, encryption established with AES key length 256
2020/05/03 03:50:11.951 5448 6724 S0 NegotiateEncryptionV2::CreateEncryption: handshake successful, local fingerprint: SHA256:Lh3ht6%6t6/9H3Zd456hD7u1r7ZKRjM2FPcmElzWNy8W4, remote fingerprint SHA256:+Vm9/1j/CqZnjOH+G7863$hSQ2M1k-dO85gkoFaFtbSNI
2020/05/03 03:50:12.348 26636 25912 D1 CLoginServer::CheckIfConnectionIsAllowed()
2020/05/03 03:50:12.350 26636 25912 D1 LoginServer::runServer: using condition set: {}
2020/05/03 03:50:12.350 26636 25912 D1 CLoginServer::AuthenticateServer()
2020/05/03 03:50:12.354 5448 6724 S0 AuthenticationBlocker::Allocate: allocate ok for DyngateID **Please do not post TeamViewer IDs**, attempt number 1
2020/05/03 03:50:13.717 26636 25912 D1!! CAuthenticationSRP_Passive, Step_Receive_VerifyClientSecret: clientSecret!=serverSecret
2020/05/03 03:50:13.717 26636 25912 D1 AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using dynamic password was denied
2020/05/03 03:50:14.516 26636 25912 D1!! CAuthenticationSRP_Passive, Step_Receive_VerifyClientSecret: clientSecret!=serverSecret
2020/05/03 03:50:14.516 26636 25912 D1 AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using fixed password was denied
2020/05/03 03:50:14.517 5448 6728 S0 AuthenticationBlocker::Allocate: allocate ok for DyngateID **Please do not post TeamViewer IDs**, attempt number 2
2020/05/03 03:50:15.867 26636 25912 D1!! CAuthenticationSRP_Passive, Step_Receive_VerifyClientSecret: clientSecret!=serverSecret
2020/05/03 03:50:15.867 26636 25912 D1 AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using dynamic password was denied
2020/05/03 03:50:16.662 26636 25912 D1!! CAuthenticationSRP_Passive, Step_Receive_VerifyClientSecret: clientSecret!=serverSecret
2020/05/03 03:50:16.662 26636 25912 D1 AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using fixed password was denied
2020/05/03 03:50:16.662 5448 6716 S0 AuthenticationBlocker::Allocate: allocate ok for DyngateID **Please do not post TeamViewer IDs**, attempt number 3
2020/05/03 03:50:18.056 26636 25912 D1!! CAuthenticationSRP_Passive, Step_Receive_VerifyClientSecret: clientSecret!=serverSecret
2020/05/03 03:50:18.056 26636 25912 D1 AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using dynamic password was denied
2020/05/03 03:50:18.858 26636 25912 D1!! CAuthenticationSRP_Passive, Step_Receive_VerifyClientSecret: clientSecret!=serverSecret
2020/05/03 03:50:18.858 26636 25912 D1 AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using fixed password was denied
2020/05/03 03:50:18.858 5448 6728 S0 AuthenticationBlocker::Allocate: allocate ok for DyngateID **Please do not post TeamViewer IDs**, attempt number 4
2020/05/03 03:50:20.190 26636 25912 D1!! CAuthenticationSRP_Passive, Step_Receive_VerifyClientSecret: clientSecret!=serverSecret
2020/05/03 03:50:20.190 26636 25912 D1 AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using dynamic password was denied
2020/05/03 03:50:20.989 26636 25912 D1!! CAuthenticationSRP_Passive, Step_Receive_VerifyClientSecret: clientSecret!=serverSecret
2020/05/03 03:50:20.989 26636 25912 D1 AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using fixed password was denied
2020/05/03 03:50:20.989 5448 6732 S0 AuthenticationBlocker::Allocate: allocate ok for DyngateID **Please do not post TeamViewer IDs**, final attempt, now blocked for 30s
2020/05/03 03:50:22.359 26636 25912 D1!! CAuthenticationSRP_Passive, Step_Receive_VerifyClientSecret: clientSecret!=serverSecret
2020/05/03 03:50:22.359 26636 25912 D1 AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using dynamic password was denied
2020/05/03 03:50:23.178 26636 25912 D1!! CAuthenticationSRP_Passive, Step_Receive_VerifyClientSecret: clientSecret!=serverSecret
2020/05/03 03:50:23.178 26636 25912 D1 AuthenticationPasswordLogin_Passive::RunAuthenticationMethod: authentication using fixed password was denied
2020/05/03 03:50:23.178 5448 6736 S0! AuthenticationBlocker::Allocate: allocate denied for DyngateID **Please do not post TeamViewer IDs**, still blocked for 28s
2020/05/03 03:50:23.178 26636 25912 D1 CLoginServer::RunMainAuthenticationLoop: authentication failed
2020/05/03 03:50:23.179 26636 25912 D1 CLoginServer::runServer: AuthenticateServer failed, result=1
2020/05/03 03:50:23.179 26636 25912 D1 CLogin::run() leave
2020/05/03 03:50:23.179 26636 25912 D1 tvhelper::CThread::weakJoin - thread {Not-any-thread} has succesfully detached itself
2020/05/03 03:50:23.223 5448 6736 S0 ConnectionGuard: no restrictions
2020/05/03 03:50:23.223 26636 16740 D1!! SessionManagerDesktop::SessionTerminate: no session with ID=-**Please do not post TeamViewer IDs**, aborting logins
2020/05/03 03:50:23.223 5448 6736 S0 SessionStatistics[15] Session to **Please do not post TeamViewer IDs** ended. Estimated capacity=3390kBit/s, Latency=0ms
2020/05/03 03:50:23.224 5448 6736 S0 DesktopProcessControl::StopDesktopProcess terminate process 26636 in session 1
2020/05/03 03:50:23.224 5448 6736 S0 InterProcessNetwork::TerminateProcessInSession session=1, ptype=4
2020/05/03 03:50:23.224 26636 16740 D1 Received Control_TerminateProcess
2020/05/03 03:50:23.229 26636 3228 D1 tvdesktop::InputBlocker::Shutdown(false)
2020/05/03 03:50:23.229 26636 3228 D1 tvdesktop::InputBlocker::EnableInputAsync(true)
2020/05/03 03:50:23.229 26636 3228 D1 tvdesktop::UserInteractionHelper::SendInputChangedCmd : inputDisabled:0; blackScreenEnabled: 0
2020/05/03 03:50:23.229 26636 3228 D1 interprocessbase::SecureNetwork destroyed
2020/05/03 03:50:23.230 26636 3228 D1 InterProcessBase::ShutdownIPC: Shutdown IPC
2020/05/03 03:50:23.230 5448 6716 S0 InterProcessNetwork: Received DisconnectIPC from processID 26636 (ProcessType: 4 in Session 1) with reason 4
2020/05/03 03:50:23.230 5448 6716 S0 DesktopProcessControl::ProcessDisconnected: terminating process pid 26636 in session 1 disconnected
2020/05/03 03:50:23.230 26636 16740 D1 TcpProcessConnector::HandleRead(): Socket gracefully closed (PID=5448)
2020/05/03 03:50:23.230 26636 16740 D1 TcpProcessConnector::CloseConnection(): PID=5448
2020/05/03 03:50:23.230 26636 16740 D1 InterProcessBase::EventFunctionInternal(): IPC-Connection Closed
2020/05/03 03:50:23.230 26636 16740 D1 TcpProcessConnector::CloseConnection(): PID=5448
2020/05/03 03:50:23.230 5448 6716 S0 TcpProcessConnector::HandleRead(): Socket gracefully closed (PID=26636)
2020/05/03 03:50:23.230 5448 6716 S0 TcpProcessConnector::CloseConnection(): PID=26636
2020/05/03 03:50:23.230 5448 6716 S0 InterProcessNetwork::ProcessDisconnected(): ConnectionClosed session=1 ptype=4
2020/05/03 03:50:23.233 26636 25316 D1 ~MachineHooks: refcount = 1
2020/05/03 03:50:23.246 5448 2160 S0 DesktopProcessControl::OnProcessTerminated: Process 26636 in session 1 has terminated
2020/05/03 03:50:23.246 5448 6736 S0 SecureNetworkConnection::SendCallbackHandler(): [ remoteID: **Please do not post TeamViewer IDs** connection: **Please do not post TeamViewer IDs** remoteConnection: **Please do not post TeamViewer IDs** ], Error: SecureNetwork (Connection not found)