Est-ce que c'est un hack ?
Bonjour,
J'avais depuis quelques temps un comportement bizarre sur mon pc après avoir installé TeamViewers et ne m'en être servi qu'une seule fois avec une personne de confiance le 15/09/2024. Je n'avais pas remarqué que ce charmant TeamViewer continue de lancer un service TeamViewer.exe en tâche de fond même sans qu'on ne l'utilise.
J'ai les logs suivant qui ont continué à s'écrire :
2024/09/17 10:55:42.737 6284 6936 0!! tvsettings::StorageEncrypted::LoadCryptedIntVector: loading of property BlacklistCompanyID failed, Errorcode=1008
2024/09/17 10:55:42.737 6284 6936 0 WinCryptoProtectData::DecryptData has successfully decrypted!
2024/09/17 10:55:43.083 6284 6936 S0 RemoteSettingsMDv2RelationshipWatchdog::HandleManagementChanged
2024/09/17 10:55:43.083 6284 6936 S0 RemoteSettingsMDv2RelationshipWatchdog: Device isn't a managed v2 device anymore
2024/09/17 10:55:43.083 6284 6936 S0 RemoteSettingsReception::HandleManagmentv2StatusChanged
2024/09/17 10:55:43.083 6284 7612 S0 RemoteSettingsStore: Cleanup all policies from version: 2
2024/09/17 10:55:43.083 6284 6936 S0! MDv2::ManagedDeviceController::UpdateDeviceFlags: cannot update flags for a device that is not managed
2024/09/17 10:55:43.084 6284 6936 S0 tvrmmonitoring::RemoteManagementCallbackHandler::RegisterRemoteManagementCallbacks::<lambda_4>::operator (): RMMonitoringMigrationPossible flag was set
_______________________________________________________________________
2024/10/04 03:31:02.867 5488 5492 0 Logger started.
2024/10/04 03:31:02.867 5488 6244 0 CustomConfigurationUpdaterImplWin::ReadInitialConfigurationId: Loading from machine
2024/10/04 03:31:02.914 5488 6244 0!! tvsettings::StorageEncrypted::LoadCryptedIntVector: loading of property BlacklistBuddyAccountID failed, Errorcode=1008
2024/10/04 03:31:02.914 5488 6244 0!! tvsettings::StorageEncrypted::LoadCryptedIntVector: loading of property BlacklistCompanyID failed, Errorcode=1008
2024/10/04 03:31:02.914 5488 6244 0 WinCryptoProtectData::DecryptData has successfully decrypted!
2024/10/04 03:31:02.914 5488 6244 0 WinCryptoProtectData::DecryptData has successfully decrypted!
2024/10/04 03:31:02.914 5488 6244 0!! tvsettings::StorageEncrypted::LoadCryptedIntVector: loading of property RemoteMonitoring_AckAccountIDs failed, Errorcode=1008
2024/10/04 03:31:02.914 5488 6244 0 WinCryptoProtectData::DecryptData has successfully decrypted!
2024/10/04 03:31:02.914 5488 6244 0!! tvsettings::StorageEncrypted::LoadCryptedIntVector: loading of property WhitelistBuddyAccountID failed, Errorcode=1008
2024/10/04 03:31:02.914 5488 6244 0!! tvsettings::StorageEncrypted::LoadCryptedIntVector: loading of property WhitelistCompanyID failed, Errorcode=1008
2024/10/04 03:31:03.071 5488 6244 0 SecureNetwork::InitSecureNetwork: loaded 4096 bit RSA private key with fingerprint SHA256:-
2024/10/04 03:31:03.071 5488 6244 0 InitializeRemoteAccessAPI
2024/10/04 03:31:03.071 5488 6244 0!! CreateFileWithPermissions: : An error occured while trying to remove the file: Errorcode: system:5, Errorcode=5
2024/10/04 03:31:03.087 5488 6244 0 QueryVPNRegKey: Subkey 'SYSTEM\CurrentControlSet\Control\Class{-}\Configuration' (17) has no 'MatchingDeviceID' entry. Continuing...
2024/10/04 03:31:03.087 5488 6244 0 QueryVPNRegKey: Subkey 'SYSTEM\CurrentControlSet\Control\Class{-}\Properties' (18) has no 'MatchingDeviceID' entry. Continuing...
2024/10/04 03:31:03.087 5488 6244 0 IdentityManagement: Load ManagerIDs from local Storage:
2024/10/04 03:31:03.087 5488 6244 0 InitializeDeviceManagementV2
2024/10/04 03:31:03.087 5488 6244 0 ManagedDeviceClientModule: Trigger Startup
2024/10/04 03:31:03.087 5488 6244 0 MDv2::ProviderRegistrationController::UpdateRegistration: device is offline
2024/10/04 03:31:03.087 5488 6244 0 ManagedDeviceClientModule::ManagedDeviceClientModule(): Started ManagedDevice V2 module
2024/10/04 03:31:03.087 5488 6244 0 BYOC::Initialize: ClientCertificateAuthentication feature is deactivated
2024/10/04 03:31:03.087 5488 5492 S0 SERVICE_CONTROL_POWEREVENT 32787
2024/10/04 03:31:03.087 5488 5492 S0 SERVICE_CONTROL_POWEREVENT 32787
2024/10/04 03:31:03.196 5488 6244 S0 DesiredServices: waiting for service winmgmt
2024/10/04 03:31:03.306 5488 6244 S0Start: 2024/10/04 03:31:03.275 (UTC+2:00)
2024/10/11 09:24:04.205 5476 6128 0!! tvsettings::StorageEncrypted::LoadCryptedIntVector: loading of property WhitelistCompanyID failed, Errorcode=1008
2024/10/11 09:24:04.369 5476 6128 0 SecureNetwork::InitSecureNetwork: loaded 4096 bit RSA private key with fingerprint SHA256:XXXXXX
2024/10/11 09:24:04.369 5476 6128 0 InitializeRemoteAccessAPI
2024/10/11 09:24:04.369 5476 6128 0!! CreateFileWithPermissions: : An error occured while trying to remove the file: Errorcode: system:5, Errorcode=5
2024/10/11 09:24:04.377 5476 6128 0 QueryVPNRegKey: Subkey 'SYSTEM\CurrentControlSet\Control\Class{-}\Configuration' (17) has no 'MatchingDeviceID' entry. Continuing...
2024/10/11 09:24:04.377 5476 6128 0 QueryVPNRegKey: Subkey 'SYSTEM\CurrentControlSet\Control\Class{-}\Properties' (18) has no 'MatchingDeviceID' entry. Continuing...
Si quelqu'un peut bien me confirmer ce que je pense déjà savoir … Je suis allé voir dans mes logs sur le site, il n'y a rien d'affiché … Pourtant …
