Did an Unauthorized User Gain Access via TeamViewer?

Out of nowhere, my mouse suddenly began moving on my screen.  When I attempted to gain control, it was as if there was someone else also controlling my mouse. I powered off the WiFi on my laptop and immediately went to look at my TeamViewer log to see if I could find anything. Here's what I found in my log shortly before I disconnected my adatper.

2017/10/09 11:07:28.707  6056  6060 G1   CMainWindow::OnSessionChange [OnlineState] 7
2017/10/09 11:07:28.741  2844  2848 S0   SERVICE_CONTROL_SESSIONCHANGE session=1, statusCode=WTS_SESSION_LOCK
2017/10/09 11:08:14.791  2844  2848 S0   SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:08:14.792  2844  2848 S0   SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:08:30.003  2844  2848 S0   SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:08:30.005  2844  2848 S0   SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:10:18.929  2844  2848 S0   SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:10:18.930  2844  2848 S0   SERVICE_CONTROL_POWEREVENT 32787
2017/10/09 11:10:21.735  6056  6060 G1   CMainWindow::OnSessionChange [OnlineState] 8
2017/10/09 11:10:21.769  2844  2848 S0   SERVICE_CONTROL_SESSIONCHANGE session=1, statusCode=WTS_SESSION_UNLOCK
2017/10/09 11:48:40.395  2844  3652 S0!  CTcpConnection[13]::KeepAliveBeepTimerHandler(): No KeepAliveBeepAnswer was sent. Stopping connection.
2017/10/09 11:48:50.522  2844  3652 S0   CarrierReconnectLogic[13]::StartReconnectAsClientInternal: TCP connect successful
2017/10/09 11:48:50.549  2844  3644 S0   TcpCarrier[13]::ProcessReconnectToSessionAnswer(): Reconnect was successful with client 936696466. SendQueueEmpty: 1
2017/10/09 11:48:50.549  2844  3644 S0   TcpCarrierBase[13]::ResendSendCache(): SendCacheSize 0 (0 Bytes) [0,0]
2017/10/09 11:50:56.693  2844  4796 S0   NetWatchdog: Internet is now disconnected
2017/10/09 11:50:56.696  2844  3640 S0   CKeepAliveClientClient::HandleStartKeepAlive: doing nothing, state = 4
2017/10/09 11:50:57.825  2844  4796 S0   NetWatchdog: Completely disconnected. Going offline.
2017/10/09 11:50:57.825  2844  4796 S0   NetWatchdog: LAN is now disconnected

Comments

  • Jonathan
    Jonathan Posts: 242 [Former Staff]

    Hi Jarbow,

    Thanks for your post!

    Sorry to hear that someone may have connected to your computer without your consent.

    We ask that you please contact our Privacy team at privacy@teamviewer.com so that we can assist further with your inquiry.

    All the best,

    Jonathan

  • JarBow
    JarBow Posts: 2

    Thanks for your reply. Are you able to gather anything from the logs that I pasted above? I uninstalled TeamViewer after copying this snippet, so I'm pretty sure my logs on my computer -- which I'm not in front of at the moment -- have been deleted.

  • Yes, I have that sequence prior to access and also the identifiers, I have sent the files to Teamviewer and the response has been, let's say, disappointing, they send me to the police and they point out that my password may not be strong enough or I may have granted the access