Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Teamviewer scam - beware

23 Dec 2013   #131
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by ang View Post
... He had already downloaded TeamViewer and given them the ID and passcode.
~~~
And if it is on the computer, can they still access the computer at any time or does TeamViewer generate a new passcode once the computer has been shut down?
~~~
I'm also not in the same state anymore, so I'm not able to look at the computer myself.) I'd appreciate any help you can offer.

Thank you!
Welcome to the Seven Forums.

As others have mentioned: the password/passcode that TeamViewer creates is indeed a temporary one. So, yes, TeamViewer generates a new password/passcode each time that TeamViewer starts. You don't even have to shut the computer down or even log off, just exit TeamViewer. When you restart TeamViewer, it will have a new password/passcode. Also, a remote person cannot run thru all 9999 possible codes to get back in. TeamViewer prevents such action really well.

However, TeamViewer can be configured to start whenever Windows starts. If TeamViewer is set to do this, it will ask for a new (permanent) password. The scammers might have set such a password and told TeamViewer to always start. It sounds like the Geek Squad uninstalled TeamViewer for you. Unfortunately, we do not know if the Geek Squad told the uninstall process to remove TeamViewer's settings. If TeamViewer's settings remain on the computer, then those old settings would be used again if TeamViewer ever got installed again. (The computer ID will most likely remain the same each time TeamViewer is installed.)

I would suggest that you call and have them re-install TeamViewer. Then you install TeamViewer for mac (Free TeamViewer Download for Mac). When they run into trouble, you can see what they see and maybe help them out a bit. You might not be totally up to speed on various Windows things, but we are here to help you with that.

If they install TeamViewer again, ask them if the password/passcode is four numbers. If it is, then TeamViewer is NOT set to start each time Windows starts. If TeamViewer is set to always start, then the temporary password/passcode that users see on the main TeamViewer screen will be changed to use 6 characters (a mixture of numbers and letters).

If you set TeamViewer to run all of the time on their computer - then you connect (and control it) at your convenience - thus allowing us to help you to help them. If you put TeamViewer in this mode, you will be selecting a password of your own to use. Please pick a good one :-)


My System SpecsSystem Spec
.
23 Dec 2013   #132
ang

Windows 7
 
 

Thanks so much for the replies! That eases my mind.

I realize TeamViewer is a legitimate program, which is why I figured the Best Buy team would not have removed it. I just wasn't sure if it generated new passwords or if they could easily reconnect using the old one. When the scammer was controlling the computer, I clicked on a "terminate this session" or something similar, and it was just automatically reconnecting. That was when I turned off the computer.

Thanks for the warning about the Mac. I know they're no longer safe to viruses and scams. Though had I been the recipient of this phone call, I would have immediately known it was a scam and hung up. I just mentioned it because I've been out of the Windows world since XP and there have been a lot of changes with each subsequent operating system. I'm still quite unfamiliar with Windows 7 and where to look for installed programs.
My System SpecsSystem Spec
23 Dec 2013   #133
ang

Windows 7
 
 

Thank you Username Issues. I will call and have them re-install it and take a look at the passcode.
My System SpecsSystem Spec
.

23 Dec 2013   #134
ang

Windows 7
 
 

Actually, I just thought of something else. If he clicked "Join Remote Session" and only downloaded the Quick Support file instead of clicking the large Download button and installing the full program, that could be the reason it didn't show up in the program files. If he was just using the Quick Support, it couldn't be configured to start when Windows starts, could it?
My System SpecsSystem Spec
23 Dec 2013   #135
UsernameIssues

W7 Pro SP1 64bit
 
 

My guess is that Geek Squad uninstalled TeamViewer once you told them that story about the scam.

You are correct, TeamViewer's QuickSupport app does not show in the list of installed apps and cannot (easily*) be configured to start when Windows starts... but it also does not go away on its own. The QuickSupport app installs into this folder...
C:\Users\username\AppData\Local\Temp\TeamViewer\Version9
...and remains there until it is deleted.

I would think that the Geek Squad's automated tools would have emptied the temp files.

*In theory, Windows could be told to automatically start this app in many ways - but this is very unlikely to have been done by the scammers - given their boiler room style of operating. They don't wish to spend much time with each user. They just want the money and run. Also, as far as I know, TeamViewer's QuickSupport app cannot be set to use only one password.


Edit: I should have offered a reason why TeamViewer does not remove its QuickSupport files from the temp folder once the QuickSupport app exits. The support tech (or scammer) using the TeamViewer can tell the remote computer (which is using the QuickSupport app) to reboot and automatically reconnect the remote control session. It can also reboot the computer into the safe mode and automatically reconnect the remote control session. One manual reboot by the computer being worked on will stop subsequent automatic reconnects by the QuickSupport app (or by the full TeamViewer app).
My System SpecsSystem Spec
23 Dec 2013   #136
robinb9

Windows 7 Pro 32/64 bit and Windows 10 Pro 32 Bit/64bit
 
 

That is true and not, you can set teamviewer to have a static password so everythime you log on, you do not have to put a new password in. As long as it is out of program and features it is gone but i would recomment your parents to change the computers password immediately just in case they put a program onthrough teamviwer and they are controlling it through this program
My System SpecsSystem Spec
24 Dec 2013   #137
UsernameIssues

W7 Pro SP1 64bit
 
 

Was this...
Quote   Quote: Originally Posted by robinb9 View Post
That is true and not, you can set teamviewer to have a static password so everythime you log on, you do not have to put a new password in. As long as it is out of program and features it is gone but i would recomment your parents to change the computers password immediately just in case they put a program onthrough teamviwer and they are controlling it through this program
...in reference to to me saying this:
Also, as far as I know, TeamViewer's QuickSupport app cannot be set to use only one password.

Our new member (ang) first asked about TeamViewer in post #128 and how it acts on the computer being worked on. Britton30 answered ang's question while I was composing my long post and testing things :-)

Then ang asked how TeamViewer's QuickSupport app would act on the computer being worked on. See post #134. As far as I know, TeamViewer's QuickSupport app cannot be set to make use of a static password. If this can be done, I would love to know how since TeamViewer's QuickSupport app has a much smaller footprint than the full install of TeamViewer. I would love to only install TeamViewer's QuickSupport app on the dozen's of computers that I support via remote control. As it is, I have TeamViewer's full app installed on each remote computer.


When the scammers took control of ang's parent's computer - they could have removed TeamViewer from the list of installed applications but not actually uninstalled it. ang wisely asked her parents to also look in the two program file areas. TeamViewer is nowhere to be found... so they are probably safe. I highly doubt that the scammers spend the time to walk their victims thru the process of installing TeamViewer into a non-standard folder location.

The scammers have little interest in breaking back in later. Their goal is to swindle the end user and move on to the next potential victim. Of course, a scammer could be working two jobs:
1) scamming folks
2) setting up bots
:-(


Thanks for suggesting that the user account password be changed. I should have thought of that :-)
My System SpecsSystem Spec
24 Dec 2013   #138
robinb9

Windows 7 Pro 32/64 bit and Windows 10 Pro 32 Bit/64bit
 
 

I have seen this on a clients computer and others i have come across, where the scammer convinces the person to download teamviwer, and walks him thru set up to set it up as not a quick install but a full install. Once it is installed , the victim gives him the password. Then the scammer logs on, goes into the options and makes it a static password so it does not change each time and sets it to start up in windows. In one case the scammer put in a bot program which tracked everything my client was doing. He also planted a virus in to show my victim he was infected and he would remove it for him for $80 bucks. He then convinced him to set up a maintennace agreement to maintain (cough cough) his computer and keep it virus free.
How my client figured out something was wrong was that his tax refund never showed up. He had turbo tax on this computer and all his info was being used. And worse at the end of the month when he got his credit card statment there were amounts there that were incredibly wrong
He found me thru another client and when he told me what happened, he still had teamviwer on his machine, had no idea this was the culprit. I told him to un install teamviwer, at that time i had no idea there was another program on there tracking him because i had not seen the machine yet.
He uninstalled it but told me funny things were going on everytime he typed something. That gave me a clue something was still there
At this point i got his laptop and brought it to my office lab. I disconnected it from going on the internet.
Because i have been trained by the best hackers in the world (ages 12-18) i was able to dig down and find the bot program the scammer installed and removed it out of the registry and all the folders it was sitting in and in startup. I then changed his computer name and password.
But in his case only, because of this hidden program that was there, we oppened a new user account with a new name and password, i moved all his files into it, of couse all his programs were there, and deleted the original account once this was all set up.

My other client was a bit more lucky, teamviwer was not used but logmein was instead. (Same concept as teamviwer) only you need a email address and password but you can still con a user i to putting it on if you are convincing enough
I removed the program, checked to see if anything else was installed which it was not, checked for anything else and we changed his password on the computer only, just as a precaution

Unfortuntely those who are not computer savy, are very gulable and that is what these scammers are looking for
My System SpecsSystem Spec
24 Dec 2013   #139
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

Silver colander and strained Linguini! At least you sorted it
My System SpecsSystem Spec
24 Dec 2013   #140
RoasterMen

Windows 10 Pro 64-bit
 
 

My friend from Malaysia used Team Viewer to play GTA IV on my PC and works flawlessly except for the sutters with the internet connection
My System SpecsSystem Spec
Reply

 Teamviewer scam - beware




Thread Tools




Similar help and support threads
Thread Forum
TeamViewer
TeamViewer Installation & a few useful features This is one of my favorite programs for remote connection to other computers across the internet. Download the Free personal / non-commercial version. http://www.teamviewer.com/index.aspx
Software
TeamViewer v9.0.24322
TeamViewer 9.x New features: Open multiple connections in different tabs Open multiple remote sessions in tabs, just like in your browser. For an optimal overview, you can also open all the monitors belonging to a remote computer in separate tabs. You won't miss a thing because opened...
Software
How to use Teamviewer
Have just installed Teamviewer to help out my brother with his 7 set up and other apps but am not sure how to start a session. I don't necessarily want to join the TV forum just to find this out so does anyone in here use this app and id so could you give me some rough idea what I have to do...
Chillout Room
teamviewer issue
Hello. I am currently into my Fathers pc, via latest release teamviewer. I am trying to type his email password, in order to "re" download skype (as he can not remember his p/w. Nevertheless, when I type the "@" symbol, it comes up as " and the "#" comes up as some other symbol, that is not even on...
Software
TeamViewer
Since there is not TeamViewer forum that I can find I am asking my question here since it seems to be related to Windows 7. I can use TeamViewer to connect to a laptop from a Windows XP Pro machine and even a Ubuntu 10.04 machine, but after installing it on Windows 7, it will not connect to the...
Software


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:26.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App