TeamViewer6_Logfile.log - Understand the Log

[allanc]

TeamViewer 6 was in the task tray of a Windows XP Home sp3 computer.
The person who uses this computer is new and the previous individual is not available to provide any information.

This person suspects that people possibly connected remotely prior to this computer prior to her starting this job.
I have located a TeamViewer6_Logfile.log of over 800Kb.
She would like me to review this log and determine which IP addresses connected into her computer, when and for long, etc.
She is not questioning whether the prior employee authorized the access, just which IP, dates, etc.

I have no experience with these logs.
I would appreciate any information as to which phrases I should for in this log and how to determine which IP, the date/time, length of connect and other relevant information that I can manually extract.

Thank you very much in advance as this information is critical and needs to be obtained in a timely fashion.

Allan C.

[allanc]

TeamViewer 6 was in the task tray of a Windows XP Home sp3 computer.
The person who uses this computer is new and the previous individual is not available to provide any information.

This person suspects that people possibly connected remotely prior to this computer prior to her starting this job.
I have located a TeamViewer6_Logfile.log of over 800Kb.
She would like me to review this log and determine which IP addresses connected into her computer, when and for long, etc.
She is not questioning whether the prior employee authorized the access, just which IP, dates, etc.

I have no experience with these logs.
I would appreciate any information as to which phrases I should for in this log and how to determine which IP, the date/time, length of connect and other relevant information that I can manually extract.

Thank you very much in advance as this information is critical and needs to be obtained in a timely fashion.

Allan C.

Does anyone have any knowledge of the contents of these logs ... please?

[MrData]

I would suggest starting with an empty log file (while the program is running, windows won't allow you to delete or rename the log file). If that isn't possible, just make a note of the last of the existing log file. Let the computer sit idle for a few hours, (with team viewer active but not being accessed by any other computers)  Check the log file for additional entries.   Look for 9 digit numbers that could be teamviewer id's.  Look for ip addresses also.
I wouldn't think there should be any activity in the log file if nobody is connecting.
This was my experience shortly after installing teamviewer
 I recently installed the TeamViewer host on my laptop.
When I finished I looked at the log file.  The last entry was the last configuration thing I did.   I let the computer sit for a few hours and then came back to look at the log.   It had grown many many more lines.  I found 3 different TeamViewer id numbers (###-###-###) that had apparently tried to get into my system.  Also found a couple of IP addresses.
This is the kind of thing that makes me question the security of this program.

Hoping someone can prove me wrong.

[allanc]

I would suggest starting with an empty log file (while the program is running, windows won't allow you to delete or rename the log file). If that isn't possible, just make a note of the last of the existing log file. Let the computer sit idle for a few hours, (with team viewer active but not being accessed by any other computers)  Check the log file for additional entries.   Look for 9 digit numbers that could be teamviewer id's.  Look for ip addresses also.
I wouldn't think there should be any activity in the log file if nobody is connecting.
This was my experience shortly after installing teamviewer
 I recently installed the TeamViewer host on my laptop.
When I finished I looked at the log file.  The last entry was the last configuration thing I did.   I let the computer sit for a few hours and then came back to look at the log.   It had grown many many more lines.  I found 3 different TeamViewer id numbers (###-###-###) that had apparently tried to get into my system.  Also found a couple of IP addresses.
This is the kind of thing that makes me question the security of this program.

Hoping someone can prove me wrong.

Thank you for your reply.
You said 'apparently tried'.
How can I determine if the attempt was successful or not?

[MrData]

Besides the logfile, there should be a CONNECTIONS_INCOMING.TXT which lists (oddly enough) the incoming connections.  Mine are all valid.
In my logfile I see what looks like a TV id # and something like CMD=BUDDY -- don't know if another user can request to be your "buddy" like on faceybook.  I added the TV id #'s I found to the blacklist.  Not sure if that will do anything as it doesn't appear they're getting thru anyway.   Sure would like someone to explain what's going on.

[allanc]

Besides the logfile, there should be a CONNECTIONS_INCOMING.TXT which lists (oddly enough) the incoming connections.  Mine are all valid.
In my logfile I see what looks like a TV id # and something like CMD=BUDDY -- don't know if another user can request to be your "buddy" like on faceybook.  I added the TV id #'s I found to the blacklist.  Not sure if that will do anything as it doesn't appear they're getting thru anyway.   Sure would like someone to explain what's going on.

The software (and directory) was deleted and I did not notice the incoming.txt file.
To compound the problem, I cannot ask for support officially (by opening a ticket) because they were using the free version.
I have searched for a list that describes the contents of the TeamViewer log for days without success.
Do you have access to a section of this WEB site that would describe the contents of the log file by any chance?
Or, possibly know someone else who does?
Thank you in advance.

[MrData]

Looked around in their manual and knowledge base FAQs.  Couldn't find anything related to the logfile.
I have no more access to their website than you have, I'm a new user myself. 
I hope there is someone on this forum that has a little insight into this program.

[allanc]

Looked around in their manual and knowledge base FAQs.  Couldn't find anything related to the logfile.
I have no more access to their website than you have, I'm a new user myself. 
I hope there is someone on this forum that has a little insight into this program.

Thank you.
I *do* appreciate your effort.