Home › Guide › Remove remote-access tools

AnyDesk & TeamViewer scams: how to safely remove remote-access tools

Q: Is AnyDesk or TeamViewer a virus?

No — they're legitimate remote-support tools used by real IT teams. The problem is not the software; it's that a scammer talked you into installing it so they could control your computer. On your machine, after a scam, it should be removed.

The tools themselves are legitimate — the problem is a scammer used one to take control. Here's how to see what they installed and take back your computer.

By the EnvyForensics team · General guidance, reviewed 2026.

If a "technician" from a pop-up or phone call had you download a program so they could "help," it was almost certainly a remote-access tool: AnyDesk, TeamViewer, UltraViewer, Supremo, LogMeIn, or "Chrome Remote Desktop." These are real, trusted products used by legitimate IT teams every day — which is exactly why they don't trigger a virus warning. On your computer, after a scam, they're a door the scammer walked through.

How scammers use them

They direct you to a site, have you install the tool, and read you a code that grants them control. Then they often flip on "unattended access," so they can reconnect later without you approving it — and install a second or third tool as backup. That's the part that makes "I uninstalled it" risky.

Before anything else: disconnect from the internet (unplug the cable or turn off Wi-Fi). No remote tool can reach your computer while it's offline — this stops any active or scheduled connection immediately.

How to check what's installed

Installed programs — look for the tool names above (Windows: Settings › Apps).
Startup & background services — scammers set tools to launch automatically; a tool can run even if it's not in the visible list.
"Unattended access" settings inside the tool — a saved password or "allow unattended access" toggle means they can return silently.
Portable versions — some tools run without installing, so they won't appear in the normal apps list at all.

Removing them safely

Uninstall each tool you find, then check startup entries and services for leftovers. The honest limitation: because scammers rename things, use portable copies, and layer multiple tools, uninstalling the one you saw may not remove all of them. When money changed hands or your antivirus was disabled, the certain path is a full sweep of every tool and setting, or a clean wipe and reinstall.

Not sure you got them all?

We find every remote-access tool a scammer left — including the renamed and portable ones the app list hides — confirm what's still active, and lock out the callback.

See how it works

FAQ

Is AnyDesk or TeamViewer a virus?

No — they're legitimate remote-support tools. The issue is that a scammer used one to control your computer. After a scam, it should be removed from your machine.

If I uninstall the tool, am I safe?

Uninstalling the one you saw helps, but scammers usually install several and enable unattended access. A thorough sweep of every tool and setting — or a wipe — is what makes it certain.