These images show the problem set I'm trying to better understand. https://i.postimg.cc/dQkdv8d5/Clipboard-11-22-2024.jpg https://i.postimg.cc/XYYBHhfD/Clipboard-11-22-2024a.jpg https://i.postimg.cc/vm0HkHvJ/Clipboard-11-22-2024b.jpg
About a week ago I needed to be on a Microsoft Teams meeting initiated by someone else so I didn't need a Microsoft login - just the meeting ID & passcode and that worked fine until... I rebooted.
Now... every single time I reboot I get a full screen advertisement for "Everyone together in Teams" coming up "Stay connected and organized across work, school and life" which I don't want to come up (and which I don't see any setting in it to turn off).
All I can do at that window is sign in or join a meeting or X the window.
For a week I've been X'ing the window but I really need it to stop that.
Startup sentinel indicates bastards aren't using a normal startup method. Process explorer shows that it's just one an executable running (I think). TeamViewer_Service.exe Process explorer doesn't have the permissions to rightclick kill process.
Process explorer indicates it's somehow using this registry key. HKLM\System\CurrentControlSet\Services\TeamViewer
That key is complex such that I do not understand its implications.
Process explorer runs a search for you which found this which says keep it. https://malwaretips.com/blogs/teamviewer_service-exe-what-it-is-should-i-remove-it/
Services.msc tells me it's a running service set to Automatic start.
I set it to manual start just now (which should stop the autostart).
My question is why didn't startup sentinel show this as an autotart?
Startup sentinel indicates bastards aren't using a normal startup method. Process explorer shows that it's just one an executable running (I think). TeamViewer_Service.exe Process explorer doesn't have the permissions to rightclick kill process.
Now... every single time I reboot I get a full screen advertisement for "Everyone together in Teams" coming up "Stay connected and organized across work, school and life" which I don't want to come up (and which I don't see any setting in it to turn off).
These images show the problem set I'm trying to better understand. https://i.postimg.cc/dQkdv8d5/Clipboard-11-22-2024.jpg https://i.postimg.cc/XYYBHhfD/Clipboard-11-22-2024a.jpg https://i.postimg.cc/vm0HkHvJ/Clipboard-11-22-2024b.jpg
About a week ago I needed to be on a Microsoft Teams meeting initiated by someone else so I didn't need a Microsoft login - just the meeting ID & passcode and that worked fine until... I rebooted.
Now... every single time I reboot I get a full screen advertisement for "Everyone together in Teams" coming up "Stay connected and organized across work, school and life" which I don't want to come up (and which I don't see any setting in it to turn off).
All I can do at that window is sign in or join a meeting or X the window.
For a week I've been X'ing the window but I really need it to stop that.
Startup sentinel indicates bastards aren't using a normal startup method. Process explorer shows that it's just one an executable running (I think).
TeamViewer_Service.exe
Process explorer doesn't have the permissions to rightclick kill process.
Process explorer indicates it's somehow using this registry key. HKLM\System\CurrentControlSet\Services\TeamViewer
That key is complex such that I do not understand its implications.
Process explorer runs a search for you which found this which says keep it. https://malwaretips.com/blogs/teamviewer_service-exe-what-it-is-should-i-remove-it/
Services.msc tells me it's a running service set to Automatic start.
I set it to manual start just now (which should stop the autostart).
My question is why didn't startup sentinel show this as an autotart?
Another screenshot shows you
looked in Services to find TeamsViewer. You could change its startup
mode to Disabled, but that probably means a local Teams client won't
function properly.
VanguardLH <V@nguard.lh> wrote:
[...]
Another screenshot shows you
looked in Services to find TeamsViewer. You could change its startup
mode to Disabled, but that probably means a local Teams client won't
function properly.
'david' didn't mention [1] 'TeamsViewer', but 'TeamViewer' (no 's').
Teams and TeamViewer are two totally different products from two
different companies. It seems that he has somehow mixed them up, or at
least doesn't explain why he mentioned them both.
[1]
I didn't see the screenshot, but his text says "TeamViewer_Service.exe".
These images show the problem set I'm trying to better understand. >https://i.postimg.cc/dQkdv8d5/Clipboard-11-22-2024.jpg >https://i.postimg.cc/XYYBHhfD/Clipboard-11-22-2024a.jpg >https://i.postimg.cc/vm0HkHvJ/Clipboard-11-22-2024b.jpg
About a week ago I needed to be on a Microsoft Teams meeting initiated by >someone else so I didn't need a Microsoft login - just the meeting ID & >passcode and that worked fine until... I rebooted.
Now... every single time I reboot I get a full screen advertisement for >"Everyone together in Teams" coming up "Stay connected and organized across >work, school and life" which I don't want to come up (and which I don't see >any setting in it to turn off).
All I can do at that window is sign in or join a meeting or X the window.
For a week I've been X'ing the window but I really need it to stop that.
Startup sentinel indicates bastards aren't using a normal startup method. >Process explorer shows that it's just one an executable running (I think).
TeamViewer_Service.exe
Process explorer doesn't have the permissions to rightclick kill process.
Process explorer indicates it's somehow using this registry key. >HKLM\System\CurrentControlSet\Services\TeamViewer
That key is complex such that I do not understand its implications.
Process explorer runs a search for you which found this which says keep it. >https://malwaretips.com/blogs/teamviewer_service-exe-what-it-is-should-i-remove-it/
Services.msc tells me it's a running service set to Automatic start.
I set it to manual start just now (which should stop the autostart).
My question is why didn't startup sentinel show this as an autotart?
You could double-check with Autostart (same stable as Process Explorer).
I have Teams running. It's set to "start with Windows" (I remember
clicking that option) and I'm logged-in with an MS ID. I don't get that
nag. So maybe if you open it up and look for that option to turn it off
- or just log in and have it remember you - then that nag will go?
On Mon, 11/25/2024 6:50 AM, Philip Herlihy wrote:
You could double-check with Autostart (same stable as Process Explorer).
I have Teams running. It's set to "start with Windows" (I remember
clicking that option) and I'm logged-in with an MS ID. I don't get that
nag. So maybe if you open it up and look for that option to turn it off
- or just log in and have it remember you - then that nag will go?
That would be Sysinternals Autoruns, at a guess.
https://learn.microsoft.com/en-us/sysinternals/downloads/autoruns
Paul
Sysop: | Keyop |
---|---|
Location: | Huddersfield, West Yorkshire, UK |
Users: | 508 |
Nodes: | 16 (1 / 15) |
Uptime: | 238:16:41 |
Calls: | 9,985 |
Calls today: | 3 |
Files: | 13,836 |
Messages: | 6,358,233 |