Teamviewer deletevalue safeboot

stanley783
stanley783 Posts: 1
edited March 2024 in General questions

Hi,

we detected that Teamviewer executed command "/deletevalue safeboot" via bcedit.exe. I know teamviewer has features related to safe booting, but this specific event was kinda suspicious.

Also noticed two more operations at same time:

RegSetValue HKLM\software\wow6432node\teamviewer\version

RegDeleteKey HKLM\software\wow6432node\teamviewer\temp

TeamViewer 15.52.3

Any idea why would service delete safeboot and is this considered standard behavior? We noticed this on only one device, despite it being deployed on multiple. Thanks.

Answers

  • gdavila_TV_Forum
    gdavila_TV_Forum Posts: 1

    I had a similar situation with the command: team viewer bcdedit.exe" /set safeboot NETWORK

    This has been notice in only 2 devices

    Di you get an answer to this?

Trustpilot

Categories

This Week's Leaders