How to disable CrossDeviceResume.exe?

...same, and after a while, it still pops up regardless ;) Nothing will get rid of this sh*t, unfortunately.

I'm going to start a 'monitoring' process this week, and let this system run, so I can try and catch whatever is triggering this nonsense, as it is keeping me awake at night now :)
 
Last edited:
...same, and after a while, it still pops up regardless ;) Nothing will get rid of this sh*t, unfortunately.

I'm going to start a 'monitoring' process this week, and let this system run, so I can try and catch whatever is triggering this nonsense, as it is keeping me awake at night now :)
I tried this in the past and failed to find what was triggering it. I have vague memories but I think even Garlin didn't know what was responsible for spawning this garbage.

If you do find out, please share. I, and I guess few others too, will be grateful :) Good luck!
 
SvcHost is spawning CrossDeviceResume.exe, which is why IFEO doesn't work to block execution. Beyond that, I don't have a mobile device attached so I can play around.
 
Hello there, I made this account only to post this.
I'm pretty obsessive about what processes/features can run on my PC, and Resume has been driving me crazy since its release. Turning it off in setting doesn't work, and the recent updates have reinstalled, re-enabled, and hardened Resume (along with other services and scheduled tasks).
I've looked everywhere and tried it all. Editing the Registry rules, using Vivetool, Autoruns, PSTools, blocking the process, deleting the CrossDeviceResume, ACL and IFEO blocks, nothing has worked. Only one solution has worked:
  1. Create a restore point, just in case
  2. Create a useless executable file (I made mine take any parameter, do nothing and exit), and name it CrossDeviceResume.exe
  3. Open PowerShell as admin
  4. Copy permissions of real CrossDeviceResume.exe in the "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_*\" directory to $acl (or file)
    $acl = Get-Acl "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_*****\CrossDeviceResume.exe"
  5. Take ownership and control of the real CrossDeviceResume.exe
    takeown /F "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_*****\CrossDeviceResume.exe"
    icalcs "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_*****\CrossDeviceResume.exe" Administrators:F
  6. Rename the real CrossDeviceResume.exe to whatever
  7. Move your fake CrossDeviceResume.exe to "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_*****\"
  8. Set the fake CrossDeviceResume.exe's permissions to the ACL copy
    Set-Acl -Path "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_*****\CrossDeviceResume.exe" -AclObject $acl
  9. Move (or delete) the renamed real CrossDeviceResume.exe
While this isn't the prettiest method, it's the only thing that has worked for me. Please let me know if you have any questions or if there is a very obvious issue I may have missed

Disclaimer: Use at your own risk. Modifying Windows system files can cause unexpected issues and may be undone by future updates.
 
Back
Top