Windows7/8 - Updates to hide to prevent Windows 10 Upgrade / Disable Telemetry

Discussion in 'Windows OS and Software' started by Spartan, Aug 23, 2015.

  1. stringbuzzzzzz

    stringbuzzzzzz Notebook Consultant

    Reputations:
    27
    Messages:
    120
    Likes Received:
    28
    Trophy Points:
    41

    I agree with the gist of all the comments following post #293
    The details expressed are insightful and concerning.

    "I wish I had the temperament to not get carried away sometimes on, or about about this thread's cause in focus.

    For myself.., It bares a "Pandora's box, effect..." So.. Let me simply nip that one in the bud., so to speak.
    Cuz.., If I don't stop here... I'll possibly spin out a rant and inadvertently re-direct the flow of ideas here.
    In that spirit...
    Thanks for the candid statements and views, not withholding.

    I will have to "pounce" another day...
    Til then...
     
    Last edited: Nov 10, 2015
  2. hmscott

    hmscott Notebook Nobel Laureate

    Reputations:
    6,852
    Messages:
    20,204
    Likes Received:
    25,018
    Trophy Points:
    931
    KB3102812, is another update to push Windows 10

    Update for Windows 8.1 for x64-based Systems (KB3102812)
    Download size: 3.5 MB
    Update type: Optional

    Installing and searching for updates is slow and high CPU usage occurs in Windows 8.1 and Windows Server 2012 R2
    https://support.microsoft.com/en-us/kb/3102812

    Issues that are fixed in this update
    Issue 1
    When you install Windows updates by using System Center Configuration Manager, the installation takes a long time to complete, and System Center Configuration Manager becomes overloaded.
    Issue 2
    The Svchost.exe process takes 100 percent of the CPU usage when you try to upgrade to Windows 10.

    Found it before it installed, and hid it to block.
     
    Last edited: Nov 4, 2015
    Spartan, Mr. Fox and toughasnails like this.
  3. hmscott

    hmscott Notebook Nobel Laureate

    Reputations:
    6,852
    Messages:
    20,204
    Likes Received:
    25,018
    Trophy Points:
    931
    There are 3 new security update KB's that DWS Lite is removing, but no explanation, any ideas?

    These just came in again after being removed by DWS Lite for blocking Windows 10 upgrade and telemetry/spyware blocking. Hiding all 3 to block for now until the reasoning becomes clear for their removal / continued blocking:

    KB3042058
    Microsoft security advisory: Update to default cipher suite priority order: May 12, 2015
    https://support.microsoft.com/en-us/kb/3042058
    Update to Default Cipher Suite Priority Order
    https://technet.microsoft.com/library/security/3042058

    KB3088195
    MS15-111: Description of the security update for Windows Kernel: October 13, 2015
    https://support.microsoft.com/en-us/kb/3088195
    Security Update for Windows 7 for x64-based Systems (KB3088195)
    http://www.microsoft.com/en-us/download/details.aspx?id=49217&WT.mc_id=rss_windows_allproducts

    KB3093983
    MS15-106: Security update for Internet Explorer: October 13, 2015
    https://support.microsoft.com/en-us/kb/3093983

    Any ideas why these are removed by DWS (log below)?

    [INFO] Latest version number: 600
    [INFO] Windows Update disabled
    [INFO] Add to hosts - cache.datamart.windows.com
    [INFO] Add hosts MS complete.
    [INFO] Add Windows Firewall rule: "111.221.29.177_Block"
    [INFO] Add Windows Firewall rule: "111.221.29.253_Block"
    [INFO] Add Windows Firewall rule: "131.253.40.37_Block"
    [INFO] Add Windows Firewall rule: "134.170.30.202_Block"
    [INFO] Add Windows Firewall rule: "134.170.115.60_Block"
    [INFO] Add Windows Firewall rule: "134.170.165.248_Block"
    [INFO] Add Windows Firewall rule: "134.170.165.253_Block"
    [INFO] Add Windows Firewall rule: "134.170.185.70_Block"
    [INFO] Add Windows Firewall rule: "137.116.81.24_Block"
    [INFO] Add Windows Firewall rule: "137.117.235.16_Block"
    [INFO] Add Windows Firewall rule: "157.55.129.21_Block"
    [INFO] Add Windows Firewall rule: "157.55.133.204_Block"
    [INFO] Add Windows Firewall rule: "157.56.121.89_Block"
    [INFO] Add Windows Firewall rule: "157.56.91.77_Block"
    [INFO] Add Windows Firewall rule: "168.63.108.233_Block"
    [INFO] Add Windows Firewall rule: "191.232.139.254_Block"
    [INFO] Add Windows Firewall rule: "191.232.80.58_Block"
    [INFO] Add Windows Firewall rule: "191.232.80.62_Block"
    [INFO] Add Windows Firewall rule: "191.237.208.126_Block"
    [INFO] Add Windows Firewall rule: "207.46.101.29_Block"
    [INFO] Add Windows Firewall rule: "207.46.114.58_Block"
    [INFO] Add Windows Firewall rule: "207.46.223.94_Block"
    [INFO] Add Windows Firewall rule: "207.68.166.254_Block"
    [INFO] Add Windows Firewall rule: "212.30.134.204_Block"
    [INFO] Add Windows Firewall rule: "212.30.134.205_Block"
    [INFO] Add Windows Firewall rule: "23.102.21.4_Block"
    [INFO] Add Windows Firewall rule: "23.99.10.11_Block"
    [INFO] Add Windows Firewall rule: "23.218.212.69_Block"
    [INFO] Add Windows Firewall rule: "64.4.54.22_Block"
    [INFO] Add Windows Firewall rule: "64.4.54.32_Block"
    [INFO] Add Windows Firewall rule: "64.4.6.100_Block"
    [INFO] Add Windows Firewall rule: "65.39.117.230_Block"
    [INFO] Add Windows Firewall rule: "65.52.100.11_Block"
    [INFO] Add Windows Firewall rule: "65.52.100.7_Block"
    [INFO] Add Windows Firewall rule: "65.52.100.9_Block"
    [INFO] Add Windows Firewall rule: "65.52.100.91_Block"
    [INFO] Add Windows Firewall rule: "65.52.100.92_Block"
    [INFO] Add Windows Firewall rule: "65.52.100.93_Block"
    [INFO] Add Windows Firewall rule: "65.52.100.94_Block"
    [INFO] Add Windows Firewall rule: "65.52.108.29_Block"
    [INFO] Add Windows Firewall rule: "65.55.108.23_Block"
    [INFO] Add Windows Firewall rule: "65.55.138.114_Block"
    [INFO] Add Windows Firewall rule: "65.55.138.126_Block"
    [INFO] Add Windows Firewall rule: "65.55.138.186_Block"
    [INFO] Add Windows Firewall rule: "65.55.252.63_Block"
    [INFO] Add Windows Firewall rule: "65.55.252.71_Block"
    [INFO] Add Windows Firewall rule: "65.55.252.92_Block"
    [INFO] Add Windows Firewall rule: "65.55.252.93_Block"
    [INFO] Add Windows Firewall rule: "65.55.29.238_Block"
    [INFO] Add Windows Firewall rule: "65.55.39.10_Block"
    [INFO] Add Windows Firewall rule: "191.232.139.2_Block"
    [INFO] Add Windows Firewall rule: "64.4.23.0-64.4.23.255_Block"
    [INFO] Add Windows Firewall rule: "111.221.64.0-111.221.127.255_Block"
    [INFO] Add Windows Firewall rule: "157.55.235.0-157.55.235.255_Block"
    [INFO] Add Windows Firewall rule: "157.55.56.0-157.55.56.255_Block"
    [INFO] Add Windows Firewall rule: "157.55.52.0-157.55.52.255_Block"
    [INFO] Add Windows Firewall rule: "157.55.130.0-157.55.130.255_Block"
    [INFO] Add Windows Firewall rule: "65.55.223.0-65.55.223.255_Block"
    [INFO] Add Windows Firewall rule: "213.199.179.0-213.199.179.255_Block"
    [INFO] Add Windows Firewall rule: "195.138.255.0-195.138.255.255_Block"
    [INFO] Add Windows Firewall rule: "23.223.20.82_Block"
    [INFO] Add Windows Firewall rule: "WSearch_Block"
    [INFO] Ip list blocked
    [INFO] Disabled task: Microsoft\Office\Office ClickToRun Service Monitor
    [INFO] Disabled task: Microsoft\Office\OfficeTelemetryAgentFallBack2016
    [INFO] Disabled task: Microsoft\Office\OfficeTelemetryAgentLogOn2016
    [INFO] Disabled task: Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask
    [INFO] Disabled task: Microsoft\Windows\Customer Experience Improvement Program\UsbCeip
    [INFO] Disabled task: Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
    [INFO] Disabled task: Microsoft\Windows\Shell\FamilySafetyMonitor
    [INFO] Disabled task: Microsoft\Windows\Shell\FamilySafetyRefresh
    [INFO] Disabled task: Microsoft\Windows\Application Experience\AitAgent
    [INFO] Disabled task: Microsoft\Windows\Application Experience\ProgramDataUpdater
    [INFO] Disabled task: Microsoft\Windows\Application Experience\StartupAppTask
    [INFO] Disabled task: Microsoft\Windows\Autochk\Proxy
    [INFO] Disabled task: Microsoft\Windows\Customer Experience Improvement Program\BthSQM
    [INFO] Disabled task: Microsoft\Windows\Customer Experience Improvement Program\Consolidator
    [INFO] Disabled task: Microsoft\Office\OfficeTelemetry\AgentFallBack2016
    [INFO] Disabled task: Microsoft\Office\OfficeTelemetry\OfficeTelemetryAgentLogOn2016
    [INFO] Disabled task: Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser
    [INFO] Disabled task: Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector
    [INFO] Disabled task: Microsoft\Windows\Maintenance\WinSAT
    [INFO] Disabled task: Microsoft\Windows\Media Center\ActivateWindowsSearch
    [INFO] Disabled task: Microsoft\Windows\Media Center\ConfigureInternetTimeService
    [INFO] Disabled task: Microsoft\Windows\Media Center\DispatchRecoveryTasks
    [INFO] Disabled task: Microsoft\Windows\Media Center\ehDRMInit
    [INFO] Disabled task: Microsoft\Windows\Media Center\InstallPlayReady
    [INFO] Disabled task: Microsoft\Windows\Media Center\mcupdate
    [INFO] Disabled task: Microsoft\Windows\Media Center\MediaCenterRecoveryTask
    [INFO] Disabled task: Microsoft\Windows\Media Center\ObjectStoreRecoveryTask
    [INFO] Disabled task: Microsoft\Windows\Media Center\OCURActivate
    [INFO] Disabled task: Microsoft\Windows\Media Center\OCURDiscovery
    [INFO] Disabled task: Microsoft\Windows\Media Center\PBDADiscovery
    [INFO] Disabled task: Microsoft\Windows\Media Center\PBDADiscoveryW1
    [INFO] Disabled task: Microsoft\Windows\Media Center\PBDADiscoveryW2
    [INFO] Disabled task: Microsoft\Windows\Media Center\PvrRecoveryTask
    [INFO] Disabled task: Microsoft\Windows\Media Center\PvrScheduleTask
    [INFO] Disabled task: Microsoft\Windows\Media Center\RegisterSearch
    [INFO] Disabled task: Microsoft\Windows\Media Center\ReindexSearchRoot
    [INFO] Disabled task: Microsoft\Windows\Media Center\SqlLiteRecoveryTask
    [INFO] Disabled task: Microsoft\Windows\Media Center\UpdateRecordPath
    [INFO] Remove update KB3080149
    [INFO] Remove update KB3075249
    [INFO] Remove update KB3068708
    [INFO] Remove update KB3044374
    [INFO] Remove update KB3035583
    [INFO] Remove update KB3022345
    [INFO] Remove update KB3021917
    [INFO] Remove update KB3015249
    [INFO] Remove update KB3012973
    [INFO] Remove update KB2990214
    [INFO] Remove update KB2977759
    [INFO] Remove update KB2976978
    [INFO] Remove update KB2952664
    [INFO] Remove update KB2922324
    [INFO] Remove update KB971033
    [INFO] Remove update KB3083324
    [INFO] Remove update KB3083325
    [INFO] Remove update KB3088195
    [INFO] Remove update KB3093983
    [INFO] Remove update KB3093513
    [INFO] Remove update KB3042058
    [INFO] Remove update KB3083710

    Here are the Updates I am blocking under Windows 8.1.
    windows 8.1 list of updates blocking.JPG

    Also blocking hardware driver installs, for example the Intel HD Graphics driver isn't the right one for my Iris Pro 6200 iGPU, for others I prefer doing it myself directly from MSI / OEM download so I can control update level.

    Posted a question to the developer of DWS, will update here if/when I hear back.

    DWS Lite - Destroy Windows 10 Spying for Windows 7/8/10
    http://dws.wzor.net/
    https://github.com/Nummer/Destroy-Windows-10-Spying/releases


    Update: 11/7/2015

    The answer back from the developer Nummer, 3 hours ago today:
    https://github.com/Nummer/Destroy-Windows-10-Spying/issues/151

    "KB3088195 - keylogger (on kernel)
    KB3042058 - winlogon spying
    KB3093983 - ie spying."

     
    Last edited: Nov 8, 2015
    Spartan likes this.
  4. Spartan

    Spartan Notebook Nobel Laureate

    Reputations:
    22,559
    Messages:
    21,023
    Likes Received:
    31,047
    Trophy Points:
    931
    Will be added to the list and batch file shortly...
     
    hmscott likes this.
  5. Spartan

    Spartan Notebook Nobel Laureate

    Reputations:
    22,559
    Messages:
    21,023
    Likes Received:
    31,047
    Trophy Points:
    931
    KB3102810 and KB3102812 were added to the list and batch file updated
     
    Hidef1080 and hmscott like this.
  6. Spartan

    Spartan Notebook Nobel Laureate

    Reputations:
    22,559
    Messages:
    21,023
    Likes Received:
    31,047
    Trophy Points:
    931
    I cannot add those updates to the list until I receive more solid confirmation on what they do and how are they related to telemetry or Windows 10 upgrade preparation

    Please let me know if you get more info
     
    hmscott likes this.
  7. duttyend

    duttyend Notebook Enthusiast

    Reputations:
    0
    Messages:
    30
    Likes Received:
    7
    Trophy Points:
    16
    Thank you very very much for the great explanations, screenshots, and scripts !!!
     
    Spartan likes this.
  8. Hidef1080

    Hidef1080 Notebook Enthusiast

    Reputations:
    22
    Messages:
    49
    Likes Received:
    31
    Trophy Points:
    26
    Thanks for all that you do... Although you went over to the "Dark Side". o_O
     
  9. Spartan

    Spartan Notebook Nobel Laureate

    Reputations:
    22,559
    Messages:
    21,023
    Likes Received:
    31,047
    Trophy Points:
    931
    No choice, the dark side works best with NVME PCIe SSDs. I will always support j00 though ;)
     
  10. hmscott

    hmscott Notebook Nobel Laureate

    Reputations:
    6,852
    Messages:
    20,204
    Likes Received:
    25,018
    Trophy Points:
    931
    The answer back from the developer Nummer, 3 hours ago today:
    https://github.com/Nummer/Destroy-Windows-10-Spying/issues/151

    "KB3088195 - keylogger (on kernel)
    KB3042058 - winlogon spying
    KB3093983 - ie spying."

    All of these were marked as "Important" by Microsoft, and all are listed as Security Updates...
     
    Last edited: Nov 7, 2015
    Spartan likes this.
Loading...

Share This Page