List of Windows 7 telemetry updates to avoid

I am concerned about how MS uses the data they collect. How do they determine what is sold to third parties?

MS probably uses all the tools at their disposal today to keep cloud storage protected but as they have demonstrated time and time again, they create systems that are loaded with security holes. The only time their OS and apps get total scrutiny is when MS sells their OS to government agencies that require absolute protection from outside intrusion. In this case the NSA scours the OS and closes the vulnerabilities for them. No doubt there is also an in-depth script that runs on all those agency systems that blocks all the remaining data collection. I sure would love to have access to those scripts.

Without all that, I decided to select certain websites, IP addresses and ports to block.

I block the following URLs on W7 ...

watson.telemetry.microsoft.com
vortex-win.data.mcirosoft.com
ssw.live.com
settings-win.data.microsoft.com
reports.wes.df.telemtry.mcrosoft.com
oca.telemetry.microsoft.com.nsatc.net

I have seen a W10 list but not a W7 list. For W7, these are all I could find. The one with the most activity every month is vortex-win.data.microsoft.com.

 

I hope I don't regret it, but after carefully checking Services, Scheduled Tasks, Registry values, firewall rules, etc I decided to continue down the "install but disable/break" path and apply the remaining updates/re-releases I put off. End result:

Code:

Found: KB2952664  "Compatibility update for upgrading Windows 7"
Found: KB2990214  "Update that enables you to upgrade from Windows 7 to a later version of Windows"
Found: KB3021917  "Update to Windows 7 SP1 for performance improvements"
Found: KB3035583  "Update installs Get Windows 10 app in Windows 8.1 and Windows 7 SP1"
Found: KB3065987  "Windows Update Client for Windows 7 and Windows Server 2008 R2: July 2015"
Found: KB3068708  "Update for customer experience and diagnostic telemetry"
Found: KB3075249  "Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7"
Found: KB3075851  "Windows Update Client for Windows 7 and Windows Server 2008 R2: August 2015"
Found: KB3080149  "Update for customer experience and diagnostic telemetry"
Found: KB3083324  "Windows Update Client for Windows 7 and Windows Server 2008 R2: September 2015"
Found: KB3083710  "Windows Update Client for Windows 7 and Windows Server 2008 R2: October 2015"
Found: KB3123862  "Updated capabilities to upgrade Windows 8.1 and Windows 7"
Found: KB3138612  "Windows Update Client for Windows 7 and Windows Server 2008 R2: March 2016"
Found: KB3139929  "MS16-023: Security update for Internet Explorer: March 8, 2016"

During the update process, scheduled task "\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" was changed from disabled to enabled and these were run:

%windir%\System32\CompatTel\DiagTrackRunner.exe /UploadEtlFilesOnly
%windir%\System32\CompatTelRunner.exe

Both attempted to phone home but firewall rules blocked it. I disabled that task again and am keeping my fingers crossed.

 

I have always treated Application Experience with extreme prejudice and done my utmost to stomp all over it.

It benefits M$ much more than it benefits users ( victims ? )

 

Does anyone have a huge and updated list of these updates?

 

At the DSLR forum a list was posted with sites and IP numbers. I just post this "as if" and all of that, just only for your info.
http://www.dslreports.com/forum/r30676597-Complete-Win10-blocking-host-file

 

For those of you who use AutoPatcher to update Windows, this might be useful: https://www.wilderssecurity.com/thr...to-block-certain-updates.384911/#post-2577687

Very helpful, thanks.

 

You're welcome amarildojr.
There are several comments in that thread at DSLR; just for your info for those who are thinking about to use it that way.

 

In that list at that DSLR forum thread IP-numbers are used in the HOSTS file. Using IP-numbers in the HOSTS file doesn't work though.

From the old Gorilla site http://accs-net.com/hosts/benefits_restrictions.html

From the MVPS HOSTS file site:
http://winhelp2002.mvps.org/hostsfaq.htm

 

Do you think my list is overkill?

 

Quite a few of us have found this thread to be very useful. Asking for the op and contributors to consider updating it please.

 

A brief, mildly amusing interruption...
http://www.theregister.co.uk/2016/04/28/windows_10_live_tv/
Vid: https://www.youtube.com/watch?v=VMPeTrHNX1U

 

One of Microsoft's free advertisements.

 

"It's the Windows 10 right, that's what people are going to say: "Don't do it!""

 

I'm seeing KB3150513 being offered to Windows 7. Currently, it does not appear in the Description of Software Updates for 2016 (https://support.microsoft.com/kb/894199) and no info is found via the normal KB specific URL (https://support.microsoft.com/kb/3150513).

I did find http://windowanswers.com/windows-vi...b3150513-for-in-windows-8-1-today-261159.html with a comment saying it contains data for the Windows 10 compatibility tool.

Edit: Looks like KB info was added to those first two pages. From the second one...

 

Hi All
great place this ...any chance of a updated KB list for what not to install win 7 to 10 ...the time is coming to stop using MS products.. any-ways thx all for all the use full info re this MS mess

 

there is only 6 telemetry updates on 7 and 8.1, most lists I have seen on the internet are way too big, there seems to be a competition to make the biggest list.

Code:

@echo off

echo Removing Tracking/Telemetry Updates
wusa /uninstall /kb:3080149 /norestart /quiet
wusa /uninstall /kb:3075249 /norestart /quiet
wusa /uninstall /kb:3068708 /norestart /quiet
wusa /uninstall /kb:3044374 /norestart /quiet
wusa /uninstall /kb:3022345 /norestart /quiet
wusa /uninstall /kb:2976978 /norestart /quiet

echo Deleting Diagnostics Tracking Service
sc stop Diagtrack
sc delete Diagtrack

pause

 

This was mentioned elsewhere, but I think it should be mentioned here as well...

https://blogs.technet.microsoft.com...17/simplifying-updates-for-windows-7-and-8-1/

 

thats bad news, it means people will either have to install all of them or none, e.g. telemetry and win10 upgrade updates.

 

Maybe it's time to just hide all of those updates when they come....

 

I've been using this list as a good reference point:

http://forum.notebookreview.com/thr...-windows-10-upgrade-disable-telemetry.780476/

I also use GWC Control Panel and have disabled some M$ services that are telemetry related.
To date - no problems with unwanted Win10 updates, although certain Windows updates do keep reappearing, so one has to watch out.

 

all I can say is wow at that list, many many false positives there. The problem with this sort of thing is people use a sledgehammer approach and tend to go overboard.

 

Well...that just reflects the real problem - how does one really know what ANY windows update does.
Clearly many updates do more than just fix the stated bugs.
One would have to decompile the code and see but that's not practical.
Yes it's a decent list and I've removed most of those updates juts to be on the safe side as far as W10 goes.
No way do I want W10. Period.

 

You can always use Autoruns or something similar and compare autostart entries before and after installing updates. Then you can disable or remove services or tasks that were installed during update if you don't like them.

 

I listed a few posts up which ones you need, failing that just use GWX control panel.

https://www.wilderssecurity.com/thr...y-updates-to-avoid.379151/page-6#post-2587916

Sorry yeah those are telemetry, for windows 10 you only need to skip one update which is the GWX update. GWX control panel will take of that for you.

 

Are you sure these are the only updates to uninstall on Windows 7?