Huge problem with unwanted Windows 10 download

Discussion in 'other software & services' started by geekatlarge, Aug 21, 2015.

  1. TS4H

    TS4H Registered Member

    Joined:
    Nov 5, 2013
    Posts:
    518
    Location:
    Australia
    Could it be that this W10 upgrade mechanism is somehow related to all the telemetry KB updates for W7?

    Either way iv made a batch that removes the KB for GWX and some telemetry updates. Its nothing special, just removes all associated KB files in one go. This may help someone, also posted at https://www.wilderssecurity.com/threads/list-of-windows-7-telemetry-updates-to-avoid.379151/

    Code:
    ECHO OFF
    REM --- remember to invoke from ELEVATED command prompt!
    REM --- or start the batch with context menu "run as admin".
    SETLOCAL
    
    REM --- (as of 2015-08-26):
    REM  KB3012973 - Upgrade to Windows 10 Pro
    REM  KB3021917 - Update to Windows 7 SP1 for performance improvements
    REM  KB3035583 - GWX Update installs Get Windows 10 app in Windows 8.1 and Windows 7 SP1
    REM  KB2952664 - Compatibility update for upgrading Windows 7
    REM  KB2976978 - Compatibility update for Windows 8.1 and Windows 8
    REM  KB3022345 - Telemetry [Replaced by KB3068708]
    REM  KB3068708 - Update for customer experience and diagnostic telemetry
    REM  KB2990214 - Update that enables you to upgrade from Windows 7 to a later version of Windows
    REM  KB3075249 - Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
    REM  KB3080149 - Update for customer experience and diagnostic telemetry
    
    REM --- uninstall updates
    echo uninstalling updates ...
    start "title" /b /wait wusa.exe /kb:3012973 /uninstall /quiet /norestart
    echo  - done.
    start "title" /b /wait wusa.exe /kb:3021917 /uninstall /quiet /norestart
    echo  - done.
    start "title" /b /wait wusa.exe /kb:3035583 /uninstall /quiet /norestart
    echo  - done.
    start "title" /b /wait wusa.exe /kb:2952664 /uninstall /quiet /norestart
    echo  - done.
    start "title" /b /wait wusa.exe /kb:2976978 /uninstall /quiet /norestart
    echo  - done.
    start "title" /b /wait wusa.exe /kb:3022345 /uninstall /quiet /norestart
    echo  - done.
    start "title" /b /wait wusa.exe /kb:3068708 /uninstall /quiet /norestart
    echo  - done.
    start "title" /b /wait wusa.exe /kb:2990214 /uninstall /quiet /norestart
    echo  - done.
    start "title" /b /wait wusa.exe /kb:3075249 /uninstall /quiet /norestart
    echo  - done.
    start "title" /b /wait wusa.exe /kb:3080149 /uninstall /quiet /norestart
    echo  - done.
    
    timeout 10
    
    echo ... COMPLETED (please remember to REBOOT, and Hide the Following KB Updates)
    echo ...3012973
    echo ...3021917
    echo ...3035583
    echo ...2952664
    echo ...2976978
    echo ...3022345
    echo ...3068708
    echo ...2990214
    echo ...3075249
    echo ...3080149
    echo  - done.
    
    
    pause
    REM --- EOF
     
  2. geekatlarge

    geekatlarge Registered Member

    Joined:
    Jul 23, 2013
    Posts:
    66
    Location:
    Searching for $Windows.~BT folders
    Lots of updates to remove. Thanks for writing this script. ETA: Saying this again - thanks to everyone who is taking part in solving this problem. I'm very appreciative, as I'm sure many others are. I hope to find time to set up a "bait pile" - a clean install just for testing. I need to see if any critical functionality is lost by removing all of this before widely deploying it. Of course, MS will have to decide to target that computer. I've found a few that are unpatched but not affected. No rhyme or reason apparently.

    I talked last night with a friend who does software assurance. She believes the reason for the varying sizes of the $Windows.~BT folder is due to the failing upgrade either extracting more compressed files as each reinstall attempt starts, or due to more content being downloaded after each failure.

    I found another client with a metered connection running a good sized business. No wired options where they are located for broadband. They are affected as well and went over their data cap. What a massive, rolling migraine headache.

    That's the part that really sucks. You took proactive steps to prevent this, not that just declining the reservation shouldn't be enough, but you actually uninstalled and hid the GWX update. Even that isn't enough to stop it. I've been encouraging every one of my friends, family and clients affected by this to contact Microsoft and register a complaint. I hope every IT person and enthusiast also affected does the same and tells every techie they know about it.
     
    Last edited: Aug 27, 2015
  3. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    4,072
    Location:
    Among the gum trees
    No, that's not quite right, KB3035583 aka GWX update was never installed at all. :mad:
     
    Last edited: Aug 27, 2015
  4. topo

    topo Registered Member

    Joined:
    Nov 11, 2013
    Posts:
    76
    i'm the it guy for my group of old retired guys. my friend has hp laptop win7home64bit. while checking microsoft update history and getting the popup to reserve win10, i saw that starting on 8-13-15 and everyday since, w10 tries to install but fails with error code 80240020. my friend does not want w10 and did not click to reserve w10. this is alarming behavior by microsoft. i don't know what caused the install to fail but i'm glad it did. if this install had succeded would he have woke up to w10 being his os instead of win7? any safe and uncomplicated way of stopping this? i havn't checked with any my other friends to see if they are getting this behavior also. thanks for your help.
     
  5. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,139
    Location:
    USA
    I found that GWX.exe had installed itself on my test machine again today after uninstalling KB3035583, and hiding the update. I uninstalled it, and my computer would not shut down. It said configuring updates, and would never progress on. I had to do a hard shut down. This happened once before. I can't allow anymore of my time to be wasted by this. I will have to take this issue to Microsoft's forum. I honestly think Microsoft should be sued for this ridiculous intrusion.
     
  6. hjlbx

    hjlbx Guest

    Same here... same details and WU Error Code.

    Even after uninstalling and hiding all updates indicated in post #51 above...

    Huge problem with unwanted Windows 10 download

    W10 keeps downloading, but the install fails...

    This process is happening in the background. Yet it is a large download and needlessly consuming system resources...

    Something is amiss...
     
    Last edited by a moderator: Aug 27, 2015
  7. geekatlarge

    geekatlarge Registered Member

    Joined:
    Jul 23, 2013
    Posts:
    66
    Location:
    Searching for $Windows.~BT folders
    That hard shut down thing is a drag. I've seen it multiple times. Wait until there's no HDD activity and it seems to turn out fine on the restart. Also, please contact Microsoft. I did. Everyone experiencing this, please flood their forums, call the phone lines. email, whatever it takes. I contacted some IT department heads for fairly large institutions who should have some pull with MS. Neither one heard of this, but both took this seriously. Doing as much as I can to get this ball rolling. Please inform anyone you think might have some pull with MS. I agree also that MS should be held legally accountable.

    Another day of patching tomorrow in between the regularly scheduled jobs. Basically trying to cram double appointments in all week and no end in sight. Just trying to explain what it is and why its a problem is a 10 to 15 minute adventure every time.
     
  8. geekatlarge

    geekatlarge Registered Member

    Joined:
    Jul 23, 2013
    Posts:
    66
    Location:
    Searching for $Windows.~BT folders
    topo, this seems to be safe, but not uncomplicated. The procedure that seems to work is
    The group policy fix is in post 15. the link to KB3050265 is at the bottom of that post, it needs to be applied before the group policy. A script to take ownership of the W10 install folder, change the ACL and then allow deletion is in post 31. It needs to be run in an elevated command prompt, and probably more than once, to get rid of the folder.
     
  9. geekatlarge

    geekatlarge Registered Member

    Joined:
    Jul 23, 2013
    Posts:
    66
    Location:
    Searching for $Windows.~BT folders
    It looks like this is finally getting some traction, at least in the comments sections on some tech web sites. Fix this, MS!
     
  10. patch

    patch Registered Member

    Joined:
    May 14, 2007
    Posts:
    178
    Looking around the web I found a couple of other scripts to remove invasive Microsoft updates
    To aid comparison I have sorted by KB article and highlighted the differences

    http://skidpaste.org/uiV9IaEQ.txt
    KB2902907 (description not available)
    KB2952664 (Get Windows 10 assistant)
    KB2976987 (description not available)
    KB2990214 (Get Windows 10 for Win7 without sp1)
    KB2990214 (Get Windows 10 for Win7)
    KB3021917 (telemetry for Win7)
    KB3022345 (telemetry)
    KB3035583 (Get Windows 10 for Win7sp1/8.1)
    KB3044374 (Get Windows 10 for Win8.1)
    KB3050265 (update for "Windows Update" on Win7)
    KB3065987 (update for "Windows Update"; on Win7/Server 2008R2)
    KB3068708 (telemetry)
    KB3075249 (telemetry for Win7/8.1)
    KB3075853 (update for "Windows Update" on Win8.1/Server 2012R2)
    KB3080149 (telemetry for Win7/8.1)
    KB971033 (license validation)
    Also blocks routes and disables tasks

    https://fix10.isleaked.com/oldwindows.html
    KB2902907 (description is not available)
    KB2952664 (Get Windows 10 assistant)
    KB2976978 (telemetry for Win8/8.1)
    KB2990214 (Get Windows 10 for Win7 without sp1)
    KB2990214 (Get Windows 10 for Win7)
    KB3021917 (telemetry for Win7)
    KB3022345 (telemetry)
    KB3035583 (Get Windows 10 for Win7sp1/8.1)
    KB3044374 (Get Windows 10 for Win8.1)
    KB3050265 (update for "Windows Update" on Win7)
    KB3065987 (update for "Windows Update" on Win7/Server 2008R2)
    KB3068708 (telemetry)
    KB3075249 (telemetry for Win7/8.1)
    KB3075851 (update for "Windows Update" on Win7)
    KB3075853 (update for "Windows Update" on Win8.1/Server 2012R2)
    KB3080149 (telemetry for Win7/8.1)

    Compared to Post #51 above
    KB2952664 - Compatibility update for upgrading Windows 7
    KB2976978 - Compatibility update for Windows 8.1 and Windows 8
    KB2990214 - Update that enables you to upgrade from Windows 7 to a later version of Windows
    KB3012973 - Upgrade to Windows 10 Pro
    KB3021917 - Update to Windows 7 SP1 for performance improvements
    KB3022345 - Telemetry [Replaced by KB3068708]
    KB3035583 - GWX Update installs Get Windows 10 app in Windows 8.1 and Windows 7 SP1
    KB3068708 - Update for customer experience and diagnostic telemetry
    KB3075249 - Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
    KB3080149 - Update for customer experience and diagnostic telemetry
    Leaves out KB2902907, KB3044374, KB3050265, KB3065987, KB3075853
     
  11. Ocky

    Ocky Registered Member

    Joined:
    May 6, 2006
    Posts:
    2,691
    Location:
    George, S.Africa
    After reading all this, I had better check with my neighbour again, as I followed Dedo's guidelines, but am now afraid that although the system tray icon is gone and WU shows that the upgrade to W10 failed, something may still be downloading in the background etc.
    BTW here is a script (all languages will work) from http://www.heise.de/newsticker/meldung/Windows-10-Download-verhindern-2782984.html

    # ------------------------------------------------------------------------
    # NAME: Block-GWXUpdate.ps1
    # AUTOR: Hajo Schulz (hos)
    # COPYRIGHT: © 2015 Heise Medien - c't
    # VERSION: 1.2, 2015-08-18
    #
    # Dieses Skript prüft, ob der Windows-Update-Patch KB3035583 (Windows 10
    # Upgrade) auf dem Rechner installiert ist. Wenn ja, wird er
    # deinstalliert. In jedem Fall wird versucht, ihn in die Liste der
    # ausgeblendeten Updates zu schieben.
    #
    # Neu in Version 1.1: Zusätzlich setzt das Skript den im Knowledge-Base-
    # Artikel 3080351 <https://support.microsoft.com/kb/3080351> beschriebenen
    # Registry-Eintrag, der das Herunterladen und Installieren des Windows-10-
    # Upgrades verhindern soll.
    #
    # ------------------------------------------------------------------------

    param(
    [Switch]$AutoRestart, # Rechner bei Bedarf automatisch neustarten
    [Switch]$NoRestart # Rechner nie automatisch neustarten
    )

    # Laufen wir mit Admin-Rechten? Wenn nicht, Meldung ausgeben und raus.
    $identity = [System.Security.Principal.WindowsIdentity]::GetCurrent()
    $princ = New-Object System.Security.Principal.WindowsPrincipal($identity)
    if(-not $princ.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)) {
    Add-Type -AssemblyName System.Windows.Forms
    [System.Windows.Forms.MessageBox]::Show('Dieses Skript muss mit Administratorrechten aufgerufen werden.',
    $MyInvocation.MyCommand.Name,
    [System.Windows.Forms.MessageBoxButtons]::OK,
    [System.Windows.Forms.MessageBoxIcon]::Error) | Out-Null
    return
    }

    # Initialisierung
    $kbn = 3035583
    $kb = "KB{0}" -f $kbn
    $restart = $false
    $session = New-Object -ComObject Microsoft.Update.Session
    $searcher = $session.CreateUpdateSearcher()

    # Versuchen, GWX über eine Gruppenrichtlinie stillzulegen
    Start-Process "$Env:SystemRoot\System32\reg.exe" "ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v DisableOSUpgrade /t REG_DWORD /d 1" -Wait

    # Zur Sicherheit erst mal online nach neuen Updates suchen
    "`nSuche Updates. Das kann mehrere Minuten dauern. Bitte Geduld ..." | Out-Host
    $search = $searcher.Search('IsHidden=0 OR IsInstalled=1')

    # GWX gefunden?
    $gwxPatch = $search.Updates | Where-Object {$_.Title -match $kb}
    if($gwxPatch) {
    # GWX installiert? Dann deinstallieren
    if($gwxPatch.IsInstalled) {
    "Deinstalliere $kb ..." | Out-Host
    # Wenn eines der GWX-Programme läuft, beenden. Dadurch läuft die
    # Deinstallation in den allermeisten Fällen komplett durch und
    # braucht keinen Neustart.
    $gwxProc = Get-Process GWXUX -ErrorAction SilentlyContinue
    if($gwxProc) {
    $gwxProc | Stop-Process -Force
    }
    $gwxProc = Get-Process GWX -ErrorAction SilentlyContinue
    if($gwxProc) {
    $gwxProc | Stop-Process -Force
    }
    $wusaProc = Start-Process "wusa" "/uninstall /kb:$kbn /quiet /norestart" -Wait -PassThru
    if($wusaProc.ExitCode -eq 0) {
    "Deinstallieren hat geklappt." | Out-Host
    } elseif($wusaProc.ExitCode -eq 3010) {
    # wusa.exe liefert den Exit-Code 3010, wenn für die komplette
    # Deinstallation noch ein Neustart nötig ist.
    "Deinstallation erfolgreich." | Out-Host
    $restart = $true
    } else {
    "Fehler beim Deinstallieren." | Out-Host
    }
    }

    # KB3035583 verbergen
    "Verhindere (Wieder-)Installation von $kb ..." | Out-Host
    try {
    $gwxPatch.IsHidden = $true
    "Verstecken erfolgreich." | Out-Host
    }
    catch {
    "Blockieren fehlgeschlagen. ($_)" | Out-Host
    return
    }

    # Bei Bedarf Neustart, aber nur wenn der Benutzer zustimmt bzw. die passende
    # Kommandozeilenoption gesetzt hat.
    if($restart) {
    "`nZum Komplettieren der Deinstallation muss der Rechner neu gestartet werden." | Out-Host
    $answer = '';
    if($AutoRestart) {
    $answer = 'j'
    }
    elseif($NoRestart) {
    $answer = 's'
    }
    while($answer -ne 'j' -and $answer -ne 's') {
    $answer = Read-Host -Prompt "`nBitte wählen Sie: [J]etzt neu starten päter von Hand neu starten"
    }
    if($answer -eq 'j') {
    shutdown /r /t 0
    }
    } else {
    "Alles Erledigt." | Out-Host
    }
    } else {
    "$kb nicht gefunden - es gibt nichts zu tun." | Out-Host
    }
     
  12. geekatlarge

    geekatlarge Registered Member

    Joined:
    Jul 23, 2013
    Posts:
    66
    Location:
    Searching for $Windows.~BT folders
    Great news! I contacted Chris Merriman at the Inquirer - he's running with it. It is currently the top story on the site!

    http://www.theinquirer.net/inquirer...ading-windows-10-to-your-machine-just-in-case

    ETA: in the story body:
    We asked Microsoft to comment on whether it was downloading Windows 10 anyway as the company rushes to build on the 75 million machines with the new OS installed in its first month, putting it in fourth place behind Window 7, 8.1 and the erstwhile XP.


    Microsoft told us: "For individuals who have chosen to receive automatic updates through Windows Update, we help upgradable devices get ready for Windows 10 by downloading the files they’ll need if they decide to upgrade.


    "When the upgrade is ready, the customer will be prompted to install Windows 10 on the device.”


    In other words, if you are patching via Patch Tuesday, as you should of course be, then you are going to get a big hefty folder on your hard drive ready so you can update to Windows 10 on demand.


    So, yeah. Done with foreknowledge and on purpose. Now it's out there and MS admits it is by design.

    Let's see what happens. :cool:
     
    Last edited: Sep 10, 2015
  13. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    4,072
    Location:
    Among the gum trees
    Bingo! Thanks for the news. :thumb:
     
  14. Robin A.

    Robin A. Registered Member

    Joined:
    Feb 25, 2006
    Posts:
    2,387
  15. geekatlarge

    geekatlarge Registered Member

    Joined:
    Jul 23, 2013
    Posts:
    66
    Location:
    Searching for $Windows.~BT folders
    Excellent! Thanks for the link. The Disk Cleanup mentioned there might need to be run twice, the first run through sometimes leaves files. This is a procedure that is easier for more advanced users to follow, but still far too complicated for a lot of people. MS still needs to fix this, or at least post a Fix-it that non-savvy users can apply to get rid of the "upgrade" AND the telemetry.
     
  16. Mister X

    Mister X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    2,457
    Location:
    Mexico
    Also you can try this script to apply before and after WU applies its updates, it prevents the huge Win10 download and disable GWX/telemetry things.
    Launch your notepad and copy-paste the next code, then save as <anynameyoulike>.cmd
    Then right click and run as admin:
    Code:
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\Gwx /f /v DisableGwx /t REG_DWORD /d 1
    
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /f /v DisableOSUpgrade /t REG_DWORD /d 1
    
    schtasks /Change /TN "\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /DISABLE
    schtasks /Change /TN "\Microsoft\Windows\Application Experience\ProgramDataUpdater" /DISABLE
    schtasks /Change /TN "\Microsoft\Windows\Application Experience\AitAgent" /DISABLE
    
    schtasks /Change /TN "\Microsoft\Windows\Setup\gwx\launchtrayprocess" /DISABLE
    schtasks /Change /TN "\Microsoft\Windows\Setup\gwx\refreshgwxconfig" /DISABLE
    schtasks /Change /TN "\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" /DISABLE
    schtasks /Change /TN "\Microsoft\Windows\Setup\gwx\refreshgwxcontent" /DISABLE
    
    sc config DiagTrack start= disabled
    net stop DiagTrack
    With that script you can install them all and disable what they provide (DiagTrack service, Schedule Tasks, reg policy to prevent GWX and upgrade). No issues or adverse effects so far.

    Credits to abbodi1406
     
    Last edited: Sep 14, 2015
  17. geekatlarge

    geekatlarge Registered Member

    Joined:
    Jul 23, 2013
    Posts:
    66
    Location:
    Searching for $Windows.~BT folders
    Mister X., that looks like it would block the GWX process and prevent the upgrade from succeeding. It looks like the download folder still has to be deleted, though if I read this correctly it would disable future downloads of W10 and prevent installs? Could be quite useful, especially when the WU servers are so overloaded. Sometimes it takes an hour or more for WU to find the updates to hide. Thanks for your script!
     
  18. Mister X

    Mister X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    2,457
    Location:
    Mexico
    Welcome. Yes, with that script you can install them all and disable what they provide (DiagTrack service, Schedule Tasks, reg policy to prevent GWX and upgrade). No issues or adverse effects so far.
    Btw script not mine, all credits for abbodi1406
     
  19. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    5,246
    hi
    what a mess ?
    i mean unbelievable what can do microsoft with its update system
    but with a new w7 installation from scratch , what should a user do to avoid any windows 10 upgrade ?
     
  20. hjlbx

    hjlbx Guest

    I did clean install of Windows. Disabled Windows Updates at the prompt during the clean install. Have written down list of unwanted updates - e.g. Telemetry, W10 preparation, etc - then right-click and Hide those updates from installing when I perform a manual Windows Update.
     
  21. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    5,246
    hi
    may i know where did you find this list of unwanted updates?
    thanks
     
  22. hjlbx

    hjlbx Guest

    The list is right in this thread... look at previous posts.
     
  23. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    5,246
  24. JRViejo

    JRViejo Global Moderator

    Joined:
    Jul 9, 2008
    Posts:
    22,874
    Location:
    U.S.A.
  25. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    5,246
Loading...