|echo Uninstalling KB3075249 (telemetry for Win7/8.1)|
|start /w wusa.exe /uninstall /kb:3075249 /quiet /norestart|
|echo Uninstalling KB3080149 (telemetry for Win7/8.1)|
|start /w wusa.exe /uninstall /kb:3080149 /quiet /norestart|
|echo Uninstalling KB3021917 (telemetry for Win7)|
|start /w wusa.exe /uninstall /kb:3021917 /quiet /norestart|
|echo Uninstalling KB3022345 (telemetry)|
|start /w wusa.exe /uninstall /kb:3022345 /quiet /norestart|
|echo Uninstalling KB3068708 (telemetry)|
|start /w wusa.exe /uninstall /kb:3068708 /quiet /norestart|
|echo Uninstalling KB3044374 (Get Windows 10 for Win8.1)|
|start /w wusa.exe /uninstall /kb:3044374 /quiet /norestart|
|echo Uninstalling KB3035583 (Get Windows 10 for Win7sp1/8.1)|
|start /w wusa.exe /uninstall /kb:3035583 /quiet /norestart|
|echo Uninstalling KB2990214 (Get Windows 10 for Win7)|
|start /w wusa.exe /uninstall /kb:2990214 /quiet /norestart|
|echo Uninstalling KB2952664 (Get Windows 10 assistant)|
|start /w wusa.exe /uninstall /kb:2952664 /quiet /norestart|
|echo Uninstalling KB3075853 (update for "Windows Update" on Win8.1/Server 2012R2)|
|start /w wusa.exe /uninstall /kb:3075853 /quiet /norestart|
|echo Uninstalling KB3065987 (update for "Windows Update" on Win7/Server 2008R2)|
|start /w wusa.exe /uninstall /kb:3065987 /quiet /norestart|
|echo Uninstalling KB3050265 (update for "Windows Update" on Win7)|
|start /w wusa.exe /uninstall /kb:3050265 /quiet /norestart|
|echo Uninstalling KB971033 (license validation)|
|start /w wusa.exe /uninstall /kb:971033 /quiet /norestart|
|echo Uninstalling KB2902907 (description not available)|
|start /w wusa.exe /uninstall /kb:2902907 /quiet /norestart|
|echo Uninstalling KB2976987 (description not available)|
|start /w wusa.exe /uninstall /kb:2976987 /quiet /norestart|
|echo Uninstalling KB2976978 (compactibility update for Windows 8.1)|
|start /w wusa.exe /uninstall /kb:2976978 /quiet /norestart|
|echo Uninstalling KB3102810 (update for "Windows Update")|
|start /w wusa.exe /uninstall /kb:3102810 /quiet /norestart|
|echo Uninstalling KB3112343 (Windows Update Client for Windows 7)|
|start /w wusa.exe /uninstall /kb:3112343 /quiet /norestart|
|echo Uninstalling KB3135445 (Windows Update Client for Windows 7)|
|start /w wusa.exe /uninstall /kb:3135445 /quiet /norestart|
|echo Uninstalling KB3123862 (Windows Update Client for Windows 7)|
|start /w wusa.exe /uninstall /kb:3123862 /quiet /norestart|
|echo Uninstalling KB3081954 (Telemetry Update for Windows 7)|
|start /w wusa.exe /uninstall /kb:3081954 /quiet /norestart|
|echo Uninstalling KB3139929 (Get Windows 10 update for MSIE)|
|start /w wusa.exe /uninstall /kb:3139929 /quiet /norestart|
|echo Uninstalling KB3138612 (Windows Update Client for Windows 7)|
|start /w wusa.exe /uninstall /kb:3138612 /quiet /norestart|
|echo Uninstalling KB3138615 (Windows Update Client for Windows 8.1)|
|start /w wusa.exe /uninstall /kb:3138615 /quiet /norestart|
|echo Uninstalling KB3150513 (Compactibility Update (another GWX) for Windows 7/8.1)|
|start /w wusa.exe /uninstall /kb:3150513 /quiet /norestart|
|echo Uninstalling KB3133977 (buggy update)|
|start /w wusa.exe /uninstall /kb:3133977 /quiet /norestart|
|echo Uninstalling KB3139923 (Another GWX for Windows 7/8.1)|
|start /w wusa.exe /uninstall /kb:3139923 /quiet /norestart|
|echo Uninstalling KB3173040 (Another GWX for Windows 7/8.1)|
|start /w wusa.exe /uninstall /kb:3173040 /quiet /norestart|
Might be overkill but this is what I have compiled from various sources:
all telemetry and win10 update remove
echo Uninstalling KB3075851 (update for "Windows Update" on Win7/Server 2008R2 Aug.2015 replace KB 3065987)
echo Uninstalling KB3065987 (update for "Windows Update" on Win7/Server 2008R2 Jul.2015 KB3050265)
echo Uninstalling KB2919355 (ie11 for Win8.1RT/8.1/Server2012r2 Apr.2015
echo Uninstalling KB2977759 (Get Windows 10 preparation for Win7 RTM)
echo Uninstalling KB3075249 (telemetry for Win7/8.1)
echo Uninstalling KB3044374 (Get Windows 10 for Win8.1)
wusa /uninstall /KB3075851 /norestart /quiet
all telemetry and win10 update remove
echo Uninstalling KB3021917
THANKS! I went through this thread: http://www.wilderssecurity.com/threads/list-of-windows-7-telemetry-updates-to-avoid.379151/ and found a reference to your site posted by a user there. I basically grabbed all updates recommended from that thread and referred links and compiled my list.
As mentioned, I have listed all the updates found on this thread and referenced and included a description based on what I found in either MS kb database and/or any negative references from other forums/websites that recommend removal from Win platform. My spreadsheet has a column labeled "remove?" to which a "1" is a "YES" and a "seems ok" is an "IGNORE"; the next column is the KB#; and finally, the third column is the description/notes I pulled from the web when i did a search on the KB# lookup via google.
i have also questioned a few of the recommended window updates as I was weary of uninstalling just anything that may have been just grouped in for whatever reason...
http://j.mp/x10-remove - here's a pdf of the spreadsheet
1 3050265 Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7 and Windows Server 2008 R2: July 2015
Why does this script suggest removing KB3139929? MS16-023: Security update for Internet Explorer: March 8, 2016
"This security update resolves several reported vulnerabilities in Internet Explorer. The most severe of these vulnerabilities could allow remote code execution if a user views a specially crafted webpage in Internet Explorer. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-023. "
@Ismaki : Windows patch KB 3139929: When a security update is not a security update
I searched for Win 7 updates and found this one in my list, I did not find it in your script, so it may be good to add it ;) https://support.microsoft.com/fr-fr/kb/3035583
//edit: my bad, i was searching with incorrect parameter in Notedpad++ (entire words only) so it did not find it with only last three digits, this update is in the script.
I have also written a batch script that removes a list of telemetry and nagware updates, and then uses a powershell module, installed separately, to silence said updates automatically on the Windows Update UI. Feel free to submit commits in case new KBs are rolled out. I am planning to keep this updated.
Why is 3050265 and 3065987(replaces the previous) included? this actually allows one to block windows 10 via group policy. Uninstalling it would break those policys and programs like Never10.
I also have questions for the reasoning of having 3102810 in this list. I cant find anything anywhere that says its related to windows 10 or tracking, only that it reduces high cpu and disk usage caused by windows update.
3139923 is listed as a GWX update When it is not. It fixes some things with msi repairs, and only causes issues if 3072630 Is not installed. Since 3072630 is not in this list 3139923 shouldn't be either.
I would suggest to sort the updates on KB in all scripts and all subsequent comments to avoid tedious comparison work
Zelmor, thanks for your great code. I ran the batch file according to your directions on a Windows 7 Home Professional 64 bit machine. The removal of updates went smoothly. However, once the program reached the hiding updates section, I received many error messages about how the computer would not run further code without digital signatures.
Great script, thanks. Have been using Anti-spy beacon 1.6 and noticed there are two entries in the 'Optional' tag that only seem to be temporarily blocked. They always come back after you re-run this app. Don't have any other info as the program doesnt seem to show it. They are 'Office 15 (2013) Telemetry Scheduled Tasks' and 'Office 16 (2016) Telemetry Scheduled Tasks'. Would be nice for these to be added. I have noticed after using your script that one entry in Spy-beacon disappeared, So maybe removing these 'Office' telemetry entries maybe possible. All the Best,
Is there any reason why you don't use a simple FOR loop instead of gazillion of lines?
The above batch file needs a data file called
That way you can easily add new updates as they are discovered.
@ECHO OFF SETLOCAL ENABLEDELAYEDEXPANSION SET /P REVIEW="Would you like to review each update before attempting uninstall ([Y]/N)? " IF /I "!REVIEW!" EQU "N" ( REM AUTO UNINSTALL FOR /F "EOL=; DELIMS=| TOKENS=1" %%I IN (updates_list.txt) DO ( SETLOCAL ECHO Uninstalling [%%I]... SET U=%%I SET KB=!U:~2! WUSA.EXE /uninstall /kb:!KB! /quiet /norestart REM !ERRORLEVEL! returns decimal value of error code CALL :PRINTERROR !ERRORLEVEL! ENDLOCAL ) ECHO That's all! PAUSE EXIT ) ELSE ( REM MANUAL UNINSTALL FOR /F "EOL=; DELIMS=| TOKENS=1,2*" %%I IN (updates_list.txt) DO ( SETLOCAL ECHO Update: [%%I] ECHO Description: %%J SET /P CONFIRM="Uninstall this update ([Y]/N)? " IF /I "!CONFIRM!" EQU "N" ( ECHO Skipping... ) ELSE ( ECHO Uninstalling [%%I]... SET U=%%I SET KB=!U:~2! WUSA.EXE /uninstall /kb:!KB! /quiet /norestart REM !ERRORLEVEL! returns decimal value of error code CALL :PRINTERROR !ERRORLEVEL! ) ENDLOCAL ) ECHO That's all! PAUSE EXIT ) :PRINTERROR SET FOUND=0 FOR /F "EOL=; DELIMS=| TOKENS=1-3" %%X IN (wusa_returns.txt) DO ( IF %1==%%X ( ECHO ^(%%Y^) %%Z SET FOUND=1 ) ) IF %FOUND%==0 ECHO An unknown error has occurred.
I have updated
Additionally, I have compiled and formatted a list of all error codes returned by WUSA in order to keep on top of what is happening exactly during the uninstall process. These codes will be useful in troubleshooting and generally provide helpful feedback.
It would be nice to have a list that exclusively deals with telemetry updates instead of including every update that anyone else has a problem with. I don't want to remove non-telemetry updates. It should not be called "remove telemetry updates" when it removes so much more than that.
Hi, this of course has a fair amount of duplication, but before condensing this down I thought it would be sensible to make sure that all the available alternate sources of information are credited (especially since this Gist has not been updated since 2016 and there's no way for us to push updates to it - if anyone has created a current version of this please link it!).
Three line gaps are between different information sources. This is a collation of around two weeks work on and off looking into this when I can find time, like many others I will finally be making the jump to focus on Linux soon, since we have been given a deadline in the form of security updates for Windows 7 from Microsoft stopping and putting computers at risk in 2020 - probably PureOS or Linux Mint. I've noted the very welcome move from many games developers to push to adding Linux or emulation support now.
BAT file to run after updater:
Other servers you may want to block:
All text typed on the keyboard is stored in temporary files, and sent (once per 30 mins) to:
Telemetry is sent once per 5 minutes, to:
Typing the name of any popular movie into your local file search starts a telemetry process that indexes all media files on your computer and transmits them to:
When a webcam is first enabled, ~35mb of data gets immediately transmitted to:
Everything that is said into an enabled microphone is immediately transmitted to:
This behaviour still occurs after Cortana is fully disabled/uninstalled.
Interestingly, if Cortana is enabled, the voice is first transcribed to text, then the transcription is sent to:
While the inital reflex may be to block all of the above servers via HOSTS, it turns out this won't work: Microsoft has taken the care to hardcode certain IPs, meaning that there is no DNS lookup and no HOSTS consultation. However, if the above servers are blocked via HOSTS, Windows will pretend to be crippled by continuously throwing errors, while still maintaining data collection in the background. Other than an increase in errors, HOSTS blocking did not affect the volume, frequency, or rate of data being transmitted.
1009 spc--cehhhdngdgedkhcfhekgjhje.telemetryverification.net 1
This domain resolved normally. You can block this domain or block similar domains .
1010 au--cebhjdeeihkhghcdcejcidada1.telemetryverification.net 1
**I don't think a hosts file can stop this crap. They just use random odd urls to use telemetry.
I really have done a great deal to stop all this and they still found ways around it. and this is just win7, imagine what 10 is doing**
Windows 7/8/8.1 Updates to avoid as of the June 2018 "Patch Tuesday":
KB971033, Activation exploits
Okay.. Here is my version of "be aware of list"..
This list is focused on Win7, but there are also some Win8 KB's
I don't like MS ways to embed telemetry and the OS upgrade, so I have edited some posts in scheduler which collects the data. As a side effect, it has also calmed down the hard drive's activity. I also have edited a few posts in some reg files.
I hope this list is helpful and it's okay that i typed the KB-numbers in sequence rather than in categories. If you all think the list is okay/good, then I can put it in my first post in this thread, so it will be easy to find in the future.
Regards Marie :)
References for this list is.
-------------------------------------------------------- Marie's be aware of KB-list -----------------------------------------------------
KB2505438 - Slow performance in applications that use the DirectWrite API on a computer that is running Windows 7 or Windows Server 2008 R2 = It often breaks fonts
KB2660075 Time and date if the time one is set to samoa
KB2719857 Fix for USB RNDIS device to connect to a 3G or 4G network in Windows 7 fix for a computer that is running Windows 7
KB2830477 Remote Desktop Connection (RDC) 8.1 client update
KB2902907 microsot security essentials ???? questionable or??++ win defender with not enough details...
KB3006137 Update changes the currency symbol of Lithuania from the Lithuanian litas (Lt) to the euro (€) in Windows
KB3102429 Update that supports Azerbaijani Manat and Georgian Lari currency symbols in Windows
--------> KB3184143 Remove software related to the Windows 10 free upgrade offer. <-----------
Windows Update Client list Win7 WUC updates.
KB2990214 - Apr '15 - WUC: enables ability to upgrade to Win10
Block win telemetry domains in Host file.
---------------------------- Monthly rolups begin here ----------------
KB3179573 August 2016 update rollup includes some new improvements and fixes for the Windows 7 Service Pack 1 (SP1)
KB3185278 September qality rollup The September 2016 update rollup includes some new improvements and fixes for the Windows 7 Service Pack 1 (SP1)
-------- Download rollups.. Listing both security only AND monthly quality rollups. -----------
2018-02 Preview of Monthly Rollup - KB4075211
Hello again :)
To compliment your list of active KB updates, I was offered all of these from my list.
Note:: this is on a reinstalled HP with factory recovery discs OEM win7 Pro x64 SP1. So it may vary for you others with other OEM or retail installations.
*KB971033 Update for activation and validation components in Windows Activation Technologies for Windows 7.
*KB2505438 - Slow performance in applications that use the DirectWrite API on a computer that is running Windows 7 or Windows Server 2008 R2 = It often breaks fonts (see also KB454826)
*KB2660075 Time and date if the time one is set to samoa
*KB2719857 Fix for USB RNDIS device to connect to a 3G or 4G network in Windows 7 fix for a computer that is running Windows 7
*KB2830477 Remote Desktopp Connection (RDC) 8.1 client update
*KB2952664 - is the Windows 7 nagware patch that touts the Windows 10 upgrade. Prepares system for upgrade to Windows 10 (sends a bunch of telemetry data to M$, reported to corrupt system files)
*KB3006137 Update changes the currency symbol of Lithuania from the Lithuanian litas (Lt) to the euro (€) in Windows
*Kb3112343 is the update for Windows 7 users. Both are for making your upgrade to windows 10 easier and better
---------------------------- Monthly rollups----------------
*KB3179573 August 2016 update rollup includes some new improvements and fixes for the Windows 7 Service Pack 1 (SP1)
*KB3184143 Remove software related to the Windows 10 free upgrade offer.
*KB3185278 September quality rollup The September 2016 update rollup includes some new improvements and fixes for the Windows 7 Service Pack 1 (SP1)
I'm new to this site and don't program, but I was attracted to this thread because I'd like to know how to disable any spying my Windows 7 Ultimate might be doing. I don't fully understand all above, is it as simple as a program you guys created that I download, run and it removes the KB's and stuff? (Also, I use Brave and Firefox web browsers.)