WinToFlash [The Bootable USB Creator]

Novicorp WinToFlash Forum

View unanswered posts | View active topics It is currently 23 Nov 2017, 22:13



Reply to topic  [ 2 posts ] 
 How to stop Windows 10 from spying manual "how-to" 
Author Message
Support team
User avatar

Joined: 04 Jul 2009, 11:00
Posts: 1416
Reply with quote
Post How to stop Windows 10 from spying manual "how-to"
This is short how-to disable, delete and remove all Windows 10 unwanted tracking and spying features with command line.

To do this automatically download our free Remove Windows 10 Spying Features app.

1. Disable Tracking Windows Services
in command line (with admin privileges) run following commands:
net stop dmwappushservice
net stop diagtrack

this stops running services
now, delete them:
sc delete dmwappushservice
sc delete diagtrack

reboot to delete them completely

2. Disable keylogger feature
navigate to the file %ALLUSERSPROFILE%\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl and delete all data inside the file with notepad or delete file and create new one with the same name, but empty.
in command line remove file system privileges for user SYSTEM
cacls "%ALLUSERSPROFILE%\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl" /d "SYSTEM"
press Y to confirm the operation

start regedit and create/change following values:
value AllowTelemetry at HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection set to 0
value Start at HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener set to 0
value AllowTelemetry at HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection set to 0

3. Disable domains for feedbacks
start notepad %WinDIR%\System32\drivers\etc\hosts and add following lines into it, save the file
Quote:
127.0.0.1 vortex.data.microsoft.com
127.0.0.1 vortex-win.data.microsoft.com
127.0.0.1 telecommand.telemetry.microsoft.com
127.0.0.1 telecommand.telemetry.microsoft.com.nsatc.net
127.0.0.1 oca.telemetry.microsoft.com
127.0.0.1 oca.telemetry.microsoft.com.nsatc.net
127.0.0.1 sqm.telemetry.microsoft.com
127.0.0.1 sqm.telemetry.microsoft.com.nsatc.net
127.0.0.1 watson.telemetry.microsoft.com
127.0.0.1 watson.telemetry.microsoft.com.nsatc.net
127.0.0.1 redir.metaservices.microsoft.com
127.0.0.1 choice.microsoft.com
127.0.0.1 choice.microsoft.com.nsatc.net
127.0.0.1 df.telemetry.microsoft.com
127.0.0.1 reports.wes.df.telemetry.microsoft.com
127.0.0.1 wes.df.telemetry.microsoft.com
127.0.0.1 services.wes.df.telemetry.microsoft.com
127.0.0.1 sqm.df.telemetry.microsoft.com
127.0.0.1 telemetry.microsoft.com
127.0.0.1 watson.ppe.telemetry.microsoft.com
127.0.0.1 telemetry.appex.bing.net
127.0.0.1 telemetry.urs.microsoft.com
127.0.0.1 telemetry.appex.bing.net:443
127.0.0.1 settings-sandbox.data.microsoft.com
127.0.0.1 vortex-sandbox.data.microsoft.com
127.0.0.1 survey.watson.microsoft.com
127.0.0.1 watson.live.com
127.0.0.1 watson.microsoft.com
127.0.0.1 statsfe2.ws.microsoft.com
127.0.0.1 corpext.msitadfs.glbdns2.microsoft.com
127.0.0.1 compatexchange.cloudapp.net
127.0.0.1 cs1.wpc.v0cdn.net
127.0.0.1 a-0001.a-msedge.net
127.0.0.1 statsfe2.update.microsoft.com.akadns.net
127.0.0.1 sls.update.microsoft.com.akadns.net
127.0.0.1 fe2.update.microsoft.com.akadns.net
127.0.0.1 diagnostics.support.microsoft.com
127.0.0.1 corp.sts.microsoft.com
127.0.0.1 statsfe1.ws.microsoft.com
127.0.0.1 pre.footprintpredict.com
127.0.0.1 i1.services.social.microsoft.com
127.0.0.1 i1.services.social.microsoft.com.nsatc.net
127.0.0.1 feedback.windows.com
127.0.0.1 feedback.microsoft-hohm.com
127.0.0.1 feedback.search.microsoft.com
127.0.0.1 rad.msn.com
127.0.0.1 preview.msn.com
127.0.0.1 ad.doubleclick.net
127.0.0.1 ads.msn.com
127.0.0.1 ads1.msads.net
127.0.0.1 ads1.msn.com
127.0.0.1 a.ads1.msn.com
127.0.0.1 a.ads2.msn.com
127.0.0.1 adnexus.net
127.0.0.1 adnxs.com
127.0.0.1 aidps.atdmt.com
127.0.0.1 az361816.vo.msecnd.net
127.0.0.1 az512334.vo.msecnd.net
127.0.0.1 a.rad.msn.com
127.0.0.1 a.ads2.msads.net
127.0.0.1 ac3.msn.com
127.0.0.1 aka-cdn-ns.adtech.de
127.0.0.1 b.rad.msn.com
127.0.0.1 b.ads2.msads.net
127.0.0.1 b.ads1.msn.com
127.0.0.1 bs.serving-sys.com
127.0.0.1 c.msn.com
127.0.0.1 cdn.atdmt.com
127.0.0.1 cds26.ams9.msecn.net
127.0.0.1 c.atdmt.com
127.0.0.1 db3aqu.atdmt.com
127.0.0.1 ec.atdmt.com
127.0.0.1 flex.msn.com
127.0.0.1 g.msn.com
127.0.0.1 h2.msn.com
127.0.0.1 h1.msn.com
127.0.0.1 live.rads.msn.com
127.0.0.1 msntest.serving-sys.com
127.0.0.1 m.adnxs.com
127.0.0.1 m.hotmail.com
127.0.0.1 preview.msn.com
127.0.0.1 rad.msn.com
127.0.0.1 rad.live.com
127.0.0.1 secure.flashtalking.com
127.0.0.1 static.2mdn.net
127.0.0.1 s.gateway.messenger.live.com
127.0.0.1 secure.adnxs.com
127.0.0.1 sO.2mdn.net
127.0.0.1 http://www.msftncsi.com
127.0.0.1 msftncsi.com
127.0.0.1 view.atdmt.com


start ipconfig /flushdns in command line

3. Disable scheduled tasks
execute following commands into the command line to disable all unwanted scheduled tasks:
powershell -command "Disable-ScheduledTask -TaskName \"\Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask\""
SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /disable
powershell -command "Disable-ScheduledTask -TaskName \"\Microsoft\Windows\Customer Experience Improvement Program\UsbCeip\""
SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /disable
powershell -command "Disable-ScheduledTask -TaskName \"\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem\""
powershell -command "Disable-ScheduledTask -TaskName \"\Microsoft\Windows\Shell\FamilySafetyMonitor\""
powershell -command "Disable-ScheduledTask -TaskName \"\Microsoft\Windows\Shell\FamilySafetyRefresh\""
SCHTASKS /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefresh" /disable
powershell -command "Disable-ScheduledTask -TaskName \"\Microsoft\Windows\Application Experience\AitAgent\""
SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\AitAgent" /disable
powershell -command "Disable-ScheduledTask -TaskName \"\Microsoft\Windows\Application Experience\ProgramDataUpdater\""
SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /disable
powershell -command "Disable-ScheduledTask -TaskName \"\Microsoft\Windows\Application Experience\StartupAppTask\""
powershell -command "Disable-ScheduledTask -TaskName \"\Microsoft\Windows\Autochk\Proxy\""
SCHTASKS /Change /TN "Microsoft\Windows\Autochk\Proxy" /disable
powershell -command "Disable-ScheduledTask -TaskName \"\Microsoft\Windows\Customer Experience Improvement Program\BthSQM\""
SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\BthSQM" /disable
powershell -command "Disable-ScheduledTask -TaskName \"\Microsoft\Windows\Customer Experience Improvement Program\Consolidator\""
SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /disable
SCHTASKS /Change /TN "Microsoft\Office\OfficeTelemetry\OfficeTelemetryAgentLogOn2016" /disable
SCHTASKS /Change /TN "Microsoft\Office\OfficeTelemetry\AgentFallBack2016"


4. Reboot
You are done!





09 Aug 2015, 15:52
Report this post
Profile WWW
Reply with quote
Post Re: How to stop Windows 10 from spying manual "how-to"
Hi, thanks for all the work this needed to be done. thought id post because iv been experiencing some strange issues which may or may not be related. (also sorry for posting here if there is a more appropriate place i am unfamiliar with this forum) Recently after installing windows 10 and of course using this nifty little tool i have started to notice errors in the events log. some of them relate directly to the code written in you manual description. I assume this is normal and its just windows trying and failing to run processes related to 'spying'? What does concern me is that i am having random reboots(clean install etc...) events viewer shows that it is a critical kernal mode error also im seeing errors with readyboot and many more. As i say it could be totally unrelated but i thought it worth mentioning (also does this app change ownership of registry keys in anyway? as iv had issues with permissions for clsid and appid. Any insight would be greatly appreciated, iv been pulling my hair out over this


04 Oct 2015, 21:14
Report this post
Display posts from previous:  Sort by  
Reply to topic   [ 2 posts ] 

Who is online

Users browsing this forum: No registered users and 2 guests


You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

cron