Findings about Windows 10 Releases

Discussion in 'Windows 10' started by nexus76, Oct 1, 2014.

  1. murphy78

    murphy78 MDL DISM Enthusiast

    Nov 18, 2012
    7,428
    11,759
    240
  2. nexus76

    nexus76 MDL Addicted

    Jan 25, 2009
    788
    300
    30
    #302 nexus76, Oct 4, 2014
    Last edited by a moderator: Apr 20, 2017
    (OP)
    there's actually a method to disable it, create a nullroute in your hosts file:

    127.0.0.1 vortex.data.microsoft.com
    127.0.0.1 telecommand.telemetry.microsoft.com.nsatc.net

    Code:
    C:\Windows\System32\drivers\etc>ping telecommand.telemetry.microsoft.com.nsatc.net
    
    Pinging telecommand.telemetry.microsoft.com.nsatc.net [127.0.0.1] with 32 bytes of da
    Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
    Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
    Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
    
    Ping statistics for 127.0.0.1:
        Packets: Sent = 3, Received = 3, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 0ms, Average = 0ms
    
    C:\Windows\System32\drivers\etc>ping vortex.data.microsoft.com
    
    Pinging vortex.data.microsoft.com [127.0.0.1] with 32 bytes of data:
    Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
    Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
    Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
    
    Ping statistics for 127.0.0.1:
        Packets: Sent = 3, Received = 3, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 0ms, Maximum = 0ms, Average = 0ms
    
    Eventually check your events.log to find out which app doesn't connect repeatedly.
    That's how we could find the telemetry service maybe.

    I agree, more cloud is one the worst of all ideas.
    More privacy would be the better track.

    What's interesting about the vortex domain is the timing, it connects about every 5 minutes.

    Now I read Alan Henning, an aid official, has been beheaded by ISIL.
    Even the NSA couldn't help - that's the sad part about this "world order" tracking story!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. EFA11

    EFA11 Avatar Guru

    Oct 7, 2010
    8,710
    6,739
    270
    #303 EFA11, Oct 4, 2014
    Last edited by a moderator: Apr 20, 2017
  4. nexus76

    nexus76 MDL Addicted

    Jan 25, 2009
    788
    300
    30
    #304 nexus76, Oct 4, 2014
    Last edited by a moderator: Apr 20, 2017
    (OP)
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Palladin

    Palladin MDL Senior Member

    Feb 1, 2014
    478
    249
    10
    #305 Palladin, Oct 4, 2014
    Last edited: Oct 4, 2014
    maybe they turned it off for the weekend. When I ping either vortex.data.microsoft.com or
    telecommand.telemetry.microsoft.com.nsatc.net I get nothing. :eek:

    ping-vortex.jpg
     
  6. Paulsen

    Paulsen MDL Novice

    Jan 21, 2011
    30
    3
    0
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. sevenacids

    sevenacids MDL Addicted

    Aug 17, 2012
    667
    232
    30
    Explorer is linked against two interesting new DLLs: NotificationController.dll and NotificationControllerPS.dll. They're both native code, one exports startup/shutdown methods for a COM server, so I guess they're COM/WinRT based. Maybe they've got something to do with the notification center.
     
  8. Underclocked

    Underclocked MDL Member

    Sep 3, 2013
    247
    42
    10
    I created a system image just to see if there was any difference in the procedure upon completion. There is no difference from Windows 8.1... no opportunity to create a repair disk is offered. I think that it would have been nice to put that repair disk option back in place since not everyone has a burned copy of the same OS to use to recover the image.
     
  9. Ith

    Ith MDL Junior Member

    Nov 27, 2011
    70
    6
    0
    Partitions can only be formatted in NTFS
    Screenshot (1).png
     
  10. daveo76

    daveo76 MDL Expert

    Nov 9, 2009
    1,074
    282
    60
    All it does for me is hide those 2 icons but I don't get the space back
     
  11. EFA11

    EFA11 Avatar Guru

    Oct 7, 2010
    8,710
    6,739
    270
    #311 EFA11, Oct 4, 2014
    Last edited by a moderator: Apr 20, 2017
    Here's a new one (to me). I know its a program or something requesting to open a port. But, only the Win10 machine is doing this. There are no other records in the router logs of this, except for the Win10 TP machine.

    Code:
    [UPnP set event: add_nat_rule] from source 192.168.1.4, Friday, October 03, 2014 20:27:52
    [UPnP set event: del_nat_rule] from source 192.168.1.4, Friday, October 03, 2014 20:27:52
    [UPnP set event: add_nat_rule] from source 192.168.1.4, Friday, October 03, 2014 20:27:12
    [UPnP set event: del_nat_rule] from source 192.168.1.4, Friday, October 03, 2014 20:27:12
    [UPnP set event: add_nat_rule] from source 192.168.1.4, Friday, October 03, 2014 20:26:27
    [UPnP set event: del_nat_rule] from source 192.168.1.4, Friday, October 03, 2014 20:26:26
    [UPnP set event: add_nat_rule] from source 192.168.1.4, Friday, October 03, 2014 20:25:42
    [UPnP set event: del_nat_rule] from source 192.168.1.4, Friday, October 03, 2014 20:25:41
    [UPnP set event: add_nat_rule] from source 192.168.1.4, Friday, October 03, 2014 20:25:08
    [UPnP set event: del_nat_rule] from source 192.168.1.4, Friday, October 03, 2014 20:25:08
    Apparently Win10TP is making use of UPnP constantly.

    -ed-
    Disable the UPnP in router ended that spamming. Dunno why I didn't have it off already anyway haha

    now back to normal logging lmao

    Code:
    [DoS Attack: SYN/ACK Scan] from source: 92.222.38.142, port 53, Friday, October 03, 2014 21:00:28  ---  Paris, Ile-de-France, France.
    [admin login] from source 192.168.1.115, Friday, October 03, 2014 20:58:34
    [DoS Attack: RST Scan] from source: 107.14.47.123, port 443, Friday, October 03, 2014 20:57:24   ---- Time Warner Cable Internet LLC California, Los Angeles CA
    [DoS Attack: RST Scan] from source: 209.18.46.162, port 443, Friday, October 03, 2014 20:57:24  ---- Time Warner Cable Internet LLC Kansas, Witchita
    [DoS Attack: RST Scan] from source: 107.14.47.122, port 443, Friday, October 03, 2014 20:57:21 ---- Time Warner Cable Internet LLC California, Los Angeles CA
    [DoS Attack: RST Scan] from source: 173.252.103.16, port 443, Friday, October 03, 2014 20:56:36  ---- Facebook, Inc. 
    [DoS Attack: RST Scan] from source: 23.67.56.41, port 443, Friday, October 03, 2014 20:54:23  ---- Akamai Technologies, Inc.
    [DoS Attack: RST Scan] from source: 23.216.10.153, port 443, Friday, October 03, 2014 20:54:22 ---- Akamai Technologies, Inc.
    [DoS Attack: RST Scan] from source: 23.216.10.193, port 443, Friday, October 03, 2014 20:54:22 ---- Akamai Technologies, Inc.
    [DoS Attack: RST Scan] from source: 23.216.10.203, port 443, Friday, October 03, 2014 20:54:22 ---- Akamai Technologies, Inc.
    [DoS Attack: RST Scan] from source: 23.67.56.41, port 443, Friday, October 03, 2014 20:54:22 ---- Akamai Technologies, Inc.
    [DoS Attack: RST Scan] from source: 74.125.224.161, port 443, Friday, October 03, 2014 20:48:18 --- Google Inc.
    Nothing to worry about here, normal blah blah at router end.
     
  12. murphy78

    murphy78 MDL DISM Enthusiast

    Nov 18, 2012
    7,428
    11,759
    240
    hmm not necessarily... it could only be a one-way thing similar to utp.
    nexus did mention it did some sort of encryption handshaking or something.
    Perhaps it doesn't respond unless the magic words are spoken.
     
  13. NICK@NUMBER11

    NICK@NUMBER11 MDL Expert

    Mar 23, 2010
    1,516
    720
    60
    changing the o to a 2 sets check for updates but let me choose whether to download and install them

     
  14. sevenacids

    sevenacids MDL Addicted

    Aug 17, 2012
    667
    232
    30
    I think this is true for every partition larger than 32 GB. FAT32 can only be used for partitions up to that size in all Windows versions.
     
  15. Tito

    Tito Admin / Adviser
    Staff Member

    Nov 30, 2009
    18,929
    19,384
    340
    He wanted to say that exFAT is missing.
     
  16. nexus76

    nexus76 MDL Addicted

    Jan 25, 2009
    788
    300
    30
    #316 nexus76, Oct 4, 2014
    Last edited by a moderator: Apr 20, 2017
    (OP)
    interesting, on commandline it's still shown:

    Code:
    C:\windows\system32>format /?
    Formats a disk for use with Windows.
    
    FORMAT volume [/FS:file-system] [/V:label] [/Q] [/L] [/A:size] [/C] [/I:state] [/X] [/P:passes] [/S:state]
    FORMAT volume [/V:label] [/Q] [/F:size] [/P:passes]
    FORMAT volume [/V:label] [/Q] [/T:tracks /N:sectors] [/P:passes]
    FORMAT volume [/V:label] [/Q] [/P:passes]
    FORMAT volume [/Q]
    
      volume          Specifies the drive letter (followed by a colon),
                      mount point, or volume name.
      /FS:filesystem  Specifies the type of the file system (FAT, FAT32, exFAT,
                      NTFS, UDF, ReFS).
    even exfat.sys is still there:

    Code:
    C:\Windows>dir exfat* /S /A
     Volume in drive C is Windows 10
     Volume Serial Number is 2A5C-C945
    
     Directory of C:\Windows\System32\drivers
    
    13.09.2014  09:20           202 240 exfat.sys
                   1 File(s)        202 240 bytes
    but also refs.sys

    Code:
    C:\Windows>dir refs* /S /A
     Volume in drive C is Windows 10
     Volume Serial Number is 2A5C-C945
    
     Directory of C:\Windows\System32\drivers
    
    13.09.2014  09:20         1 154 512 refs.sys
    13.09.2014  09:20           924 624 refsv1.sys
                   2 File(s)      2 079 136 bytes
    well, exfat is still there, just formatted:

    exfat.png
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. sevenacids

    sevenacids MDL Addicted

    Aug 17, 2012
    667
    232
    30
    Ah, completely forgot about that guy :D
     
  18. cuteee

    cuteee MDL Guru

    Oct 13, 2012
    5,764
    1,001
    180
    New keyboard shortcuts : (for task view)
    CTRL+WIN+D : create new desktop
    CTRL+WIN+F4 : delete desktop
    CTRL+WIN+ left or right arrow : move to other desktop
     
  19. coleoptere2007

    coleoptere2007 MDL Guru

    Apr 8, 2008
    3,302
    1,938
    120
    #319 coleoptere2007, Oct 4, 2014
    Last edited: Oct 4, 2014
    As W10TP is not able to install floppy disk and controller drivers, i tried to take the inf files from W8.1 + updates with no luck, they are refused, even i u try to install them manually from add device, floppy controller is empty,no models are included :p
     
  20. nexus76

    nexus76 MDL Addicted

    Jan 25, 2009
    788
    300
    30
    did you try to boot with disabled driver-signature check and then install the drivers?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...