The Ultimate Windows 10 Telemetry Destroyer! With a Batch and PS script!

Discussion in 'Windows 10' started by compgen_1534, Aug 4, 2015.

Thread Status:
Not open for further replies.
  1. compgen_1534

    compgen_1534 MDL Addicted

    Jul 26, 2015
    510
    279
    30
    Welp here's the options

    You can enter the path to the file in an eve later cmd prompt and it will execute the bath file
    You can right click the batch file and run it as an administrator

    I hope I'm answering your question correctly. Please let me know if I'm not and I'll gladly help tell I fix the problem your experiencing :)

    Edit: Wait I got it!!! It's cause I added code to minimize the script but it executed already
    That's why your not seeing it

    Open \windows\system32\drivers\etc\hosts in notepad and provide what it says here please :D
     
  2. tanjali

    tanjali MDL Junior Member

    Aug 22, 2009
    89
    4
    0
    Is there an option to still keep using Defender?
     
  3. compgen_1534

    compgen_1534 MDL Addicted

    Jul 26, 2015
    510
    279
    30
    This program doesn't disable Windows defender if I'm understanding your question correctly :)
     
  4. tanjali

    tanjali MDL Junior Member

    Aug 22, 2009
    89
    4
    0
    Latest version 1.4.3 disabled it and I like using Defender
    I love your program for all other features it is used!
     
  5. compgen_1534

    compgen_1534 MDL Addicted

    Jul 26, 2015
    510
    279
    30
    I'll take a look at that in the next hour or so :)

    I'll make a quick script to get that back in no time :D

    Stay tuned :)

    Thanks for the info... :)
    Appreciate it
     
  6. compgen_1534

    compgen_1534 MDL Addicted

    Jul 26, 2015
    510
    279
    30
    BTW

    Can you post the log file from v1.4.3 so I can take a look at it thanks :D
     
  7. Mikee5

    Mikee5 MDL Novice

    Apr 19, 2010
    15
    1
    0
    Its true windows defender no longer works and cant be manually restarted

    I like windows defender also
     
  8. compgen_1534

    compgen_1534 MDL Addicted

    Jul 26, 2015
    510
    279
    30
    #268 compgen_1534, Aug 9, 2015
    Last edited by a moderator: Apr 20, 2017
    (OP)
  9. tanjali

    tanjali MDL Junior Member

    Aug 22, 2009
    89
    4
    0
    I deleted old log file
    this is a new one


    Windows Update enabled
    -------------------------------
    Starting: 08-Aug-15 9:31:42 PM.
    -------------------------------
    Product Name: Windows 10 Pro
    Build: 10240.16412.amd64fre.th1.150729-1800
    -------------------------------
    =====================================
    -------------------------------
    Start cmd | args: /c REM Stopping and deleting services dmwappushservice and DiagTrack
    -------------------------------
    Start cmd | args: /c REM Stop Telemetry
    -------------------------------

    The operation completed successfully.

    -------------------------------

    The operation completed successfully.

    -------------------------------
    Start cmd | args: /c net stop dmwappushservice
    -------------------------------
    Start cmd | args: /c net stop diagtrack
    -------------------------------

    [SC] OpenService FAILED 1060:

    The specified service does not exist as an installed service.

    -------------------------------

    [SC] OpenService FAILED 1060:

    The specified service does not exist as an installed service.

    -------------------------------

    [SC] OpenService FAILED 1060:

    The specified service does not exist as an installed service.

    -------------------------------
    Start cmd | args: /c echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl
    -------------------------------
    Disable feedback
    -------------------------------


    Windows IP Configuration

    Successfully flushed the DNS Resolver Cache.
    -------------------------------
    Add hosts MS
    -------------------------------
    Start powershell | args: -command "Get-AppxPackage *solit* | Remove-AppxPackage"
    -------------------------------

    Remove-AppxPackage : Deployment failed with HRESULT: 0x80073CFA, Removal failed. Please contact your software vendor.
    (Exception from HRESULT: 0x80073CFA)
    error 0x80070032: AppX Deployment Remove operation on package
    Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy from:
    C:\Windows\SystemApps\Microsoft.XboxGameCallableUI_cw5n1h2txyewy failed. This app is part of Windows and cannot be
    uninstalled on a per-user basis. An administrator can attempt to remove the app from the computer using Turn Windows
    Features on or off. However, it may not be possible to uninstall the app.
    NOTE: For additional information, look for [ActivityId] 67139934-d217-0001-a19a-136717d2d001 in the Event Log or use
    the command line Get-AppxLog -ActivityID 67139934-d217-0001-a19a-136717d2d001
    At line:1 char:26
    + Get-AppxPackage *xbox* | Remove-AppxPackage
    + ~~~~~~~~~~~~~~~~~~
    + CategoryInfo : WriteError: (Microsoft.XboxG...l_cw5n1h2txyewy:String) [Remove-AppxPackage], IOException
    + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.RemoveAppxPackageCommand

    Remove-AppxPackage : Deployment failed with HRESULT: 0x80073CFA, Removal failed. Please contact your software vendor.
    (Exception from HRESULT: 0x80073CFA)
    error 0x80070032: AppX Deployment Remove operation on package
    Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy from:
    C:\Windows\SystemApps\Microsoft.XboxIdentityProvider_cw5n1h2txyewy failed. This app is part of Windows and cannot be
    uninstalled on a per-user basis. An administrator can attempt to remove the app from the computer using Turn Windows
    Features on or off. However, it may not be possible to uninstall the app.
    NOTE: For additional information, look for [ActivityId] 67139934-d217-0001-aa9a-136717d2d001 in the Event Log or use
    the command line Get-AppxLog -ActivityID 67139934-d217-0001-aa9a-136717d2d001
    At line:1 char:26
    + Get-AppxPackage *xbox* | Remove-AppxPackage
    + ~~~~~~~~~~~~~~~~~~
    + CategoryInfo : WriteError: (Microsoft.XboxI...l_cw5n1h2txyewy:String) [Remove-AppxPackage], IOException
    + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.RemoveAppxPackageCommand

    -------------------------------
    Start reg | args: delete "HKLM\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy" /f
    -------------------------------
    Start reg | args: delete "HKLM\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy" /f
    -------------------------------
    Start reg | args: delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\InboxApplications\Microsoft.XboxGameCallableUI_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy" /f
    -------------------------------
    Start reg | args: delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\InboxApplications\Microsoft.XboxIdentityProvider_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy" /f
    -------------------------------
    Start reg | args: delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\S-1-5-21-466518752-883927237-2793961880-1001\Microsoft.XboxApp_2015.729.509.0_neutral_~_8wekyb3d8bbwe" /f
    -------------------------------
    Start reg | args: delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\S-1-5-21-466518752-883927237-2793961880-1001\Microsoft.XboxGameCallableUI_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy" /f
    -------------------------------
    Start reg | args: delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\S-1-5-21-466518752-883927237-2793961880-1001\Microsoft.XboxIdentityProvider_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy" /f
    -------------------------------
    Start powershell | args: -command "Get-AppxPackage *communi* | Remove-AppxPackage"
    -------------------------------
    Start powershell | args: -command "Get-AppxPackage *alarms* | Remove-AppxPackage"
    -------------------------------
    Start powershell | args: -command "Get-AppxPackage *people* | Remove-AppxPackage"
    -------------------------------
    Start powershell | args: -command "Get-AppxPackage *phone* | Remove-AppxPackage"
    -------------------------------
    Start powershell | args: -command "Get-AppxPackage *3d* | Remove-AppxPackage"
    -------------------------------
    Start powershell | args: -command "Get-AppxPackage *camera* | Remove-AppxPackage"
    -------------------------------
    Start powershell | args: -command "Get-AppxPackage *bing* | Remove-AppxPackage"
    -------------------------------
    Start powershell | args: -command "Get-AppxPackage *zune* | Remove-AppxPackage"
    -------------------------------
    Start powershell | args: -command "Get-AppxPackage *soundrec* | Remove-AppxPackage"
    -------------------------------
    Start powershell | args: -command "Get-AppxPackage *photo* | Remove-AppxPackage"
    -------------------------------
    Start cmd | args: /c taskkill /f /im OneDrive.exe > NUL 2>&1
    -------------------------------
    Start cmd | args: /c ping 127.0.0.1 -n 5 > NUL 2>&1
    -------------------------------
    Start C:\Windows\SysWOW64\OneDriveSetup.exe | args: /uninstall
    -------------------------------
    Start cmd | args: /c ping 127.0.0.1 -n 5 > NUL 2>&1
    -------------------------------
    Start cmd | args: /c rd "%USERPROFILE%\OneDrive" /Q /S > NUL 2>&1
    -------------------------------
    Start cmd | args: /c rd "C:\OneDriveTemp" /Q /S > NUL 2>&1
    -------------------------------
    Start cmd | args: /c rd "%LOCALAPPDATA%\Microsoft\OneDrive" /Q /S > NUL 2>&1
    -------------------------------
    Start cmd | args: /c rd "%PROGRAMDATA%\Microsoft OneDrive" /Q /S > NUL 2>&1
    -------------------------------
    Start cmd | args: /c REG DELETE "HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f > NUL 2>&1
    -------------------------------
    Start cmd | args: /c REG DELETE "HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f > NUL 2>&1
    -------------------------------
    Disable private settings
    -------------------------------
    Patch Search.
    -------------------------------
    Patch Windows DEFENDER.
    -------------------------------
    Set Default PhotoViewer
    -------------------------------
    Disabled task: Microsoft\Office\Office ClickToRun Service Monitor
    -------------------------------
    Disabled task: Microsoft\Office\OfficeTelemetryAgentFallBack2016
    -------------------------------
    Disabled task: Microsoft\Office\OfficeTelemetryAgentLogOn2016
    -------------------------------
    Disabled task: Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask
    -------------------------------
    Disabled task: Microsoft\Windows\Customer Experience Improvement Program\UsbCeip
    -------------------------------
    Disabled task: Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
    -------------------------------
    Disabled task: Microsoft\Windows\Shell\FamilySafetyMonitor
    -------------------------------
    Disabled task: Microsoft\Windows\Shell\FamilySafetyRefresh
    -------------------------------
    Disabled task: Microsoft\Windows\Application Experience\AitAgent
    -------------------------------
    Disabled task: Microsoft\Windows\Application Experience\ProgramDataUpdater
    -------------------------------
    Disabled task: Microsoft\Windows\Application Experience\StartupAppTask
    -------------------------------
    Disabled task: Microsoft\Windows\Autochk\Proxy
    -------------------------------
    Disabled task: Microsoft\Windows\Customer Experience Improvement Program\BthSQM
    -------------------------------
    Disabled task: Microsoft\Windows\Customer Experience Improvement Program\Consolidator
    -------------------------------
    Disabled task: Microsoft\Office\OfficeTelemetry\AgentFallBack2016
    -------------------------------
    Disabled task: Microsoft\Office\OfficeTelemetry\OfficeTelemetryAgentLogOn2016
    -------------------------------
     
  10. compgen_1534

    compgen_1534 MDL Addicted

    Jul 26, 2015
    510
    279
    30
    #270 compgen_1534, Aug 9, 2015
    Last edited: Aug 9, 2015
    (OP)
    @tanjali thanks :)

    Whats the error your getting with defender.

    Mine is "Windows Defender is disabled by group policy" or something like that.

    the reason I can't understand what's going on in the log file is that all it says is

    PATCH WINDOWS DEFENDER

    but it doesn't give a list of stuff it tweaks for that.

    ---

    BTW: Please input these commands into elevated cmd to get windows defender working again
    Let me know if they work or not...

    regsvr32 wuaueng.dll
    regsvr32 wucltui.dll
    regsvr32 softpub.dll
    regsvr32 wintrust.dll
    regsvr32 initpki.dll
    regsvr32 wups.dll
    regsvr32 wuweb.dll
    regsvr32 atl.dll
    regsvr32 mssip32.dll
    winmgmt /verifyrepository
    winmgmt /salvagerepository
    sfc /scannow
    shutdown -r -t 1
     
  11. Mikee5

    Mikee5 MDL Novice

    Apr 19, 2010
    15
    1
    0
    Starting: 9/08/2015 10:20:36 AM.
    -------------------------------
    Product Name: Windows 10 Pro
    Build: 10240.16412.amd64fre.th1.150729-1800
    -------------------------------
    =====================================
    -------------------------------
    Start cmd | args: /c REM Stopping and deleting services dmwappushservice and DiagTrack
    -------------------------------
    Start cmd | args: /c REM Stop Telemetry
    -------------------------------

    The operation completed successfully.

    -------------------------------

    The operation completed successfully.

    -------------------------------
    Start cmd | args: /c net stop dmwappushservice
    -------------------------------
    Start cmd | args: /c net stop diagtrack
    -------------------------------

    [SC] OpenService FAILED 1060:

    The specified service does not exist as an installed service.

    -------------------------------

    [SC] OpenService FAILED 1060:

    The specified service does not exist as an installed service.

    -------------------------------

    [SC] OpenService FAILED 1060:

    The specified service does not exist as an installed service.

    -------------------------------
    Start cmd | args: /c echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl
    -------------------------------
    Disable feedback
    -------------------------------
    Start cmd | args: /c echo 127.0.0.1 *.data.microsoft.com>>"C:\Windows/System32/drivers/etc/hosts"
    -------------------------------
    Start cmd | args: /c echo 127.0.0.1 *.telemetry.microsoft.com>>"C:\Windows/System32/drivers/etc/hosts"
    -------------------------------
    Start cmd | args: /c echo 127.0.0.1 *.update.microsoft.com.akadns.net>>"C:\Windows/System32/drivers/etc/hosts"
    -------------------------------
    Start cmd | args: /c echo 127.0.0.1 *.support.microsoft.com>>"C:\Windows/System32/drivers/etc/hosts"
    -------------------------------
    Start cmd | args: /c echo 127.0.0.1 prod-w.nexus.live.com.akadns.net>>"C:\Windows/System32/drivers/etc/hosts"
    -------------------------------


    Windows IP Configuration

    Successfully flushed the DNS Resolver Cache.
    -------------------------------
    Add hosts MS
    -------------------------------
    Disable private settings
    -------------------------------
    Patch Search.
    -------------------------------
    Patch Windows DEFENDER.
    -------------------------------
    Set Default PhotoViewer
    -------------------------------
    Disabled task: Microsoft\Office\Office ClickToRun Service Monitor
    -------------------------------
    Disabled task: Microsoft\Office\OfficeTelemetryAgentFallBack2016
    -------------------------------
    Disabled task: Microsoft\Office\OfficeTelemetryAgentLogOn2016
    -------------------------------
    Disabled task: Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask
    -------------------------------
    Disabled task: Microsoft\Windows\Customer Experience Improvement Program\UsbCeip
    -------------------------------
    Disabled task: Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
    -------------------------------
    Disabled task: Microsoft\Windows\Shell\FamilySafetyMonitor
    -------------------------------
    Disabled task: Microsoft\Windows\Shell\FamilySafetyRefresh
    -------------------------------
    Disabled task: Microsoft\Windows\Application Experience\AitAgent
    -------------------------------
    Disabled task: Microsoft\Windows\Application Experience\ProgramDataUpdater
    -------------------------------
    Disabled task: Microsoft\Windows\Application Experience\StartupAppTask
    -------------------------------
    Disabled task: Microsoft\Windows\Autochk\Proxy
    -------------------------------
    Disabled task: Microsoft\Windows\Customer Experience Improvement Program\BthSQM
    -------------------------------
    Disabled task: Microsoft\Windows\Customer Experience Improvement Program\Consolidator
    -------------------------------
    Disabled task: Microsoft\Office\OfficeTelemetry\AgentFallBack2016
    -------------------------------
    Disabled task: Microsoft\Office\OfficeTelemetry\OfficeTelemetryAgentLogOn2016
    -------------------------------
     
  12. compgen_1534

    compgen_1534 MDL Addicted

    Jul 26, 2015
    510
    279
    30
    [

    thanks anyways already got it :)
     
  13. Mikee5

    Mikee5 MDL Novice

    Apr 19, 2010
    15
    1
    0
    Windows Defender still wont start. When I try to manually start it , I get error 577 a digital signature is invalid, sorry I cant paste the error itself.
    :g:
     
  14. Knives*

    Knives* MDL Member

    Sep 21, 2013
    226
    135
    10
    Could you tell me what I type in the Command Prompt for it to execute? Assume I have your file placed at the root of the "C:" directory.

    Also...

    You either didn't read everything I said or you didn't understand what I said, so I'll say it again:

    That is not an option. This is Windows 10, not Windows 7. I don't mean to sound like a smart ass, I'm trying to put emphasis on what I said already.

    Maybe this is just my problem. Maybe I made Windows (10) open batch files with Notepad as the default program. Or maybe batch files are automatically selected to be opened with Notepad in Windows 10 by default. Is anyone else having this problem?

    That's not it at all. When I double-click it, I see it open in Notepad. Unless opening it in Notepad also executes it and runs your script (which I know it does not), I'm afraid that double-clicking doesn't solve anything.
     
  15. compgen_1534

    compgen_1534 MDL Addicted

    Jul 26, 2015
    510
    279
    30
    I see... If you're double clicking it and it's opening it with notepad, that's because the default association for the .bat file is set to notepad, not cmd

    You need to set file associations in the control panel to fix the issue or type the file path into a cmd and execute it like that

    This has to be the issue...
    I can't think of anything else
     
  16. Knives*

    Knives* MDL Member

    Sep 21, 2013
    226
    135
    10
  17. compgen_1534

    compgen_1534 MDL Addicted

    Jul 26, 2015
    510
    279
    30
  18. Knives*

    Knives* MDL Member

    Sep 21, 2013
    226
    135
    10
    #280 Knives*, Aug 9, 2015
    Last edited by a moderator: Apr 20, 2017