I use this, so.. Just emailed Bernd (To see if he would care to comment) VirusTotal 4 / 60 Spoiler: The Four Positives SHA256.........: f3e46d99c8bf8bc33f562ecd9770325e57a89212d2ed1958426dd6a338aafb26 File name.......: W10Privacy.exe Detection ratio: 4 / 60 Analysis date..: 2017-06-24 01:38:59 UTC ( 1 day, 4 hours ago ) [ The Four Positives ] Antivirus Result Update Antiy-AVL Trojan/Generic.ASVCS3S.1E5 20170624 Invincea heuristic 20170607 Rising Malware.Heuristic!ET#99% (rdm+) 20170624 Webroot W32.Backdoor.Gen 20170624
Those are generic/heuristic detections, because of malware like behavior: disable WD, block Windows Updates, etc.
.... am aware (as previously stated, I use W10P), was attempting to show that software was safe (in my opinion)... .. but thanks for clarifying
@dhjohns , I ran it on elevated CMD. It wrote operation completed successfully yet I still have Cortana (On the search box it says "Hi!"). Any idea? I'm on the latest Windows 10. Thank You.
You are right. I can't get it to work on build 16232 either, which is odd since it worked previously.
Script that I use, put together from various sources (GodHand, shewolf, etc - all credits to them) Spoiler Code: :: Turns Windows Search into LTSB-Windows Server 2016 search. :: --- Description ---- :: ------------------------ :: Must be run as administrator. <<<<<<<<<<<<<<<< :: Disables Cortana and blocks outbound Cortana network traffic using the Windows Firewall. :: Requires a reboot. <<<<<<<<<<<<<<<< :: The script does not disable or terminate any Cortana-related services or processes. <<<<<<<<<<<<<<<< :: The search feature will still work to find local settings and apps. :: Requires Windows 10 version 1607 or later. [Appears to be functioning on 16232 also] :: (ORIGINAL)--------------------------- :: Will Disable Cortana and Location Use :: ------------------------------------- :: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f :: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortanaAboveLock" /t REG_DWORD /d "0" /f :: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowSearchToUseLocation" /t REG_DWORD /d "0" /f :: Changes Search Bar into Magnifying Glass Icon :: --------------------------------------------- :: reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d "1" /f :: (/ORIGINAL)---------------------------------- :: (EXPANDED VERSION)--------------------------- reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortanaAboveLock" /t REG_DWORD /d "0" /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "DisableWebSearch" /t REG_DWORD /d "1" /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowSearchToUseLocation" /t REG_DWORD /d "0" /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchPrivacy" /t REG_DWORD /d "3" /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchSafeSearch" /t REG_DWORD /d "3" /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWeb" /t REG_DWORD /d "0" /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWebOverMeteredConnections" /t REG_DWORD /d "0" /f reg add "HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" /v "Block Cortana ActionUriServer.exe" /t REG_SZ /d "v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe|Name=Block Cortana ActionUriServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" /f reg add "HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" /v "Block Cortana PlacesServer.exe" /t REG_SZ /d "v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe|Name=Block Cortana PlacesServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" /f reg add "HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" /v "Block Cortana RemindersServer.exe" /t REG_SZ /d "v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe|Name=Block Cortana RemindersServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" /f reg add "HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" /v "Block Cortana RemindersShareTargetApp.exe" /t REG_SZ /d "v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersShareTargetApp.exe|Name=Block Cortana RemindersShareTargetApp.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" /f reg add "HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" /v "Block Cortana SearchUI.exe" /t REG_SZ /d "v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe|Name=Block Cortana SearchUI.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" /f reg add "HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" /v "Block Cortana Package" /t REG_SZ /d "v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|Name=Block Cortana Package|Desc=Block Cortana Outbound UDP/TCP Traffic|AppPkgId=S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742|Platform=2:6:2|Platform2=GTEQ|" /f :: Changes Search Bar into Magnifying Glass Icon :: --------------------------------------------- reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d "1" /f :: (/EXPANDED VERSION)--------------------------
@drew84 , It looks like an over killer. Anything simple? Does it work on the latest version of Window 10? Thank You.
As mentioned in script... :: Requires Windows 10 version 1607 or later. [Appears to be functioning on 16232 also] .. am not a great fan of bloated software, but by the same token, don't see the point of bodging (provided) software (removing/deleting packages etc...) when there may be a more acceptable (Less intrusive) workaround. See a lot of people on here complaining about the shortfalls of Windows 10, mostly Insider Previews (Bad code, bugs etc..) ... When in fact there has been no version of Windows (to my recollection) ever released, that has been GLITCH free. {I use 16232 as my main OS... I for one, enjoy change..} EDIT: 37 released, gonna upgrade ........ but then .. I personally have only liked working with 2 versions of Windows - ME and VISTA [..would like to make a further comment here.... but gonna plead the 5th]
.... wouldn't mind if you kept an eye on the script... in case M$ deceides to change certain parameters.. thanks
Save as .bat file... run as admin lines prefixed with :: are ignored, and can be removed / deleted if you so wish
I did it. Nothing happened (Though on CMD I got all successfully completed). Will I see any change only after restarting? Thank You.
it also borked my wifi as it turned the wifi service off. theres always one or two lines of code in your script(s) that disable something crucial. IME. I