Add block GWX

Add block GWX

Postby spfef » 21.02.2016, 09:40

Now, Mircosoft itself postet a way to disable GWX
https://support.microsoft.com/en-us/kb/3080351
Would it make sense to add this as an option?

Microsoft selbst hat nun eine Möglichkeit veröffentlicht das Zwangsupdate abzustellen
https://support.microsoft.com/de-de/kb/3080351
Wäre so eine Option vielleicht sinnvoll?


Code: Select all
@Echo On
cd %systemroot%\system32
call :IsAdmin

Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Gwx" /v "DisableGwx" /t REG_DWORD /d "1" /f
Reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v "DisableOSUpgrade" /t REG_DWORD /d "1" /f
Exit

:IsAdmin
Reg.exe query "HKU\S-1-5-19\Environment"
If Not %ERRORLEVEL% EQU 0 (
 Cls & Echo You must have administrator rights to continue ...
 Pause & Exit
)
Cls
goto:eof
spfef
 

Re: Add block GWX

Postby boco » 21.02.2016, 15:11

Eh? That are the same regkeys they have admitted to toggle back regularly trough a task installed by them, to infect user's systems with that Win10 Spyware-"OS".

Aha? Das sind die selben Registryschlüssel, die von MS (nach eigenen Angaben) selbst zurückgestellt werden, und zwar durch einen Task den eine neue GWX-Version erstellt, um möglichst viele Nutzer mit diesem Win10-Spyware-"OS" zu infizieren.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2391
Joined: 24.11.2009, 17:00
Location: Germany

Re: Add block GWX

Postby spfef » 21.02.2016, 15:33

You got a source for this Information from Microsoft?
I've not tested this keys at this time.
To test, it shoulb be enough to install a Windows 7, patch it, with wsusofflne, apply the keys an then install optional updates, or am i wrong?


Hast Du eine Quelle von Microsoft dafür?
Ich habe das noch nicht ausprobiert bisher.
Um das zu testen sollte es doch reichen ein Windows 7 zu installieren, mit wsusoffline zu patchen und dann die optionalen Updates installieren, oder liege ich falsch?
spfef
 

Re: Add block GWX

Postby boco » 21.02.2016, 18:54

The problem is,

DisableGWX disables the taskbar icon only, the background tasks and spying goes on.
The "AllowOSUpgrade" setting seems to be (inconsistently) being reset by a task called "refreshgwxconfig-B". I've not seen anything specific about "DisableOSUpgrade", but I wouldn't trust them on that, either.

If you want MS sources, they do not document that 'features', for obvious reasons. Searching for the task above does reveal some information proven in tests. That task runs every 12 hours, and you can not touch its config unless you gain TrustedInstaller privileges. Does that sound like honest activity? It's actually malwqare behavior.

Here's some testing and documentation by UltimateOutsider (the author of GWXControlPanel, a nifty little tool that keeps the gremlins at bay): http://blog.ultimateoutsider.com/2016/0 ... ystem.html

Here some more: http://www.infoworld.com/article/302074 ... nd-81.html
http://betanews.com/2015/12/07/microsof ... t-want-it/
http://betanews.com/2016/01/14/microsof ... e-malware/


Ich habe das noch nicht ausprobiert bisher.
Please try, maybe we can find a definite pattern. However, the best protection is to keep those updates out, in the first place. Not only because of the WinX-debacle, but also extensive telemetry brought into Win7/8.x.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2391
Joined: 24.11.2009, 17:00
Location: Germany


Return to Anregungen / Suggestions

Who is online

Users browsing this forum: No registered users and 34 guests