Windows 7/8.1 - Restore your privacy (Response to: Windows Telemetry - Concerns...)


Askarus

Forum Addict!
Joined
Sep 28, 2011
Messages
5,006
Location
Germany
This is a response to the Windows Telemetry thread.


Thanks for opening my eyes :)


It's meant for those who want or have to use Windows in some way but want as much privacy as possible.


It's mostly for Win 7 and 8.1. I don't have experience with Win 10. I'll add Win 10 if I get some valid information, but can't test it at the moment.


I use Windows 8.1 for gaming mostly but still don't want MS in my System.


I've searched the Internet in order to get my Windows as privat as possible.


This is only what I've found. If anyone has something to add, please do so. I'll add it to the first post then.


Please no comments like: "I don't play any games that are Windows only" or "Don't use Windows".


Some have to use Windows (work, etc.) and some like me might want to play games without to have to mess with wine or get limitted because it's not supported under Linux. And yes, there might be some older Games that will never see a Linux port and I want to play anyways.

##############################################################
EDIT:
IMPORTANT: Aegis is not longer maintained.

Here is a new script. It's called Ancile and a fork of Aegis.
I did not check it myself yet but here's the Link for you:
Information
Download

#############################################################

This is the old Post to see what the old script does.
###################################################################################################


1: Main Script


Download latest Version: https://voat.co/v/technology/comments/459263
Unzip and run "aegis.cmd" as Admin.


Here's what the script:

@echo off


echo -/- aegis v1.9 by https://voat.co/u/thepower (https://tiny.cc/aegis-voat)
echo.


echo press ctrl-c to cancel, enter to continue
pause >nul
echo.
echo.


echo step 1/8: disable gwx/skydrive/spynet/telemetry/wifisense ...
echo.


taskkill /f /im gwx.exe /t >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\microsoft\wcmsvc\wifinetworkmanager" -ot reg -actn setowner -ownr n:administrators >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\microsoft\wcmsvc\wifinetworkmanager" -ot reg -actn ace -ace "n:administrators;p:full" >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\microsoft\windows\currentversion\windowsupdate\auto update" -ot reg -actn setowner -ownr n:administrators >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\microsoft\windows\currentversion\windowsupdate\auto update" -ot reg -actn ace -ace "n:administrators;p:full" >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\microsoft\windows defender\spynet" -ot reg -actn setowner -ownr n:administrators >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\microsoft\windows defender\spynet" -ot reg -actn ace -ace "n:administrators;p:full" >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\policies\microsoft\windows\datacollection" -ot reg -actn setowner -ownr n:administrators >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\policies\microsoft\windows\datacollection" -ot reg -actn ace -ace "n:administrators;p:full" >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\policies\microsoft\windows\gwx" -ot reg -actn setowner -ownr n:administrators >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\policies\microsoft\windows\gwx" -ot reg -actn ace -ace "n:administrators;p:full" >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\policies\microsoft\windows\scripteddiagnosticsprovider\policy" -ot reg -actn setowner -ownr n:administrators >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\policies\microsoft\windows\scripteddiagnosticsprovider\policy" -ot reg -actn ace -ace "n:administrators;p:full" >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\policies\microsoft\windows\skydrive" -ot reg -actn setowner -ownr n:administrators >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\policies\microsoft\windows\skydrive" -ot reg -actn ace -ace "n:administrators;p:full" >nul 2>nul
regedit /S "%~dp0aegis.reg" >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\policies\microsoft\windows\windowsupdate" -ot reg -actn setowner -ownr n:administrators >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\software\policies\microsoft\windows\windowsupdate" -ot reg -actn ace -ace "n:administrators;p:full" >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\system\currentcontrolset\control\wmi\autologger\autoLogger-diagtrack-listener" -ot reg -actn setowner -ownr n:administrators >nul 2>nul
"%~dp0setacl.exe" -on "hkey_local_machine\system\currentcontrolset\control\wmi\autologger\autoLogger-diagtrack-listener" -ot reg -actn ace -ace "n:administrators;p:full" >nul 2>nul
reg delete "hkey_local_machine\system\currentcontrolset\control\wmi\autologger\autoLogger-diagtrack-listener" /f >nul 2>nul
timeout 1 >nul


timeout 2 >nul
echo.


echo step 2/8: disable/hide windows 10 download directory ...
echo.


"%~dp0setacl.exe" -on "%systemdrive%\$windows.~bt" -ot file -actn setprot -op dacl:np;sacl:nc -rec cont_obj -actn setowner -ownr n:administrators >nul 2>nul
rmdir /q /s "%systemdrive%\$windows.~bt" >nul 2>nul
mkdir "%systemdrive%\$windows.~bt" >nul 2>nul
attrib +h "%systemdrive%\$windows.~bt" >nul 2>nul
"%~dp0setacl.exe" -on "%systemdrive%\$windows.~bt" -ot file -actn setprot -op dacl:p_nc;sacl:p_nc -rec cont_obj -actn setowner -ownr n:administrators >nul 2>nul
timeout 1 >nul


timeout 2 >nul
echo.


echo step 3/8: uninstall updates ...
echo.


echo 01/31 - uninstall kb 971033 (https://support.microsoft.com/en-us/kb/971033)
start /w wusa /kb:971033 /norestart /quiet /uninstall >nul 2>nul
echo 02/31 - uninstall kb 2902907 (https://support.microsoft.com/en-us/kb/2902907)
start /w wusa /kb:2902907 /norestart /quiet /uninstall >nul 2>nul
echo 03/31 - uninstall kb 2922324 (https://support.microsoft.com/en-us/kb/2922324)
start /w wusa /kb:2922324 /norestart /quiet /uninstall >nul 2>nul
echo 04/31 - uninstall kb 2952664 (https://support.microsoft.com/en-us/kb/2952664)
start /w wusa /kb:2952664 /norestart /quiet /uninstall >nul 2>nul
echo 05/31 - uninstall kb 2976978 (https://support.microsoft.com/en-us/kb/2976978)
start /w wusa /kb:2976978 /norestart /quiet /uninstall >nul 2>nul
echo 06/31 - uninstall kb 2977759 (https://support.microsoft.com/en-us/kb/2977759)
start /w wusa /kb:2977759 /norestart /quiet /uninstall >nul 2>nul
echo 07/31 - uninstall kb 2990214 (https://support.microsoft.com/en-us/kb/2990214)
start /w wusa /kb:2990214 /norestart /quiet /uninstall >nul 2>nul
echo 08/31 - uninstall kb 2999226 (https://support.microsoft.com/en-us/kb/2999226)
start /w wusa /kb:2999226 /norestart /quiet /uninstall >nul 2>nul
echo 09/31 - uninstall kb 3012973 (https://support.microsoft.com/en-us/kb/3012973)
start /w wusa /kb:3012973 /norestart /quiet /uninstall >nul 2>nul
echo 10/31 - uninstall kb 3014460 (https://support.microsoft.com/en-us/kb/3014460)
start /w wusa /kb:3014460 /norestart /quiet /uninstall >nul 2>nul
echo 11/31 - uninstall kb 3015249 (https://support.microsoft.com/en-us/kb/3015249)
start /w wusa /kb:3015249 /norestart /quiet /uninstall >nul 2>nul
echo 12/31 - uninstall kb 3021917 (https://support.microsoft.com/en-us/kb/3021917)
start /w wusa /kb:3021917 /norestart /quiet /uninstall >nul 2>nul
echo 13/31 - uninstall kb 3022345 (https://support.microsoft.com/en-us/kb/3022345)
start /w wusa /kb:3022345 /norestart /quiet /uninstall >nul 2>nul
echo 14/31 - uninstall kb 3035583 (https://support.microsoft.com/en-us/kb/3035583)
start /w wusa /kb:3035583 /norestart /quiet /uninstall >nul 2>nul
echo 15/31 - uninstall kb 3044374 (https://support.microsoft.com/en-us/kb/3044374)
start /w wusa /kb:3044374 /norestart /quiet /uninstall >nul 2>nul
echo 16/31 - uninstall kb 3046480 (https://support.microsoft.com/en-us/kb/3046480)
start /w wusa /kb:3046480 /norestart /quiet /uninstall >nul 2>nul
echo 17/31 - uninstall kb 3050265 (https://support.microsoft.com/en-us/kb/3050265)
start /w wusa /kb:3050265 /norestart /quiet /uninstall >nul 2>nul
echo 18/31 - uninstall kb 3050267 (https://support.microsoft.com/en-us/kb/3050267)
start /w wusa /kb:3050267 /norestart /quiet /uninstall >nul 2>nul
echo 19/31 - uninstall kb 3065987 (https://support.microsoft.com/en-us/kb/3065987)
start /w wusa /kb:3065987 /norestart /quiet /uninstall >nul 2>nul
echo 20/31 - uninstall kb 3065988 (https://support.microsoft.com/en-us/kb/3065988)
start /w wusa /kb:3065988 /norestart /quiet /uninstall >nul 2>nul
echo 21/31 - uninstall kb 3068708 (https://support.microsoft.com/en-us/kb/3068708)
start /w wusa /kb:3068708 /norestart /quiet /uninstall >nul 2>nul
echo 22/31 - uninstall kb 3075249 (https://support.microsoft.com/en-us/kb/3075249)
start /w wusa /kb:3075249 /norestart /quiet /uninstall >nul 2>nul
echo 23/31 - uninstall kb 3075851 (https://support.microsoft.com/en-us/kb/3075851)
start /w wusa /kb:3075851 /norestart /quiet /uninstall >nul 2>nul
echo 24/31 - uninstall kb 3075853 (https://support.microsoft.com/en-us/kb/3075853)
start /w wusa /kb:3075853 /norestart /quiet /uninstall >nul 2>nul
echo 25/31 - uninstall kb 3080149 (https://support.microsoft.com/en-us/kb/3080149)
start /w wusa /kb:3080149 /norestart /quiet /uninstall >nul 2>nul
echo 26/31 - uninstall kb 3083324 (https://support.microsoft.com/en-us/kb/3083324)
start /w wusa /kb:3083324 /norestart /quiet /uninstall >nul 2>nul
echo 27/31 - uninstall kb 3083325 (https://support.microsoft.com/en-us/kb/3083325)
start /w wusa /kb:3083325 /norestart /quiet /uninstall >nul 2>nul
echo 28/31 - uninstall kb 3083710 (https://support.microsoft.com/en-us/kb/3083710)
start /w wusa /kb:3083710 /norestart /quiet /uninstall >nul 2>nul
echo 29/31 - uninstall kb 3083711 (https://support.microsoft.com/en-us/kb/3083711)
start /w wusa /kb:3083711 /norestart /quiet /uninstall >nul 2>nul
echo 30/31 - uninstall kb 3112343 (https://support.microsoft.com/en-us/kb/3112343)
start /w wusa /kb:3112343 /norestart /quiet /uninstall >nul 2>nul
echo 31/31 - uninstall kb 3112336 (https://support.microsoft.com/en-us/kb/3112336)
start /w wusa /kb:3112336 /norestart /quiet /uninstall >nul 2>nul
echo.


timeout 2 >nul
echo.


echo step 4/8: hide updates (this may take a while, be patient) ...
echo.


start "title" /b /wait cscript.exe "%~dp0aegis.vbs" 971033 2902907 2922324 2952664 2976978 2977759 2990214 2999226 3012973 3014460 3015249 3021917 3022345 3035583 3044374 3046480 3050265 3050267 3065987 3065988 3068708 3075249 3075851 3075853 3080149 3083324 3083325 3083710 3083711 3112343 3112336
echo.


timeout 2 >nul
echo.


echo step 5/8: disable scheduled tasks ...
echo.


schtasks /change /disable /tn "\microsoft\windows\application experience\aitagent" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\application experience\microsoft compatibility appraiser" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\application experience\programdataupdater" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\autochk\proxy" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\customer experience improvement program\consolidator" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\customer experience improvement program\kernelceiptask" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\customer experience improvement program\usbceip" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\diskdiagnostic\microsoft-windows-diskdiagnosticdatacollector" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\maintenance\winsat" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\activatewindowssearch" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\configureinternettimeservice" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\dispatchrecoverytasks" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\ehdrminit" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\installplayready" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\mcupdate" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\mediacenterrecoverytask" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\objectstorerecoverytask" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\ocuractivate" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\ocurdiscovery" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\pbdadiscovery">nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\pbdadiscoveryw1" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\pbdadiscoveryw2" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\pvrrecoverytask" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\pvrscheduletask" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\registersearch" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\reindexsearchroot" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\sqlliterecoverytask" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\media center\updaterecordpath" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\pi\sqm-tasks" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\power efficiency diagnostics\analyzeSystem" >nul 2>nul
schtasks /change /disable /tn "\microsoft\windows\windows error reporting\queuereporting" >nul 2>nul
echo.


timeout 2 >nul


echo step 6/8: uninstall diagtrack ...
echo.


sc stop diagtrack >nul 2>nul
sc delete diagtrack >nul 2>nul


timeout 2 >nul
echo.


echo step 7/8: disable remote registry ...
echo.


sc config remoteregistry start= disabled >nul 2>nul
sc stop remoteregistry >nul 2>nul
echo.


timeout 2 >nul


echo step 8/8: block hosts ...
timeout 1 >nul
echo.


"%~dp0block.cmd"


timeout 2 >nul
echo.


echo done
pause >nul



And here the "blok script". It's triggered by the main script.

@echo off


echo block a-0001.a-msedge.net
route -p add 204.79.197.200/32 0.0.0.0 >nul 2>nul


echo block a-0002.a-msedge.net
route -p add 204.79.197.201/32 0.0.0.0 >nul 2>nul


echo block a-0003.a-msedge.net
route -p add 204.79.197.203/32 0.0.0.0 >nul 2>nul


echo block a-0004.a-msedge.net
route -p add 204.79.197.206/32 0.0.0.0 >nul 2>nul


echo block a-0005.a-msedge.net
route -p add 204.79.197.204/32 0.0.0.0 >nul 2>nul


echo block a-0006.a-msedge.net
route -p add 204.79.197.208/32 0.0.0.0 >nul 2>nul


echo block a-0007.a-msedge.net
route -p add 204.79.197.209/32 0.0.0.0 >nul 2>nul


echo block a-0008.a-msedge.net
route -p add 204.79.197.210/32 0.0.0.0 >nul 2>nul


echo block a-0009.a-msedge.net
route -p add 204.79.197.211/32 0.0.0.0 >nul 2>nul


echo block a23-218-212-69.deploy.static.akamaitechnologies.com


echo block a.ads1.msn.com


echo block a.ads2.msads.net
route -p add 93.184.215.200/32 0.0.0.0 >nul 2>nul


echo block a.ads2.msn.com


echo block ac3.msn.com
route -p add 131.253.14.76/32 0.0.0.0 >nul 2>nul


echo block activation.playready.microsoft.com
route -p add 134.170.119.205/32 0.0.0.0 >nul 2>nul


echo block ad.doubleclick.net
route -p add 216.58.216.198/32 0.0.0.0 >nul 2>nul


echo block ads1.msads.net
route -p add 23.201.58.73/32 0.0.0.0 >nul 2>nul


echo block ads1.msn.com
route -p add 8.253.14.126/32 0.0.0.0 >nul 2>nul
route -p add 8.254.59.126/32 0.0.0.0 >nul 2>nul
route -p add 8.27.81.126/32 0.0.0.0 >nul 2>nul


echo block adsmockarc.azurewebsites.net
route -p add 191.236.16.12/32 0.0.0.0 >nul 2>nul


echo block ads.msn.com
route -p add 157.56.23.91/32 0.0.0.0 >nul 2>nul


echo block adsyndication.msn.com
route -p add 207.46.120.187/32 0.0.0.0 >nul 2>nul


echo block aidps.atdmt.com
route -p add 131.253.40.44/32 0.0.0.0 >nul 2>nul


echo block ajax.aspnetcdn.com
route -p add 93.184.215.200/32 0.0.0.0 >nul 2>nul


echo block aka-cdn-ns.adtech.de
route -p add 128.177.96.33/32 0.0.0.0 >nul 2>nul
route -p add 128.177.96.43/32 0.0.0.0 >nul 2>nul


echo block a-msedge.net


timeout 1 >nul


echo block api.bing.com
route -p add 191.234.5.80/32 0.0.0.0 >nul 2>nul


echo block appexmapsappupdate.blob.core.windows.net
route -p add 23.98.49.14/32 0.0.0.0 >nul 2>nul


echo block apps.skype.com
route -p add 23.193.28.49/32 0.0.0.0 >nul 2>nul


echo block a.rad.msn.com


echo block au.au-msedge.net
route -p add 191.234.4.50/32 0.0.0.0 >nul 2>nul


echo block auth.gfx.ms
route -p add 23.61.184.70/32 0.0.0.0 >nul 2>nul


echo block az361816.vo.msecnd.net


echo block az512334.vo.msecnd.net


echo block b.ads1.msn.com


echo block b.ads2.msads.net
route -p add 93.184.215.200/32 0.0.0.0 >nul 2>nul


echo block bingads.microsoft.com
route -p add 66.119.152.204/32 0.0.0.0 >nul 2>nul


echo block bing.com
route -p add 204.79.197.200/32 0.0.0.0 >nul 2>nul


echo block b.rad.msn.com


echo block bs.serving-sys.com
route -p add 63.241.108.124/32 0.0.0.0 >nul 2>nul


echo block c1.microsoft.com


echo block c.atdmt.com
route -p add 131.253.40.50/32 0.0.0.0 >nul 2>nul


echo block cdn.atdmt.com


echo block cdn.content.prod.cms.msn.com
route -p add 165.254.155.67/32 0.0.0.0 >nul 2>nul
route -p add 165.254.155.75/32 0.0.0.0 >nul 2>nul


echo block cdp1.public-trust.com
route -p add 64.18.20.10/32 0.0.0.0 >nul 2>nul
route -p add 65.207.25.151/32 0.0.0.0 >nul 2>nul


echo block cds26.ams9.msecn.net
route -p add 198.105.244.104/32 0.0.0.0 >nul 2>nul
route -p add 198.105.254.104/32 0.0.0.0 >nul 2>nul


echo block choice.microsoft.com
route -p add 157.56.91.77/32 0.0.0.0 >nul 2>nul


echo block choice.microsoft.com.nsatc.net
route -p add 157.56.91.77/32 0.0.0.0 >nul 2>nul


echo block c.microsoft.com
route -p add 134.170.188.139/32 0.0.0.0 >nul 2>nul


echo block c.msn.com
route -p add 65.52.108.11/32 0.0.0.0 >nul 2>nul


echo block cmsresources.windowsphone.com
route -p add 23.196.107.128/32 0.0.0.0 >nul 2>nul


timeout 1 >nul


echo block compatexchange.cloudapp.net
route -p add 23.99.10.11/32 0.0.0.0 >nul 2>nul


echo block content.windows.microsoft.com
route -p add 23.15.9.64/32 0.0.0.0 >nul 2>nul
route -p add 23.15.9.81/32 0.0.0.0 >nul 2>nul


echo block corpext.msitadfs.glbdns2.microsoft.com
route -p add 65.55.29.238/32 0.0.0.0 >nul 2>nul


echo block corp.sts.microsoft.com


echo block cs1.wpc.v0cdn.net
route -p add 93.184.215.200/32 0.0.0.0 >nul 2>nul


echo block c.s-microsoft.com
route -p add 104.79.153.93/32 0.0.0.0 >nul 2>nul


echo block db3aqu.atdmt.com
route -p add 94.245.121.176/32 0.0.0.0 >nul 2>nul
route -p add 94.245.121.177/32 0.0.0.0 >nul 2>nul
route -p add 94.245.121.178/32 0.0.0.0 >nul 2>nul
route -p add 94.245.121.179/32 0.0.0.0 >nul 2>nul


echo block dc.services.visualstudio.com
route -p add 191.236.194.164/32 0.0.0.0 >nul 2>nul


echo block dev.virtualearth.net
route -p add 131.253.40.84/32 0.0.0.0 >nul 2>nul


echo block df.telemetry.microsoft.com
route -p add 65.52.100.7/32 0.0.0.0 >nul 2>nul


echo block diagnostics.support.microsoft.com
route -p add 66.119.147.131/32 0.0.0.0 >nul 2>nul


echo block displaycatalog.md.mp.microsoft.com
route -p add 65.52.108.92/32 0.0.0.0 >nul 2>nul


echo block dl.delivery.mp.microsoft.com
route -p add 165.254.206.121/32 0.0.0.0 >nul 2>nul
route -p add 165.254.206.122/32 0.0.0.0 >nul 2>nul


echo block dmd.metaservices.microsoft.com
route -p add 65.55.113.11/32 0.0.0.0 >nul 2>nul
route -p add 65.55.113.12/32 0.0.0.0 >nul 2>nul
route -p add 65.55.113.13/32 0.0.0.0 >nul 2>nul


echo block download.microsoft.com
route -p add 104.79.155.167/32 0.0.0.0 >nul 2>nul


echo block download-ssl.msgamestudios.com
route -p add 104.79.151.241/32 0.0.0.0 >nul 2>nul


echo block ec.atdmt.com
route -p add 93.184.215.200/32 0.0.0.0 >nul 2>nul


echo block ecn.dev.virtualearth.net
route -p add 104.79.142.103/32 0.0.0.0 >nul 2>nul


echo block en-us.appex-rf.msn.com
route -p add 23.15.9.18/32 0.0.0.0 >nul 2>nul
route -p add 23.15.9.58/32 0.0.0.0 >nul 2>nul


echo block fe2.update.microsoft.com.akadns.net
route -p add 134.170.51.190/32 0.0.0.0 >nul 2>nul
route -p add 134.170.53.29/32 0.0.0.0 >nul 2>nul
route -p add 134.170.53.30/32 0.0.0.0 >nul 2>nul
route -p add 134.170.58.123/32 0.0.0.0 >nul 2>nul
route -p add 134.170.58.189/32 0.0.0.0 >nul 2>nul
route -p add 66.119.144.190/32 0.0.0.0 >nul 2>nul


echo block fe3.delivery.mp.microsoft.com
route -p add 65.52.108.90/32 0.0.0.0 >nul 2>nul


echo block feedback.microsoft-hohm.com


echo block feedback.search.microsoft.com
route -p add 157.55.129.21/32 0.0.0.0 >nul 2>nul


echo block feedback.windows.com
route -p add 134.170.188.248/32 0.0.0.0 >nul 2>nul


echo block ff4a487e56259f4bd5831e9e30470e83.azr.msnetworkanalytics.testanalytics.net
route -p add 65.52.8.54/32 0.0.0.0 >nul 2>nul


timeout 1 >nul


echo block flex.msn.com
route -p add 131.253.40.47/32 0.0.0.0 >nul 2>nul


echo block geo-prod.do.dsp.mp.microsoft.com
route -p add 65.52.108.136/32 0.0.0.0 >nul 2>nul


echo block g.live.com
route -p add 65.52.108.27/32 0.0.0.0 >nul 2>nul


echo block g.msn.com
route -p add 65.52.108.27/32 0.0.0.0 >nul 2>nul


echo block go.microsoft.com
route -p add 104.79.133.115/32 0.0.0.0 >nul 2>nul


echo block go.skype.com
route -p add 191.234.42.225/32 0.0.0.0 >nul 2>nul


echo block h1.msn.com
route -p add 23.196.102.238/32 0.0.0.0 >nul 2>nul


echo block h2.msn.com
route -p add 23.196.102.238/32 0.0.0.0 >nul 2>nul


echo block help.bingads.microsoft.com
route -p add 207.46.202.114/32 0.0.0.0 >nul 2>nul


echo block hotmail.com
route -p add 157.55.152.112/32 0.0.0.0 >nul 2>nul
route -p add 157.56.172.28/32 0.0.0.0 >nul 2>nul
route -p add 65.55.77.28/32 0.0.0.0 >nul 2>nul
route -p add 65.55.85.12/32 0.0.0.0 >nul 2>nul


echo block i1.services.social.microsoft.com
route -p add 23.196.123.83/32 0.0.0.0 >nul 2>nul


echo block i1.services.social.microsoft.com.nsatc.net
route -p add 198.105.244.104/32 0.0.0.0 >nul 2>nul
route -p add 198.105.254.104/32 0.0.0.0 >nul 2>nul


echo block iecvlist.microsoft.com
route -p add 93.184.215.200/32 0.0.0.0 >nul 2>nul


echo block ieonline.microsoft.com
route -p add 204.79.197.200/32 0.0.0.0 >nul 2>nul


echo block img-s-msn-com.akamaized.net
route -p add 23.15.9.16/32 0.0.0.0 >nul 2>nul
route -p add 23.15.9.18/32 0.0.0.0 >nul 2>nul


echo block inference.location.live.net
route -p add 40.76.220.255/32 0.0.0.0 >nul 2>nul


echo block js.microsoft.com
route -p add 23.201.36.177/32 0.0.0.0 >nul 2>nul


echo block lb1.www.ms.akadns.net
route -p add 65.55.57.27/32 0.0.0.0 >nul 2>nul


echo block licensing.md.mp.microsoft.com
route -p add 64.4.54.36/32 0.0.0.0 >nul 2>nul


echo block live.rads.msn.com
route -p add 137.117.100.176/32 0.0.0.0 >nul 2>nul


echo block livetileedge.dsx.mp.microsoft.com
route -p add 104.79.150.111/32 0.0.0.0 >nul 2>nul


echo block logging.windows.microsoft.com
route -p add 134.170.119.140/32 0.0.0.0 >nul 2>nul


echo block login.live.com


echo block login.live.com.nsatc.net
route -p add 131.253.61.100/32 0.0.0.0 >nul 2>nul
route -p add 131.253.61.82/32 0.0.0.0 >nul 2>nul
route -p add 131.253.61.96/32 0.0.0.0 >nul 2>nul
route -p add 131.253.61.98/32 0.0.0.0 >nul 2>nul


echo block m.adnxs.com
route -p add 68.67.152.132/32 0.0.0.0 >nul 2>nul
route -p add 68.67.152.174/32 0.0.0.0 >nul 2>nul
route -p add 68.67.152.94/32 0.0.0.0 >nul 2>nul
route -p add 68.67.152.97/32 0.0.0.0 >nul 2>nul
route -p add 68.67.153.40/32 0.0.0.0 >nul 2>nul
route -p add 68.67.153.44/32 0.0.0.0 >nul 2>nul
route -p add 68.67.153.87/32 0.0.0.0 >nul 2>nul
route -p add 68.67.153.89/32 0.0.0.0 >nul 2>nul


timeout 1 >nul


echo block mediadiscovery.microsoft.com
route -p add 104.79.153.14/32 0.0.0.0 >nul 2>nul


echo block m.hotmail.com
route -p add 65.55.68.104/32 0.0.0.0 >nul 2>nul


echo block microsoft.com
route -p add 134.170.185.46/32 0.0.0.0 >nul 2>nul
route -p add 134.170.188.221/32 0.0.0.0 >nul 2>nul


echo block msedge.net
route -p add 204.79.197.197/32 0.0.0.0 >nul 2>nul


echo block msftncsi.com


echo block msnbc.com
route -p add 172.230.86.201/32 0.0.0.0 >nul 2>nul


echo block msnbot-65-55-108-23.search.msn.com


echo block msn.com
route -p add 23.101.196.141/32 0.0.0.0 >nul 2>nul


echo block msnportal.112.2o7.net
route -p add 192.243.250.72/32 0.0.0.0 >nul 2>nul
route -p add 192.243.250.88/32 0.0.0.0 >nul 2>nul
route -p add 66.235.138.193/32 0.0.0.0 >nul 2>nul
route -p add 66.235.138.194/32 0.0.0.0 >nul 2>nul
route -p add 66.235.138.195/32 0.0.0.0 >nul 2>nul
route -p add 66.235.139.17/32 0.0.0.0 >nul 2>nul
route -p add 66.235.139.18/32 0.0.0.0 >nul 2>nul
route -p add 66.235.139.19/32 0.0.0.0 >nul 2>nul
route -p add 66.235.139.205/32 0.0.0.0 >nul 2>nul
route -p add 66.235.139.206/32 0.0.0.0 >nul 2>nul
route -p add 66.235.139.207/32 0.0.0.0 >nul 2>nul


echo block msntest.serving-sys.com
route -p add 172.56.136.82/32 0.0.0.0 >nul 2>nul
route -p add 172.56.136.88/32 0.0.0.0 >nul 2>nul


echo block nexus.officeapps.live.com
route -p add 65.52.26.28/32 0.0.0.0 >nul 2>nul


echo block oca.telemetry.microsoft.com


echo block oca.telemetry.microsoft.com.nsatc.net
route -p add 65.55.252.63/32 0.0.0.0 >nul 2>nul


echo block ocsp.msocsp.com
route -p add 108.162.232.196/32 0.0.0.0 >nul 2>nul
route -p add 108.162.232.197/32 0.0.0.0 >nul 2>nul
route -p add 108.162.232.198/32 0.0.0.0 >nul 2>nul
route -p add 108.162.232.199/32 0.0.0.0 >nul 2>nul
route -p add 108.162.232.200/32 0.0.0.0 >nul 2>nul
route -p add 108.162.232.201/32 0.0.0.0 >nul 2>nul
route -p add 108.162.232.202/32 0.0.0.0 >nul 2>nul
route -p add 108.162.232.203/32 0.0.0.0 >nul 2>nul
route -p add 108.162.232.204/32 0.0.0.0 >nul 2>nul
route -p add 108.162.232.205/32 0.0.0.0 >nul 2>nul
route -p add 108.162.232.207/32 0.0.0.0 >nul 2>nul


echo block ocsp.omniroot.com
route -p add 72.21.91.8/32 0.0.0.0 >nul 2>nul


echo block ocsp.startssl.com
route -p add 165.254.207.17/32 0.0.0.0 >nul 2>nul
route -p add 165.254.207.25/32 0.0.0.0 >nul 2>nul


echo block officeclient.microsoft.com
route -p add 191.238.224.150/32 0.0.0.0 >nul 2>nul


echo block outlook.com
route -p add 132.245.113.194/32 0.0.0.0 >nul 2>nul
route -p add 132.245.13.210/32 0.0.0.0 >nul 2>nul
route -p add 132.245.17.34/32 0.0.0.0 >nul 2>nul
route -p add 132.245.21.82/32 0.0.0.0 >nul 2>nul
route -p add 132.245.23.242/32 0.0.0.0 >nul 2>nul
route -p add 132.245.81.130/32 0.0.0.0 >nul 2>nul
route -p add 132.245.92.194/32 0.0.0.0 >nul 2>nul
route -p add 157.56.237.242/32 0.0.0.0 >nul 2>nul


echo block pipe.skype.com
route -p add 104.43.161.140/32 0.0.0.0 >nul 2>nul


echo block platform.bing.com
route -p add 204.79.197.200/32 0.0.0.0 >nul 2>nul


echo block pre.footprintpredict.com
route -p add 204.79.197.200/32 0.0.0.0 >nul 2>nul


echo block preview.msn.com
route -p add 137.117.100.176/32 0.0.0.0 >nul 2>nul


echo block pricelist.skype.com
route -p add 198.105.244.104/32 0.0.0.0 >nul 2>nul
route -p add 198.105.254.104/32 0.0.0.0 >nul 2>nul


echo block r20swj13mr.microsoft.com
route -p add 93.184.215.200/32 0.0.0.0 >nul 2>nul


echo block rad.live.com


timeout 1 >nul


echo block rad.msn.com
route -p add 65.55.2.6/32 0.0.0.0 >nul 2>nul


echo block redir.metaservices.microsoft.com
route -p add 172.56.136.73/32 0.0.0.0 >nul 2>nul
route -p add 172.56.136.83/32 0.0.0.0 >nul 2>nul


echo block reports.wes.df.telemetry.microsoft.com
route -p add 65.52.100.91/32 0.0.0.0 >nul 2>nul


echo block sb.scorecardresearch.com
route -p add 104.79.156.195/32 0.0.0.0 >nul 2>nul


echo block schemas.microsoft.akadns.net
route -p add 65.54.226.187/32 0.0.0.0 >nul 2>nul


echo block secure.adnxs.com
route -p add 68.67.152.4/32 0.0.0.0 >nul 2>nul
route -p add 68.67.152.8/32 0.0.0.0 >nul 2>nul
route -p add 68.67.152.91/32 0.0.0.0 >nul 2>nul
route -p add 68.67.176.128/32 0.0.0.0 >nul 2>nul
route -p add 68.67.176.40/32 0.0.0.0 >nul 2>nul
route -p add 68.67.176.46/32 0.0.0.0 >nul 2>nul
route -p add 68.67.176.47/32 0.0.0.0 >nul 2>nul
route -p add 68.67.176.48/32 0.0.0.0 >nul 2>nul


echo block secure.flashtalking.com
route -p add 216.38.160.128/32 0.0.0.0 >nul 2>nul


echo block services.wes.df.telemetry.microsoft.com
route -p add 65.52.100.92/32 0.0.0.0 >nul 2>nul


echo block settings.data.microsoft.com
route -p add 64.4.54.253/32 0.0.0.0 >nul 2>nul


echo block settings-sandbox.data.microsoft.com
route -p add 111.221.29.177/32 0.0.0.0 >nul 2>nul


echo block settings-ssl.xboxlive.com
route -p add 104.79.156.227/32 0.0.0.0 >nul 2>nul


echo block settings-win.data.microsoft.com
route -p add 64.4.54.253/32 0.0.0.0 >nul 2>nul


echo block s.gateway.messenger.live.com
route -p add 157.56.106.210/32 0.0.0.0 >nul 2>nul


echo block sgmetrics.cloudapp.net
route -p add 168.62.11.145/32 0.0.0.0 >nul 2>nul


echo block shell.windows.com
route -p add 137.116.81.94/32 0.0.0.0 >nul 2>nul


echo block sls.update.microsoft.com


echo block sls.update.microsoft.com.akadns.net
route -p add 157.55.240.220/32 0.0.0.0 >nul 2>nul


echo block sls.update.microsoft.com.nsatc.net
route -p add 157.56.96.54/32 0.0.0.0 >nul 2>nul


echo block sO.2mdn.net


echo block social.answers.microsoft.com


echo block spynet2.microsoft.com
route -p add 23.96.212.225/32 0.0.0.0 >nul 2>nul


echo block spynetalt.microsoft.com
route -p add 23.96.212.225/32 0.0.0.0 >nul 2>nul


echo block sqm.df.telemetry.microsoft.com
route -p add 65.52.100.94/32 0.0.0.0 >nul 2>nul


echo block sqm.microsoft.com
route -p add 65.55.44.82/32 0.0.0.0 >nul 2>nul


echo block sqm.telemetry.microsoft.com


timeout 1 >nul


echo block sqm.telemetry.microsoft.com.nsatc.net
route -p add 65.55.252.93/32 0.0.0.0 >nul 2>nul


echo block ssw.live.com
route -p add 207.46.101.29/32 0.0.0.0 >nul 2>nul


echo block static.2mdn.net
route -p add 173.194.46.123/32 0.0.0.0 >nul 2>nul
route -p add 173.194.46.124/32 0.0.0.0 >nul 2>nul


echo block statsfe1.ws.microsoft.com
route -p add 134.170.115.60/32 0.0.0.0 >nul 2>nul


echo block statsfe2.update.microsoft.com.akadns.net
route -p add 131.253.14.153/32 0.0.0.0 >nul 2>nul


echo block statsfe2.ws.microsoft.com
route -p add 65.52.108.153/32 0.0.0.0 >nul 2>nul


echo block storeedgefd.dsx.mp.microsoft.com
route -p add 23.35.16.182/32 0.0.0.0 >nul 2>nul


echo block store-images.microsoft.com
route -p add 23.193.16.41/32 0.0.0.0 >nul 2>nul


echo block survey.watson.microsoft.com
route -p add 207.68.166.254/32 0.0.0.0 >nul 2>nul


echo block t0.ssl.ak.dynamic.tiles.virtualearth.net
route -p add 23.201.32.83/32 0.0.0.0 >nul 2>nul


echo block t0.ssl.ak.tiles.virtualearth.net
route -p add 23.201.29.83/32 0.0.0.0 >nul 2>nul


echo block telecommand.telemetry.microsoft.com


echo block telecommand.telemetry.microsoft.com.nsatc.net
route -p add 65.55.252.92/32 0.0.0.0 >nul 2>nul


echo block telemetry.appex.bing.net
route -p add 168.61.24.141/32 0.0.0.0 >nul 2>nul


echo block telemetry.microsoft.com
route -p add 65.52.100.9/32 0.0.0.0 >nul 2>nul


echo block telemetry.urs.microsoft.com
route -p add 65.55.176.90/32 0.0.0.0 >nul 2>nul


echo block tile-service.weather.microsoft.com
route -p add 23.201.54.135/32 0.0.0.0 >nul 2>nul


echo block tlu.dl.delivery.mp.microsoft.com
route -p add 165.254.206.123/32 0.0.0.0 >nul 2>nul
route -p add 165.254.206.137/32 0.0.0.0 >nul 2>nul
route -p add 165.254.206.139/32 0.0.0.0 >nul 2>nul


echo block ui.skype.com
route -p add 157.56.109.8/32 0.0.0.0 >nul 2>nul


echo block urs.microsoft.com
route -p add 157.56.64.124/32 0.0.0.0 >nul 2>nul


echo block vassg141.ocsp.omniroot.com
route -p add 104.91.166.82/32 0.0.0.0 >nul 2>nul
route -p add 104.91.166.99/32 0.0.0.0 >nul 2>nul


echo block version.hybrid.api.here.com
route -p add 107.20.234.199/32 0.0.0.0 >nul 2>nul
route -p add 107.21.246.114/32 0.0.0.0 >nul 2>nul
route -p add 54.243.135.126/32 0.0.0.0 >nul 2>nul
route -p add 54.243.53.207/32 0.0.0.0 >nul 2>nul


echo block view.atdmt.com
route -p add 31.13.74.2/32 0.0.0.0 >nul 2>nul


echo block vortex-bn2.metron.live.com.nsatc.net
route -p add 65.55.44.109/32 0.0.0.0 >nul 2>nul


echo block vortex-cy2.metron.live.com.nsatc.net
route -p add 64.4.54.254/32 0.0.0.0 >nul 2>nul


timeout 1 >nul


echo block vortex.data.microsoft.com
route -p add 64.4.54.254/32 0.0.0.0 >nul 2>nul


echo block vortex-sandbox.data.microsoft.com
route -p add 64.4.54.32/32 0.0.0.0 >nul 2>nul


echo block vortex-win.data.microsoft.com
route -p add 64.4.54.254/32 0.0.0.0 >nul 2>nul


echo block watson.live.com
route -p add 207.46.223.94/32 0.0.0.0 >nul 2>nul


echo block watson.microsoft.com
route -p add 65.55.252.71/32 0.0.0.0 >nul 2>nul


echo block watson.ppe.telemetry.microsoft.com
route -p add 65.52.100.11/32 0.0.0.0 >nul 2>nul


echo block watson.telemetry.microsoft.com


echo block watson.telemetry.microsoft.com.nsatc.net
route -p add 65.55.252.43/32 0.0.0.0 >nul 2>nul


echo block wes.df.telemetry.microsoft.com
route -p add 65.52.100.93/32 0.0.0.0 >nul 2>nul


echo block www.microsoft.com
route -p add 23.194.122.104/32 0.0.0.0 >nul 2>nul


echo block www.modern.ie
route -p add 168.62.21.207/32 0.0.0.0 >nul 2>nul


echo block www.msftncsi.com
route -p add 165.254.155.43/32 0.0.0.0 >nul 2>nul
route -p add 165.254.155.48/32 0.0.0.0 >nul 2>nul


echo block www.msn.com
route -p add 204.79.197.203/32 0.0.0.0 >nul 2>nul


timeout 2 >nul
echo.


echo done
pause >nul




2: Task Scheduler Library:


Win + R -> cmd -> Taskschd.msc


(Don't know if Admin is required)


Under Task Scheduler Library -> Microsoft delete the following items:


Everything under “Application Experience”
Everything under “Autochk”
Everything under “Customer Experience Improvement Program”
Under “Disk Diagnostic” delete only the “Microsoft-Windows-DiskDiagnosticDataCollector”
Under “Maintenance” “WinSAT”
“Media Center” and click the “status” column, then select all non-disabled entries and disable them.


3: Additional Commands


Run cmd as Admin:


Might be done by the main script already:


sc stop DiagTrack
sc stop dmwappushservice
sc delete DiagTrack
sc delete dmwappushservice


Execut this:
echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v AllowTelemetry /t REG_DWORD /d 0 /f


4:


Don't know if nececarry. Found it but didn't try it yet.


- Tap on the Windows-key, type services and hit enter.
- Locate the service Diagnostics Tracking Service and double-click on it,
- Activate the startup type menu and select disabled from it. This disables the services' autostart.
- Click the stop button afterwards to stop the running process. This stops the service for the current session.


###########################################################################################
 
Last edited:
ah, easy scripts that are readable too. Thanks for this.
 
Yes thanks, I'll be very interested if you do acquire some similar knowledge for W10.


I'll probably be running it soon, like you just for gaming, but still I might check email on it too.


So would be good if I can also keep my email and Steam keystrokes [passwords] off of numerous MS trusted servers
 
I personally this on Windows 10 for my family members and me: https://github.com/10se1ucgo/DisableWinTracking


Its script is fairly readable as well and seems to do similar things to the in the opening post. Of course, relying on Windows to block its own spying features is not ideal, but it appears to do the job. Unless MS keeps a few connections super hidden, I have no unwanted open connections and quite a few blocked ones here right now.https://github.com/10se1ucgo/DisableWinTracking


Still better than nothing, I'd say.
 
I am very glad to find out that privacy in Windows is still a thing. Thanks a lot, will try them out ASAP!
 
I am very glad to find out that privacy in Windows is still a thing. Thanks a lot, will try them out ASAP!
Great thanks!

Will check it out tonight when we've stopped driving.
(On our way to another festival)

But beware that it's already 5 Months old.
So there might be Windows updates not covered by the program.
It's a shame it's discontinued.
 
But beware that it's already 5 Months old.
So there might be Windows updates not covered by the program.
It's a shame it's discontinued.

Yes it certainly is.

Downloaded. About to setup for the festival (it's a short one), but I have a few days after before the next one where I can sit down and see what I can do with this.
I may have more questions, but thanks again for this thread anyway... at least it's something!
 
Hello everyone.

There is finally a new script called Ancile.
It's a fork of the no longer maintained Aegis script.

I did not read or test it myself yet but it seems trustworthy I think.
Will use it as soon as I have time to have a look at it and run it.

Here's the Download
 
Back
Top