Aug 24, 2015 01:55 PM
(This post was last modified: Feb 5, 2016 10:14 AM by Eilif.)
UPDATE: 5th February 2015
KB2952664 triggers daily telemetry run in Windows 7 (Basically snooping your data and collects information to make Windows 10 upgrade more attractive to other Microsoft users)
KB3123862 the "mystery patch" which swaps your explorer.exe, explorerFrame.dll, shell32.dll, authui.dll to support "updated telemetry" aka. snooping.
Microsoft very recently released 2 updates called KB3075249 and KB3080149. The second one is especially suspicious because it expands the functionality of already existing feature called "Windows Customer Experience Improvement Program", which is enabled by default on your Windows under many navigation panels.
UPDATE: 2th September 2015
Microsoft Released 2 more KB updates with same functionality. These are:
KB3068708
KB3022345
Both of these new ones are configured to bypass hosts files as well. (You can't block them in hosts)
Having these installed will result your computer calling home into following addresses:
vortex-win.data.microsoft.com
settings-win.data.microsoft.com
Suggestion:
1. Un-install both KB updates and/or hide the said updates so they don't get installed onto your system.
2. if you haven't already, disable the "Windows Customer Experience Improvement Program" participation access from your system.
2.1 To do so, navigate to: Control panel -> System and Security -> Action Center -> Change Action Center Settings -> Customer Experience Improvement Program ->
![[Image: 8uKEjLr.png]](https://i.imgur.com/8uKEjLr.png)
select "No" and apply.
Update: 24th November 2015
For Win10 users!
After Threshold 2 update (aka. November 1511 update), you guys might want to disable "Connected User Experiences and Telemetry" (formely known as: "Diagnostics Tracking Service").
This can be done from "services.msc". You should see "Connected User Experiences and Telemetry", or whatever the translation is in your language.
KB2952664 triggers daily telemetry run in Windows 7 (Basically snooping your data and collects information to make Windows 10 upgrade more attractive to other Microsoft users)
KB3123862 the "mystery patch" which swaps your explorer.exe, explorerFrame.dll, shell32.dll, authui.dll to support "updated telemetry" aka. snooping.
Microsoft very recently released 2 updates called KB3075249 and KB3080149. The second one is especially suspicious because it expands the functionality of already existing feature called "Windows Customer Experience Improvement Program", which is enabled by default on your Windows under many navigation panels.
UPDATE: 2th September 2015
Microsoft Released 2 more KB updates with same functionality. These are:
KB3068708
KB3022345
Both of these new ones are configured to bypass hosts files as well. (You can't block them in hosts)
Having these installed will result your computer calling home into following addresses:
vortex-win.data.microsoft.com
settings-win.data.microsoft.com
Suggestion:
1. Un-install both KB updates and/or hide the said updates so they don't get installed onto your system.
2. if you haven't already, disable the "Windows Customer Experience Improvement Program" participation access from your system.
2.1 To do so, navigate to: Control panel -> System and Security -> Action Center -> Change Action Center Settings -> Customer Experience Improvement Program ->
![[Image: 8uKEjLr.png]](https://i.imgur.com/8uKEjLr.png)
select "No" and apply.
Update: 24th November 2015
For Win10 users!
After Threshold 2 update (aka. November 1511 update), you guys might want to disable "Connected User Experiences and Telemetry" (formely known as: "Diagnostics Tracking Service").
This can be done from "services.msc". You should see "Connected User Experiences and Telemetry", or whatever the translation is in your language.


![[Image: DTc14yu.png]](https://i.imgur.com/DTc14yu.png)
![[Image: 4e6fc44f2bef68a89bc12d0e7ff86db1.png]](https://i.gyazo.com/4e6fc44f2bef68a89bc12d0e7ff86db1.png)

![[Image: Go9NL9v.png]](https://i.imgur.com/Go9NL9v.png)

![[Image: N1kwnBd.png]](https://i.imgur.com/N1kwnBd.png)
