Weird virus/malware doing my head in.

What a time to be alive

What most users would call malware ... Microsoft now calls a feature

All your Apps are belong to us , mwahahaha
 
Windows 10 is your virus. Its a PITA.

Thankfully there is some software available to help disable some of the rubbish (but probably not everything)

A few bits I like to use to help:

Spybot beacon (Disables a fair bit of windows spying)
http://www.majorgeeks.com/files/details/spybot_anti_beacon_for_windows_10.html

O&O ShutUp10 (similar to above with a few more options)
http://www.majorgeeks.com/files/details/oo_shutup10.html

W10Privacy (Much more choice but more caution needed with this one, you can uninstall all the pre installed stuff with this also, along with prevent re-install)
http://www.majorgeeks.com/files/details/w10privacy.html


Other tools that can be useful:
Winaero tweaker (has some nice options):
http://winaero.com/

Ultimate windows tweaker (Take ownership context menu option is pretty useful)
http://www.majorgeeks.com/files/details/ultimate_windows_tweaker_for_windows_10.html

Just be careful what you "tweak" or change, and dont do too much all at once.

Hope they help.
 

This doesn't work in the current 1607 build, not even the volume license pro version (only enterprise/education).

What you really need to do is create a custom install.wim and use that to install windows, without the content delivery service.


I'm currently using install_wim_tweak to unhide it and install without the service.








Just in case anyone is interested, this is my current install.wim build process (copy it from install media to windows 10 temp install. in C:\W10 folder. Then create C:\W10I folder to use for the mounted wim file. I copy it back afterwards to the install media. It's not so easy if you have the windows install downloader, really need the full iso from https://www.microsoft.com/en-us/software-download/windows10ISO/ and use rufus to write it to usb.

The two dism /image:C:\W10I /add-package etc lines can be ignored, this was for a build with a local windows update server, it's broken until the latest cumulative update is on.

Code:
dism.exe /Mount-wim /Wimfile:C:\W10\Install.wim /index:1 /MountDir:C:\W10I

Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.3DBuilder_11.0.47.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.BingWeather_4.9.51.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.Getstarted_3.11.3.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.Messaging_2.7.1001.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.MicrosoftOfficeHub_2015.6801.23751.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.MicrosoftSolitaireCollection_3.9.5100.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.Office.OneNote_2015.6868.57981.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.OneConnect_1.1605.17.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.People_2016.709.155.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.SkypeApp_11.4.86.0_neutral_~_kzf8qxf38zg5c
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.WindowsAlarms_2016.622.2118.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.WindowsCamera_2016.404.190.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:microsoft.windowscommunicationsapps_2015.6868.41201.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.WindowsFeedbackHub_1.3.1741.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.WindowsMaps_2016.701.2235.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.XboxApp_2016.623.248.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.ZuneMusic_2019.6.19261.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.ZuneVideo_2019.6.19281.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.XboxIdentityProvider_2016.616.818.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Provisionedappxpackage /PackageName:Microsoft.DesktopAppInstaller_1.5.26001.0_neutral_~_8wekyb3d8bbwe
Dism.exe /Image:c:\W10I /Remove-Package /PackageName:Microsoft-Windows-ContactSupport-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Dism.exe /Image:c:\W10I /Remove-Package /PackageName:Microsoft-Windows-QuickAssist-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Dism.exe /Image:c:\W10I /Remove-Package /PackageName:Microsoft-Windows-RetailDemo-OfflineContent-Content-en-gb-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Dism.exe /Image:c:\W10I /Remove-Package /PackageName:Microsoft-Windows-RetailDemo-OfflineContent-Content-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Dism.exe /Image:c:\W10I /Enable-Feature:LegacyComponents
Dism.exe /Image:c:\W10I /Enable-Feature:DirectPlay
Dism.exe /Image:c:\W10I /Enable-Feature:TelnetClient
Dism.exe /Image:c:\W10I /Enable-Feature:TFTP
Dism.exe /Image:c:\W10I /Enable-Feature:NetFx3 /Source:D:\sources\sxs /LimitAccess
Dism.exe /Image:c:\W10I /Disable-Feature:Printing-XPSServices-Features
Dism.exe /Image:c:\W10I /Disable-Feature:WorkFolders-Client
Dism.exe /Image:c:\W10I /Disable-Feature:Printing-Foundation-InternetPrinting-Client
Dism.exe /Image:c:\W10I /Disable-Feature:MSRDC-Infrastructure

install_wim_tweak.exe /p C:\W10I /c Microsoft-Windows-ContentDeliveryManager
install_wim_tweak.exe /p C:\W10I /c Microsoft-PPIProjection
install_wim_tweak.exe /p C:\W10I /c Microsoft-Windows-OneDrive
Dism.exe /Image:c:\W10I /Remove-Package /PackageName:Microsoft-Windows-ContentDeliveryManager-Package~31bf3856ad364e35~amd64~en-GB~10.0.14393.0
Dism.exe /Image:c:\W10I /Remove-Package /PackageName:Microsoft-Windows-ContentDeliveryManager-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Dism.exe /Image:c:\W10I /Remove-Package /PackageName:Microsoft-PPIProjection-Package~31bf3856ad364e35~amd64~en-GB~10.0.14393.0
Dism.exe /Image:c:\W10I /Remove-Package /PackageName:Microsoft-PPIProjection-Package~31bf3856ad364e35~amd64~~10.0.14393.0
Dism.exe /Image:c:\W10I /Remove-Package /PackageName:Microsoft-Windows-OneDrive-Setup-Package~31bf3856ad364e35~amd64~~10.0.14393.0

dism /image:C:\W10I /add-package /packagepath:C:\W10\AMD64-all-windows10.0-kb3176936-x64_795777f8a7f8cd1a4c96ee030848f9f888490555.msu /logpath:C:\W10\log1.log
dism /image:C:\W10I /add-package /packagepath:C:\W10\AMD64-all-windows10.0-kb3176938-x64_44ba449488623e643b57988555bcd7db36ac44ce.msu /logpath:C:\W10\log2.log

REG LOAD HKLM\WimRegistryCr C:\W10I\windows\system32\config\components
REG ADD "HKLM\WimRegistryCr\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v System.IsPinnedToNameSpaceTree /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryCr\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v System.IsPinnedToNameSpaceTree /d 0 /t REG_DWORD /f
REG UNLOAD HKLM\WimRegistryCr

REG LOAD HKLM\WimRegistrySo C:\W10I\windows\system32\config\software
REG ADD "HKLM\WimRegistrySo\Policies\Microsoft\Windows\OneDrive" /v DisableFileSyncNGSC /d 1 /t REG_DWORD /f
REG ADD "HKLM\WimRegistrySo\Policies\Microsoft\Windows\CloudContent" /v DisableSoftLanding /d 1 /t REG_DWORD /f
REG ADD "HKLM\WimRegistrySo\Policies\Microsoft\Windows\CloudContent" /v DisableWindowsConsumerFeatures /d 1 /t REG_DWORD /f
REG ADD "HKLM\WimRegistrySo\Policies\Microsoft\Windows\Windows Search" /v AllowCortana /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistrySo\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon" /v SyncForegroundPolicy /d 1 /t REG_DWORD /f
REG ADD "HKLM\WimRegistrySo\Microsoft\Windows NT\CurrentVersion\Winlogon" /v GpNetworkStartTimeoutPolicyValue /d 60 /t REG_DWORD /f
REG ADD "HKLM\WimRegistrySo\Microsoft\Windows\CurrentVersion\Explorer" /v EnableAutoTray /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistrySo\Microsoft\Windows\CurrentVersion\Policies\System" /v VerboseStatus /d 1 /t REG_DWORD /f
REG ADD "HKLM\WimRegistrySo\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v AppsUseLightTheme /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistrySo\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v DODownloadMode /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistrySo\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag" /v ThisPCPolicy /d Hide /t REG_SZ /f 
REG ADD "HKLM\WimRegistrySo\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag" /v ThisPCPolicy /d Hide /t REG_SZ /f 
REG ADD "HKLM\WimRegistrySo\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag" /v ThisPCPolicy /d Hide /t REG_SZ /f 
REG ADD "HKLM\WimRegistrySo\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag" /v ThisPCPolicy /d Hide /t REG_SZ /f 
REG ADD "HKLM\WimRegistrySo\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag" /v ThisPCPolicy /d Hide /t REG_SZ /f 
REG ADD "HKLM\WimRegistrySo\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag" /v ThisPCPolicy /d Hide /t REG_SZ /f 
REG UNLOAD HKLM\WimRegistrySo

REG LOAD HKLM\WimRegistrySy C:\W10I\windows\system32\config\system
REG ADD "HKLM\WimRegistrySy\ControlSet001\Control\Power" /v HibernateEnabled /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistrySy\ControlSet001\Control\Session Manager\Power" /v HiberbootEnabled /d 0 /t REG_DWORD /f
REG UNLOAD HKLM\WimRegistrySy

REG LOAD HKLM\WimRegistryU C:\W10I\Users\Default\NTUSER.DAT
REG ADD "HKLM\WimRegistryU\Control Panel\Desktop" /v MenuShowDelay /d 200 /t REG_SZ /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}" /ve /d Computer /t REG_SZ /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v LaunchTo /d 1 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v HideFileExt /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ShowTaskViewButton /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Windows\CurrentVersion\Search" /v BingSearchEnabled /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Windows\CurrentVersion\Search" /v SearchboxTaskbarMode /d 1 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v AppsUseLightTheme /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Siuf\Rules" /v PeriodInNanoSeconds /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Siuf\Rules" /v NumberOfSIUFInPeriod /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v {20D04FE0-3AEA-1069-A2D8-08002B30309D} /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" /v {20D04FE0-3AEA-1069-A2D8-08002B30309D} /d 0 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Policies\Microsoft\Windows\CloudContent" /v DisableThirdPartySuggestions /d 1 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Policies\Microsoft\Windows\CloudContent" /v DisableWindowsSpotlightFeatures /d 1 /t REG_DWORD /f
REG ADD "HKLM\WimRegistryU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v SystemPaneSuggestionsEnabled /d 0 /t REG_DWORD /f
REG UNLOAD HKLM\WimRegistryU

Dism.exe /Unmount-Image /MountDir:c:\W10I /Commit
 
Last edited:
Thanks all for this thread. Until recently I hadn't realised Microsoft's customer service had improved in 30 years.

This is an excellent resource for self-help.

How far off is Google from being able to offer a viable alternative to win10? I've used various distros of Linux and been pleasantly surprised, but it seems to me that someone with clout needs to offer an alternative programmers are gonna sit up and notice.

I swear, from recent experience, Microsoft is currently resting so far back on its laurels it'd be utterly sideswiped.
 
Last edited by a moderator:
Should have bought a Mac

Reinstall Win7 it is free, even if you buy it again, a lot cheaper than mac...

I have customers at work with windows 10 and it removes all sorts if it "thinks" its not compatible with windows 10 even though it is!

I have just gone back to W7

I didn't know it did that, I reinstalled 7, my net would disconnect randomly, even with the newest Realtek driver...
 
Back
Top Bottom