https://support.microsoft.com/en-us/kb/3112336

This update enables support for additional upgrade scenarios from Windows 8.1 to Windows 10, and provides a smoother experience when you have to retry an operating system upgrade because of certain failure conditions. This update also improves the ability of Microsoft to monitor the quality of the upgrade experience.

dbc421c reverts a previous typo correction from 5853891

The proper update is KB2976978, which according to Microsoft is for the "Windows Customer Experience Improvement Program", or telemetry. KB2976987 does not exist.
https://support.microsoft.com/en-us/kb/2976978
https://support.microsoft.com/en-us/kb/2976987

I downloaded the zip it into my download folder on Win8.1 and unpacked it into a subdirectory "BlockWindows/" there I ran the bat script as administrator and most of it seems to work:

SUCCESS: The parameters of scheduled task "\Microsoft\Windows\Maintenance\WinSAT
" have been changed.

but I also got these errormessages:

ERROR: The specified task name "\Microsoft\Windows\Media Center\ActivateWindowsS
earch" does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\ConfigureInterne
tTimeService" does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\DispatchRecovery
Tasks" does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\ehDRMInit" does
not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\InstallPlayReady
" does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\mcupdate" does n
ot exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\MediaCenterRecov
eryTask" does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\ObjectStoreRecov
eryTask" does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\OCURActivate" do
es not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\OCURDiscovery" d
oes not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\PBDADiscovery" d
oes not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\PBDADiscoveryW1"
 does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\PBDADiscoveryW2"
 does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\PvrRecoveryTask"
 does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\PvrScheduleTask"
 does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\RegisterSearch"
does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\ReindexSearchRoo
t" does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\SqlLiteRecoveryT
ask" does not exist in the system.
ERROR: The specified task name "\Microsoft\Windows\Media Center\UpdateRecordPath
" does not exist in the system.
- done

and

Killing Diagtrack-service (if it still exists)...
[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

- done
Stop remoteregistry-service (if it still exists)...
[SC] ChangeServiceConfig SUCCESS
[SC] ControlService FAILED 1062:

Thanks so much for working on this!

Please take IPv6 into account, and provide IPv6 localhost resolution ( ::1/128 ):

https://en.wikipedia.org/wiki/IPv6_address#Special_addresses

The last commit is from 2015, so Is there another fork, that is still maintained?

Currently, all files have the Unix-standard LF line ending. For easier editing on a Windows-based machine [compatibility with standard notepad.exe], line endings should be changed to CRLF

Hi. I have found a new update with telemetry.

KB4462927 - Preview of Monthly Rollup

This non-security update includes improvements and fixes that were a part of KB4462923 (released October 9, 2018) and also includes these new quality improvements as a preview of the next Monthly Rollup update:
Addresses the redenomination of local currency that the Central Bank of Venezuela implemented to enter the Bolivar Soberano into circulation.
Addresses an issue that makes it impossible to disable TLS 1.0 and TLS 1.1 when the Federal Information Processing Standard (FIPS) mode is enabled.
Addresses an issue that causes navigation across eras to stop working in the Japanese Calendar view. For more information, see KB4469068.
Addresses an issue r elated to the date format for the Japanese era calendar. For more information, see KB4469068.
Addresses an issue that causes the GetCalendarInfo function to return a wrong value for the Japanese era. For more information, see KB4469068.

As you see, the description looks benign, so does KB4469068's one. But there is telemetri in the update.

• http://download.windowsupdate.com/c/msdownload/update/software/updt/2018/10/windows6.1-kb4462927-x86_ccefd90f830cc37f3d14d9086268b42ade1a5677.msu
• sha256: 78f8bb631690880579200cd1de360830a4c1d6bc82f7330af121ccc7fedb7442
• sha1: ccefd90f830cc37f3d14d9086268b42ade1a5677
• md5: a11f209dc55031e3b9dbbe44287336fa

schtasks /Change /TN “\Microsoft\Windows\Application Experience\AitAgent” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Application Experience\ProgramDataUpdater” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Autochk\Proxy” /DISABLE
schtasks /Change /TN “Microsoft\Windows\Customer Experience Improvement Program\Consolidator” /DISABLE
schtasks /Change /TN “Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask” /DISABLE
schtasks /Change /TN “Microsoft\Windows\Customer Experience Improvement Program\UsbCeip” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Maintenance\WinSAT” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\ActivateWindowsSearch” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\ConfigureInternetTimeService” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\DispatchRecoveryTasks” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\ehDRMInit” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\InstallPlayReady” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\mcupdate” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\MediaCenterRecoveryTask” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\OCURActivate” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\OCURDiscovery” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\PBDADiscovery” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\PBDADiscoveryW1” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\PBDADiscoveryW2” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\PvrRecoveryTask” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\PvrScheduleTask” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\RegisterSearch” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\ReindexSearchRoot” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\SqlLiteRecoveryTask” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\UpdateRecordPath” /DISABLE

“ ”

are not supported on windows commandline please use ASCI double qoutes

"

schtasks /Change /TN "\Microsoft\Windows\Application Experience\AitAgent" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Application Experience\ProgramDataUpdater" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Autochk\Proxy" /DISABLE
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /DISABLE
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /DISABLE
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Maintenance\WinSAT" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\ActivateWindowsSearch" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\ConfigureInternetTimeService" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\DispatchRecoveryTasks" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\ehDRMInit" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\InstallPlayReady" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\mcupdate" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\MediaCenterRecoveryTask" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\OCURActivate" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\OCURDiscovery" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\PBDADiscovery" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\PBDADiscoveryW1" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\PBDADiscoveryW2" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\PvrRecoveryTask" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\PvrScheduleTask" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\RegisterSearch" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\ReindexSearchRoot" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\SqlLiteRecoveryTask" /DISABLE
schtasks /Change /TN "\Microsoft\Windows\Media Center\UpdateRecordPath" /DISABLE

Do you have any actual proof of "a highly concerted effort by M$ to harass websites that link to this"?

If so, would you be kind enough to share it?

Line 81 begins:

start "title" /b /wait cscript.exe "%~dp0HideWindowsUpdates.vbs"

Is this a safety measure? Are we supposed to edit this manually?

client.wns.windows.com
wns.notify.windows.com.akadns.net
This should be related to the online push notification..
skydrive.wns.windows.com
This should be related to the OneDrive folder sync..
(but it still makes connection when I am not logged in)
NOTE: As what I saw in netstat, the make connection to the Akamai CDN with a random subdomain (that is, ******.wns.windows.com)
Any points for allowing/blocking them?

One more question:
In https://github.com/WindowsLies/BlockWindows/blob/master/hosts2.bat
Can the 127.0.0.1 be changed by 0.0.0.0 as the same logic as the hosts file?

A few new updates need to be added, including:

https://support.microsoft.com/en-us/kb/2952664 (Compatibility update for upgrading Windows 7)

https://support.microsoft.com/en-us/kb/3035583 (Update installs Get Windows 10 app in Windows 8.1 and Windows 7 SP1)

and possibly linked

https://support.microsoft.com/en-us/kb/3083710 (Windows Update Client for Windows 7 and Windows Server 2008 R2: October 2015)

You might have a typo in blockwindows.bat where it says
echo Delete KB29777598 (update for windows 7 rtm)
start "title" /b /wait wusa.exe /kb:29777598 /uninstall /quiet /norestart

Should it be KB2977759 (without the 8)?

https://support.microsoft.com/en-us/kb/3004394

The Windows Root Certificate Program enables trusted root certificates to be distributed automatically in Windows. Usually, a client computer polls root certificate updates one time a week. After you apply this update, the client computer can receive urgent root certificate updates within 24 hours.

Seems strange. Why anyone can need to update Root certificates (not revocation lists) so often?

OCSP is needed to validate certificate validity. You are basically creating security PROBLEMS for users by blocking Online Certificate Status Polling service for many SSL vendors. You should not do this as this exposes users to malicious attacks based on certificates.

I'm leaving this here, in case you want to include it in your package.

this IP list was compiled on 02-09-2015, so some new entries might be missing

!/bin/sh

block MS spying

IP list taken from:

http://www.hakspek.com/security/windows-script-to-remove-all-windows-10-telemetry-updates/

http://cyberwarzone.com/block-these-ips-to-stop-microsoft-from-snooping-on-your-windows-10-device/

https://github.com/WindowsLies/BlockWindows/

https://github.com/10se1ucgo/DisableWinTracking/

iptables -A INPUT -p all -s 111.221.29.177 -j DROP
iptables -A INPUT -p all -s 128.177.96.24 -j DROP
iptables -A INPUT -p all -s 128.177.96.56 -j DROP
iptables -A INPUT -p all -s 128.177.96.59 -j DROP
iptables -A INPUT -p all -s 128.177.96.65 -j DROP
iptables -A INPUT -p all -s 131.253.14.76 -j DROP
iptables -A INPUT -p all -s 131.253.40.47 -j DROP
iptables -A INPUT -p all -s 131.253.40.50 -j DROP
iptables -A INPUT -p all -s 131.253.40.59 -j DROP
iptables -A INPUT -p all -s 134.170.115.60 -j DROP
iptables -A INPUT -p all -s 134.170.115.62 -j DROP
iptables -A INPUT -p all -s 134.170.185.70 -j DROP
iptables -A INPUT -p all -s 134.170.30.202 -j DROP
iptables -A INPUT -p all -s 134.170.53.29 -j DROP
iptables -A INPUT -p all -s 134.170.58.190 -j DROP
iptables -A INPUT -p all -s 137.116.81.24 -j DROP
iptables -A INPUT -p all -s 137.117.100.176 -j DROP
iptables -A INPUT -p all -s 157.55.129.21 -j DROP
iptables -A INPUT -p all -s 157.55.240.220 -j DROP
iptables -A INPUT -p all -s 157.56.106.189 -j DROP
iptables -A INPUT -p all -s 157.56.121.89 -j DROP
iptables -A INPUT -p all -s 157.56.149.250 -j DROP
iptables -A INPUT -p all -s 157.56.23.91 -j DROP
iptables -A INPUT -p all -s 157.56.57.5 -j DROP
iptables -A INPUT -p all -s 157.56.91.77 -j DROP
iptables -A INPUT -p all -s 157.56.96.54 -j DROP
iptables -A INPUT -p all -s 165.254.155.51 -j DROP
iptables -A INPUT -p all -s 165.254.155.88 -j DROP
iptables -A INPUT -p all -s 168.62.187.13 -j DROP
iptables -A INPUT -p all -s 172.226.138.66 -j DROP
iptables -A INPUT -p all -s 191.232.80.60 -j DROP
iptables -A INPUT -p all -s 191.234.72.183 -j DROP
iptables -A INPUT -p all -s 191.234.72.186 -j DROP
iptables -A INPUT -p all -s 191.234.72.188 -j DROP
iptables -A INPUT -p all -s 191.234.72.190 -j DROP
iptables -A INPUT -p all -s 198.78.194.252 -j DROP
iptables -A INPUT -p all -s 2.22.61.43 -j DROP
iptables -A INPUT -p all -s 2.22.61.66 -j DROP
iptables -A INPUT -p all -s 204.0.5.16 -j DROP
iptables -A INPUT -p all -s 204.79.197.200 -j DROP
iptables -A INPUT -p all -s 207.123.38.253 -j DROP
iptables -A INPUT -p all -s 207.46.223.94 -j DROP
iptables -A INPUT -p all -s 207.68.166.254 -j DROP
iptables -A INPUT -p all -s 23.197.139.57 -j DROP
iptables -A INPUT -p all -s 23.201.43.90 -j DROP
iptables -A INPUT -p all -s 23.201.58.73 -j DROP
iptables -A INPUT -p all -s 23.218.212.69 -j DROP
iptables -A INPUT -p all -s 23.99.10.11 -j DROP
iptables -A INPUT -p all -s 63.241.108.124 -j DROP
iptables -A INPUT -p all -s 64.4.54.22 -j DROP
iptables -A INPUT -p all -s 64.4.54.254 -j DROP
iptables -A INPUT -p all -s 64.4.54.32 -j DROP
iptables -A INPUT -p all -s 64.4.6.100 -j DROP
iptables -A INPUT -p all -s 65.39.117.230 -j DROP
iptables -A INPUT -p all -s 65.52.100.11 -j DROP
iptables -A INPUT -p all -s 65.52.100.7 -j DROP
iptables -A INPUT -p all -s 65.52.100.9 -j DROP
iptables -A INPUT -p all -s 65.52.100.91 -j DROP
iptables -A INPUT -p all -s 65.52.100.92 -j DROP
iptables -A INPUT -p all -s 65.52.100.93 -j DROP
iptables -A INPUT -p all -s 65.52.100.94 -j DROP
iptables -A INPUT -p all -s 65.52.108.153 -j DROP
iptables -A INPUT -p all -s 65.52.108.33 -j DROP
iptables -A INPUT -p all -s 65.55.108.23 -j DROP
iptables -A INPUT -p all -s 65.55.2.6 -j DROP
iptables -A INPUT -p all -s 65.55.252.43 -j DROP
iptables -A INPUT -p all -s 65.55.252.63 -j DROP
iptables -A INPUT -p all -s 65.55.252.71 -j DROP
iptables -A INPUT -p all -s 65.55.252.92 -j DROP
iptables -A INPUT -p all -s 65.55.252.93 -j DROP
iptables -A INPUT -p all -s 65.55.29.238 -j DROP
iptables -A INPUT -p all -s 65.55.39.10 -j DROP
iptables -A INPUT -p all -s 65.55.83.120 -j DROP
iptables -A INPUT -p all -s 66.119.144.157 -j DROP
iptables -A INPUT -p all -s 8.254.23.254 -j DROP
iptables -A INPUT -p all -s 8.27.81.126 -j DROP
iptables -A INPUT -p all -s 8.27.81.254 -j DROP
iptables -A INPUT -p all -s 93.184.215.200 -j DROP
iptables -A OUTPUT -p all -d 111.221.29.177 -j DROP
iptables -A OUTPUT -p all -d 128.177.96.24 -j DROP
iptables -A OUTPUT -p all -d 128.177.96.56 -j DROP
iptables -A OUTPUT -p all -d 128.177.96.59 -j DROP
iptables -A OUTPUT -p all -d 128.177.96.65 -j DROP
iptables -A OUTPUT -p all -d 131.253.14.76 -j DROP
iptables -A OUTPUT -p all -d 131.253.40.47 -j DROP
iptables -A OUTPUT -p all -d 131.253.40.50 -j DROP
iptables -A OUTPUT -p all -d 131.253.40.59 -j DROP
iptables -A OUTPUT -p all -d 134.170.115.60 -j DROP
iptables -A OUTPUT -p all -d 134.170.115.62 -j DROP
iptables -A OUTPUT -p all -d 134.170.185.70 -j DROP
iptables -A OUTPUT -p all -d 134.170.30.202 -j DROP
iptables -A OUTPUT -p all -d 134.170.53.29 -j DROP
iptables -A OUTPUT -p all -d 134.170.58.190 -j DROP
iptables -A OUTPUT -p all -d 137.116.81.24 -j DROP
iptables -A OUTPUT -p all -d 137.117.100.176 -j DROP
iptables -A OUTPUT -p all -d 157.55.129.21 -j DROP
iptables -A OUTPUT -p all -d 157.55.240.220 -j DROP
iptables -A OUTPUT -p all -d 157.56.106.189 -j DROP
iptables -A OUTPUT -p all -d 157.56.121.89 -j DROP
iptables -A OUTPUT -p all -d 157.56.149.250 -j DROP
iptables -A OUTPUT -p all -d 157.56.23.91 -j DROP
iptables -A OUTPUT -p all -d 157.56.57.5 -j DROP
iptables -A OUTPUT -p all -d 157.56.91.77 -j DROP
iptables -A OUTPUT -p all -d 157.56.96.54 -j DROP
iptables -A OUTPUT -p all -d 165.254.155.51 -j DROP
iptables -A OUTPUT -p all -d 165.254.155.88 -j DROP
iptables -A OUTPUT -p all -d 168.62.187.13 -j DROP
iptables -A OUTPUT -p all -d 172.226.138.66 -j DROP
iptables -A OUTPUT -p all -d 191.232.80.60 -j DROP
iptables -A OUTPUT -p all -d 191.234.72.183 -j DROP
iptables -A OUTPUT -p all -d 191.234.72.186 -j DROP
iptables -A OUTPUT -p all -d 191.234.72.188 -j DROP
iptables -A OUTPUT -p all -d 191.234.72.190 -j DROP
iptables -A OUTPUT -p all -d 198.78.194.252 -j DROP
iptables -A OUTPUT -p all -d 2.22.61.43 -j DROP
iptables -A OUTPUT -p all -d 2.22.61.66 -j DROP
iptables -A OUTPUT -p all -d 204.0.5.16 -j DROP
iptables -A OUTPUT -p all -d 204.79.197.200 -j DROP
iptables -A OUTPUT -p all -d 207.123.38.253 -j DROP
iptables -A OUTPUT -p all -d 207.46.223.94 -j DROP
iptables -A OUTPUT -p all -d 207.68.166.254 -j DROP
iptables -A OUTPUT -p all -d 23.197.139.57 -j DROP
iptables -A OUTPUT -p all -d 23.201.43.90 -j DROP
iptables -A OUTPUT -p all -d 23.201.58.73 -j DROP
iptables -A OUTPUT -p all -d 23.218.212.69 -j DROP
iptables -A OUTPUT -p all -d 23.99.10.11 -j DROP
iptables -A OUTPUT -p all -d 63.241.108.124 -j DROP
iptables -A OUTPUT -p all -d 64.4.54.22 -j DROP
iptables -A OUTPUT -p all -d 64.4.54.254 -j DROP
iptables -A OUTPUT -p all -d 64.4.54.32 -j DROP
iptables -A OUTPUT -p all -d 64.4.6.100 -j DROP
iptables -A OUTPUT -p all -d 65.39.117.230 -j DROP
iptables -A OUTPUT -p all -d 65.52.100.11 -j DROP
iptables -A OUTPUT -p all -d 65.52.100.7 -j DROP
iptables -A OUTPUT -p all -d 65.52.100.9 -j DROP
iptables -A OUTPUT -p all -d 65.52.100.91 -j DROP
iptables -A OUTPUT -p all -d 65.52.100.92 -j DROP
iptables -A OUTPUT -p all -d 65.52.100.93 -j DROP
iptables -A OUTPUT -p all -d 65.52.100.94 -j DROP
iptables -A OUTPUT -p all -d 65.52.108.153 -j DROP
iptables -A OUTPUT -p all -d 65.52.108.33 -j DROP
iptables -A OUTPUT -p all -d 65.55.108.23 -j DROP
iptables -A OUTPUT -p all -d 65.55.2.6 -j DROP
iptables -A OUTPUT -p all -d 65.55.252.43 -j DROP
iptables -A OUTPUT -p all -d 65.55.252.63 -j DROP
iptables -A OUTPUT -p all -d 65.55.252.71 -j DROP
iptables -A OUTPUT -p all -d 65.55.252.92 -j DROP
iptables -A OUTPUT -p all -d 65.55.252.93 -j DROP
iptables -A OUTPUT -p all -d 65.55.29.238 -j DROP
iptables -A OUTPUT -p all -d 65.55.39.10 -j DROP
iptables -A OUTPUT -p all -d 65.55.83.120 -j DROP
iptables -A OUTPUT -p all -d 66.119.144.157 -j DROP
iptables -A OUTPUT -p all -d 8.254.23.254 -j DROP
iptables -A OUTPUT -p all -d 8.27.81.126 -j DROP
iptables -A OUTPUT -p all -d 8.27.81.254 -j DROP
iptables -A OUTPUT -p all -d 93.184.215.200 -j DROP

https://support.microsoft.com/en-us/kb/3123862

"The update adds capabilities to some computers that lets users easily learn about Windows 10 or start an upgrade to Windows 10."

Any comments on the reasoning behind this?
Removing Security Essentials updates is just stupid, any why the hell does it disable so many planned tasks that have nothing to do with the telemetry/spying crap?!

You're effectively nuking application compatibility support, most Mediacenter convenience functionality and the WinSAT task
None of that makes any sense, other than causing problems elsewhere that have nothing to do with the spying crap.

Plus, why are you uninstalling KB3065987? That's an update that prevents domain-joined users on non-enterprise windows editions from "upgrading" to Win10 without the network admins consent via rulesets..!?!

https://support.microsoft.com/en-us/kb/3146449

http://tech.slashdot.org/story/16/03/10/1524238/patch-tuesday-brought-windows-10-ad-generator

https://www.andryou.com/blockwindows/

Didn't know how to get in touch with you, so I decided to create an issue.

I will monitor this project and upload additional zip/md5 files as needed. I have unlimited bandwidth and am more than happy to help mirror and host unmodified, md5-verifiable files.

If you want access to upload files when you make an update, I'm more than happy to give you FTP access. Just comment on how you'd like to get in touch.

Can I request that you post an MD5 hash in the README.MD file here on Github of the latest zip file just so users can verify that copies on mirrors have been untampered with?

Is it possible to provide the list of shady updates and pass it to the vbs script?

This version removes more/different updates than yours. Useful?
https://voat.co/v/technology/comments/459263

Please add choice.microsoft.com.nstac.net to hosts file.
It's another telemetry server.

Okay, I see some issues here:

1. Why are we blocking every address from microsoft? Doesn't this break Windows Update? Couldn't we just block the known ones that spy, and have a option to give the user "basic" protection, and "advanced" protection?
2. What if the user has a outlook.com email address? They won't be able to access outlook.com to check their emails? Additionally, what if the end-user needs to access the Microsoft website to check out something on it?
3. Does the route command only block the OS-level communication? If you access websites via Chrome for example, it'll work fine?
4. We need an uninstall batch file to undo the changes that this kit does.

That's pretty much the major questions I have. Cheers!

To use the full Skype functionality

0.0.0.0 client-s.gateway.messenger.live.com

Has to be commented out.

I already have some adaptions in my hosts file (Spybot S&D) so your patch would remove those.

can you please rewrite the script so it just adds your blocklist to the file instead of replycing the whole file?

KB3112336 is included (Windows 8.1). This is the same update for Windows 7.

https://support.microsoft.com/en-us/kb/3112336
https://support.microsoft.com/en-us/kb/3112343