Win7 Telemetry Tracking

[Mantrid-Drone]

For the last month 5 - 10 minutes after I've first started my PC I'd noticed that my CPU core temperatures would spike for 10 - 20 seconds from their normal mid 30C range up to and above 50C. It was the sound of the case fans rising that bought it to my attention.

This was new behaviour so I eventually thought it prudent to find out exactly what was causing it using Process Hacker 2. I've monitored this for about a week and each time it was the same process shown using over 50% of the CPU (90% total with the other processes) : a Windows diagnostics telemetry tracking EXE.

Searching for more information I discovered this is supposed to be an optional ie. opt in service.

I've always been diligent in checking what the monthly Windows optional updates do and have specifically avoided and hidden them from future prompts to install when they have been identified as being of this 'tracking' type. Yet somehow this 'opt in' I didn't want to has been enabled on my PC.

I have just disabled the process by the method recommended here:-

http://windowsitpro.com/windows-10/how-turn-telemetry-windows-7-8-and-windows-10

and it seems to have worked.

What I'm concerned about is how this happened. Could this PUS (Potentially Unwanted Service) have been foisted by the Windows Update monthly rollout (I'd suspect May 2017) ie. bypassing the previously optional choice?

 

[Mantrid-Drone]

Restarted this morning hoping that problem was solved but no 5 mins on and the CPU went up to 90%. I had Process Hacker 2 set up though and immediately identified the culprit: Microsoft Compatibility Telemetry > CompatTelRunner.exe.

This is apparently not meant to be running if you've opted out of participating in "Windows Customer Experience Program Improvement" by ticking the "No" box.

I checked again and it is still clearly ticked "No".

Some more research indicated it is apparently a known 'issue' caused by a previously optional Windows update: KB2952664.

This is the solution I found and used but only time will tell if it works:-

You need to stop "participating in the Windows Customer Experience Improvement Program", which you can do by (for W7 & W8) when running as admin:

Start the control panel and click Action Center > Change Action Center settings.
Click Customer Experience Improvement Program settings.
Select No, I don't want to participate in the program and click Save changes.

Next, disable the scheduled tasks, thus:

Start the control panel and click System & Security > Administrative Tools > Task Scheduler.

In the Task Scheduler (Local) pane of the Task Scheduler dialog box, expand the Task Scheduler Library > Microsoft > Windows nodes and open the Application Experience folder:

Disable the AITAgent and ProgramDataUpdater tasks.*

In the Task Scheduler Library > Microsoft > Windows node, open the Customer Experience Improvement Program folder.

Disable the Consolidator, KernelCEIPTask, and UseCEIP** tasks.

Obviously disabling the above means you don't get the benefits of being in the WCEI Program(me)."

NB.

* When I opened this I actually found the location had an additional entry: Microsoft Compatibility Appraiser which is also used for the same purposes so I disabled that too.

** The last process shown in the solution as "UseCEIP" is actually "UsbCEIP".

 

[corkyg]

KB2952664 has always been on my list of no-nos for Win7. Others are KBs ending in 5583 and 5445 and 3862.

 

[corkyg]

See this thread . . .

https://forums.anandtech.com/thread...being-added-to-7-8-8-1.2443971/#post-37649414

 

[Mantrid-Drone]

Thanks for the reply.

The annoying thing is that I've been deliberately avoiding those and all other 'optional' Windows 7 updates which had been reported at places like this and other as having issues. When the monthly updates become available I always research the optional ones and if there's anything suss about them they're hidden.

The last two optional Windows updates installed shown in my history are:-

May, 2017 Preview of Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 on Windows 7 and Server 2008 R2 for x64 (KB4019288)

It can't be that as it was only installed on 14.06.17 (14th June) and the 'problem' was present prior to that.

April, 2017 Preview of Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4015552)

That was installed on 06.05.17 (6th May)

If that is not the update which is causing this the only other way must have been something in the April monthly rollup (installed on the same date) or perhaps the previous month. But I'm pretty sure I would have noticed these regular, short CPU high use spikes at initial boot up before then.

 

[JackMDS]

I am sorry but i do not get it!

As long as One keeps getting the Updates on Win 7 things can happen.

One does not really know what happens when One avoids or deletes an Update. I.e., it might be that some unpleasant phenomenon disappeared but in the process it might be that some other "glitches" were introduced to the system that might effect part of the users.

I doubt that the extend of vetting Win 7 is so thorough as Win 10. To be honest I do not blame MS there are times that Bygones should be Bygones.

I still use Win 7 on some of my systems that have professional software that does not work well with Win 10.

Win 7 was released with advance security at the time. In todays terms its security is a Joke.

Almost from the beginning I kept Win 7 security with 3rd party software.

So, a year ago I switched Off Win 7 Updates and keep the security through 3rd party software.

My Win 7 keep functioning well without the ""Help"" of "Advanced Futuristic" ""Telemetry Spys"".

 

[Mantrid-Drone]

Its not just Windows 7 that is being updated and, I think, it sensible to apply new updates if they are going to improve functionality or, at least, security.

I'm actually sort of with you on this because I used WinXP on a laptop for over three years after support was pulled and never had any sort of problem except for compatibility with certain web sites features.

But Win 7 is still being supported and whilst it is I think it prudent to make use of the updates.

The issue for me is entirely one of choice. I've told MS that I don't want any part of their customer experience program yet at some point in the last two months they appear to have ignored that. They're taking 'telemetry' information from my computer which affects its operation even if just for a very short time. I object to that.

BTW after applying the solution detailed in the earlier post my latest boot up seems to have been MS telemetry gathering free ie. no CPU spike so far. Yay! But I'm not counting my chickens
yet.

29.06.17

This morning no CPU spike after booting for the first time in weeks. Looks like the solutions described earlier do work.

 

[Red Squirrel]

Interesting that they actually call the file that lol, you'd think they'd try to be more subtle and call it something less obvious.

I'm sure anything you click on or say no to, it will still track you. It's just not going to use the information for the things you said no to.

 

[XavierMace]

Interesting that they actually call the file that lol, you'd think they'd try to be more subtle and call it something less obvious.

Why? It's not like it's a secret.

 

[Red Squirrel]

Why? It's not like it's a secret.

True, but you'd think they'd at least TRY to hide it. If only the NSA could be as nice when they tap into people's routers.

 

[Mantrid-Drone]

KB2952664 is back again this month now as a separate 6.2MB "Important" update for Win7 64bit systems.

Only a few weeks ago after having to disable the "Customer Experience Program" options despite ticking the opt out do I trust this update not to override the setting again and re-enable the covert data gathering that was clearly affecting my system? Like hell I would.

Permanently hidden now.

 

[corkyg]

Good move. I hid it permanently several months ago along with all others that try to lead you to Win 10. I have Win 10 on a separate drive, and do not wish to risk a good working Win 7. Win 7 simply allows the user to do things that 10 does not.

 

[Chiefcrowe]

Thank you! that one was a sneaky one, didn't realize!!

KB2952664 is back again this month now as a separate 6.2MB "Important" update for Win7 64bit systems.

Only a few weeks ago after having to disable the "Customer Experience Program" options despite ticking the opt out do I trust this update not to override the setting again and re-enable the covert data gathering that was clearly affecting my system? Like hell I would.

Permanently hidden now.