Original title: Microsoft is installing SPYWARE thru Windows Updates? Windows updates installed something called "Diagnostics Tracking Service" in my Windows 8.1 Pro. Take a look at THIS website. http://thepcwhisperer.blogspot.in/2014/10/microsofts-windows-10-preview-has-built.html It says what this service does in Windows 10 TP. Data We Collect When you acquire, install and use the Program, Microsoft collects information about you, your devices, applications and networks, and your use of those devices, applications and networks. Examples of data we collect include your name, email address, preferences and interests; browsing, search and file history; phone call and SMS data ; device configuration and sensor data; and application usage. For example, when you: install the Program, we may collect information about your device and applications and use it for purposes such as determining or improving compatibility, use voice input features like speech-to-text, we may collect voice information and use it for purposes such as improving speech processing, open a file, we may collect information about the file, the application used to open the file, and how long it takes and use it for purposes such as improving performance, or enter text, we may collect typed characters and use them for purposes such as improving auto complete and spell check features. While this might make some sense in a TP (although I consider collecting so much personal information as email addresses and keystrokes to be extreme), it makes no sense in a released Windows version. It's not like I have downloaded it myself from their website as a loving gesture and I want to share whatever I do in my personal life with Microsoft. They slipped it in as an "update" to Windows 8.1 This is definitely spyware behavior in some sense. It's collecting too much personal data. I don't want to share ANYTHING with Microsoft. I have NOT turned on the customer improvement program thing in Windows. WHY IS MICROSOFT DOING THIS? WHICH KB DO I NEED TO UNINSTALL AND BLOCK IN ORDER TO GET RID OF THIS? WHY IS MY ANTIVIRUS NOT REMOVING THIS? HAS MS PAID THE ANTIVIRUS VENDORS? SHOULD I DISABLE AUTOMATIC UPDATES? I'M LOSING TRUST ON MICROSOFT. THEY CAN INSTALL SPYWARE ANY MOMENT, I CANNOT INDIVIDUALLY CHECK THE KB ARTICLE ON EVERY UPDATE JUST TO MAKE SURE IT'S NOT SOMETHING THAT'LL SEND PERSONAL INFORMATION BACK TO MS. I'm really upset about this. :(

That is not answer. MS should NEVER provide ANY such piece of garbage. OPT OUT????????????????? Really??????????? How are we supposed to know some jerks at MS have decided to do what is truly unethical and claim the users are responsible for them invading our privacy. And you defend it??? Evil. Truly evil.

The above has to be causing Microsoft a DoS storm condition with worldwide 8.1 desktops. Anyone have information? June 8, 2015 20:12 EDT

Major problem with the " Diagnostics Tracking Service " on my 8.1 desktops. Disabled service, but have no resolution. utcsvc (Diagnostics Tracking Service) flooding Microsoft IPs with SSL/443 traffic. T noticed Saturday a suspicious URLs: •settings.data.glbdns2.microsoft.com - 65.55.44.108 •settings-win.data.microsoft.com •onesettings-db5.metron.live.com.nsatc.net nslookup settings.data.glbdns2.microsoft.com Non-authoritative answer: Name: OneSettings-bn2.metron.live.com.nsatc.net Address: 65.55.44.108 Aliases: settings.data.glbdns2.microsoft.com nslookup settings-win.data.microsoft.com (Monday morning) Non-authoritative answer: Name: OneSettings-bn2.metron.live.com.nsatc.net Address: 65.55.44.108 Aliases: settings-win.data.microsoft.com settings.data.glbdns2.microsoft.com nslookup settings-win.data.microsoft.com (Sunday afternoon) Non-authoritative answer: Name: settings-win.data.microsoft.com Addresses: 67.215.65.131 67.215.65.131 --------------------------- WS649 Microsoft Windows [Version 6.3.9600] (c) 2013 Microsoft Corporation. All rights reserved. C:\Windows\system32>SFC /SCANNOW Beginning system scan. This process will take some time. Beginning verification phase of system scan. Verification 100% complete. Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not supported in offline servicing scenarios. utcsvc (Diagnostics Tracking Service) 65.55.44.108, Thursday the 4th : <log><time>1433439487</time><orig>216.184.76.74</orig><src>192.168.5.47</src><dst>65.55.44.108</d st><s_port>52167</s_port><d_port>443</d_port><action>HTTPS Bypass</action><proto>tcp</proto><i_f_dir>inbound</i_f_dir><i_f_name>eth1</i_f_name><product>HTTP S Inspection</product><state filename='fw.log' fileid='1433376394' position='1387714' /></log> 67.215.65.131 started Saturday night, first entry: <log><time>1433640795</time><orig>216.184.76.74</orig><src>192.168.40.23</src><dst>67.215.65.131< /dst><s_port>49814</s_port><d_port>443</d_port><action>HTTPS Bypass</action><proto>tcp</proto><i_f_dir>inbound</i_f_dir><i_f_name>eth1</i_f_name><product>HTTP S Inspection</product><state filename='fw.log' fileid='1433635498' position='42326' /></log>

PATCH TUESDAY !!! The KB3022345 has morphed into a recommanded "important" update and selected by default ! While it's still the same "service"... We are still waiting for more informations... Didn't you "blacklist" the update when it was "optional"? On my laptop, Windows installed 16 important updates this Tuesday, but KB3022345 was not included. I double checked after reading your post, the service is not present in services.msc, and is not running in task manager. Uninstall it, check for updates immediately after uninstalling, Windows will show KB3022345 as available update again, blacklist it.. Microsoft, PLEASE stop installing trackers on our computers. Please.

Shilohbob , You're welcome. My primary reason for posting this was to understand why they're doing this, but I'm glad some users will read this and avoid the update. Unfortunately, most people using their computers are not tech savvy people who read forum posts, unless they're already having an issue and have posted a question to resolve the issue.. The diagnostics tracking service is incredibly difficult to spot, as people won't probably open the task manager and manually go thru 70 process names just to make sure a bad process is not running. It's even more difficult to detect as this service does not interact with the desktop, there are no open windows to inform the user that information is being sent over the internet to Microsoft, and he/she is being tracked, and there is no performance hit. It's like a "perfect-spyware", they only exception being it's easy to remove once spotted. I still think it is a bad move by Microsoft to include this as an "Update". Like BritFox wrote in his post, this does not fix a "specific problem" with the OS, does not "improve" functionality in any way, and offers absolutely no benefits as far as the end user is concerned. The only entity to benefit from this, is Microsoft. This isn't an "update". It should not be included as an optional update. They can offer a download link in their website and clearly inform the users about the massive amounts of data this service will send back home to Microsoft ( "This tracking service collects data about functional issues in Windows" -- is NOT a proper explanation of what kind of data it will collect. It does not inform users that it will collect every search query, every file he opens, every website he visits, his/her name, email address, preferences and interests, and pretty much every keystroke ) . If the user chooses to install it after reading it all, then fine. It's NOT a typical update. It's NOT what an user expects to be installed by Windows Updates on a non-beta OS he/she has purchased. Users are "Consumers", not "non-paid software testers". It's a sad day for us long-time Windows users. Windows is becoming the next Android. Microsoft is becoming the next Google. Very sad. Hi. At least some of you by now, will understand how the " NSA " gets what they need. Regards.

What is Diagnostics Tracking Service which was installed from Windows Updates?

Anonymous

Original title: Microsoft is installing SPYWARE thru Windows Updates?

Windows updates installed something called "Diagnostics Tracking Service" in my Windows 8.1 Pro.

Take a look at THIS website.

http://thepcwhisperer.blogspot.in/2014/10/microsofts-windows-10-preview-has-built.html

It says what this service does in Windows 10 TP.

Data We Collect

When you acquire, install and use the Program, Microsoft collects information about you, your devices, applications and networks, and your use of those devices, applications and networks. Examples of data we collect include your name, email address, preferences and interests; browsing, search and file history; phone call and SMS data; device configuration and sensor data; and application usage. For example, when you:

install the Program, we may collect information about your device and applications and use it for purposes such as determining or improving compatibility,
use voice input features like speech-to-text, we may collect voice information and use it for purposes such as improving speech processing,
open a file, we may collect information about the file, the application used to open the file, and how long it takes and use it for purposes such as improving performance, or
enter text, we may collect typed characters and use them for purposes such as improving auto complete and spell check features.

While this might make some sense in a TP (although I consider collecting so much personal information as email addresses and keystrokes to be extreme), it makes no sense in a released Windows version.

It's not like I have downloaded it myself from their website as a loving gesture and I want to share whatever I do in my personal life with Microsoft. They slipped it in as an "update" to Windows 8.1

This is definitely spyware behavior in some sense. It's collecting too much personal data.

I don't want to share ANYTHING with Microsoft. I have NOT turned on the customer improvement program thing in Windows.

WHY IS MICROSOFT DOING THIS?

WHICH KB DO I NEED TO UNINSTALL AND BLOCK IN ORDER TO GET RID OF THIS?

WHY IS MY ANTIVIRUS NOT REMOVING THIS? HAS MS PAID THE ANTIVIRUS VENDORS?

SHOULD I DISABLE AUTOMATIC UPDATES? I'M LOSING TRUST ON MICROSOFT. THEY CAN INSTALL SPYWARE ANY MOMENT, I CANNOT INDIVIDUALLY CHECK THE KB ARTICLE ON EVERY UPDATE JUST TO MAKE SURE IT'S NOT SOMETHING THAT'LL SEND PERSONAL INFORMATION BACK TO MS.

I'm really upset about this. :(

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

51 answers

Anonymous

2015-08-10T03:26:56+00:00

That is not answer.

MS should NEVER provide ANY such piece of garbage.

OPT OUT?????????????????

Really???????????

How are we supposed to know some jerks at MS have decided to do what is truly unethical and claim the users are responsible for them invading our privacy.

And you defend it???

Evil. Truly evil.
Was this answer helpful?

0 comments No comments
Anonymous

2015-06-09T00:12:19+00:00

The above has to be causing Microsoft a DoS storm condition with worldwide 8.1 desktops.

Anyone have information?

June 8, 2015 20:12 EDT
Was this answer helpful?

0 comments No comments
Anonymous

2015-06-09T00:09:22+00:00

Major problem with the "Diagnostics Tracking Service" on my 8.1 desktops.

Disabled service, but have no resolution.

utcsvc (Diagnostics Tracking Service) flooding Microsoft IPs with SSL/443 traffic.

T noticed Saturday a suspicious URLs:

•settings.data.glbdns2.microsoft.com - 65.55.44.108

•settings-win.data.microsoft.com

•onesettings-db5.metron.live.com.nsatc.net

nslookup settings.data.glbdns2.microsoft.com

Non-authoritative answer:

Name:    OneSettings-bn2.metron.live.com.nsatc.net

Address: 65.55.44.108

Aliases: settings.data.glbdns2.microsoft.com

nslookup settings-win.data.microsoft.com (Monday morning)

Non-authoritative answer:

Name:    OneSettings-bn2.metron.live.com.nsatc.net

Address: 65.55.44.108

Aliases: settings-win.data.microsoft.com

          settings.data.glbdns2.microsoft.com

nslookup settings-win.data.microsoft.com (Sunday afternoon)

Non-authoritative answer:

Name:    settings-win.data.microsoft.com

Addresses: 67.215.65.131

          67.215.65.131

--------------------------- WS649

Microsoft Windows [Version 6.3.9600]

(c) 2013 Microsoft Corporation. All rights reserved.

C:\Windows\system32>SFC /SCANNOW

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.

Verification 100% complete.

Windows Resource Protection found corrupt files but was unable to fix some

of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For

example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not

supported in offline servicing scenarios.

utcsvc (Diagnostics Tracking Service)

65.55.44.108, Thursday the 4th :

<log><time>1433439487</time><orig>216.184.76.74</orig><src>192.168.5.47</src><dst>65.55.44.108</d

st><s_port>52167</s_port><d_port>443</d_port><action>HTTPS

Bypass</action><proto>tcp</proto><i_f_dir>inbound</i_f_dir><i_f_name>eth1</i_f_name><product>HTTP

S Inspection</product><state filename='fw.log' fileid='1433376394' position='1387714' /></log>

67.215.65.131 started Saturday night, first entry:

<log><time>1433640795</time><orig>216.184.76.74</orig><src>192.168.40.23</src><dst>67.215.65.131<

/dst><s_port>49814</s_port><d_port>443</d_port><action>HTTPS

Bypass</action><proto>tcp</proto><i_f_dir>inbound</i_f_dir><i_f_name>eth1</i_f_name><product>HTTP

S Inspection</product><state filename='fw.log' fileid='1433635498' position='42326' /></log>
Was this answer helpful?

0 comments No comments
Anonymous

2015-05-13T13:40:15+00:00

PATCH TUESDAY !!!

The KB3022345 has morphed into a recommanded "important" update and selected by default !

While it's still the same "service"...

We are still waiting for more informations...

Didn't you "blacklist" the update when it was "optional"?

On my laptop, Windows installed 16 important updates this Tuesday, but KB3022345 was not included.

I double checked after reading your post, the service is not present in services.msc, and is not running in task manager. Uninstall it, check for updates immediately after uninstalling, Windows will show KB3022345 as available update again, blacklist it..

Microsoft, PLEASE stop installing trackers on our computers. Please.
Was this answer helpful?

0 comments No comments
Anonymous

2015-05-12T21:19:21+00:00

Shilohbob, You're welcome.

My primary reason for posting this was to understand why they're doing this, but I'm glad some users will read this and avoid the update.

Unfortunately, most people using their computers are not tech savvy people who read forum posts, unless they're already having an issue and have posted a question to resolve the issue..

The diagnostics tracking service is incredibly difficult to spot, as people won't probably open the task manager and manually go thru 70 process names just to make sure a bad process is not running.

It's even more difficult to detect as this service does not interact with the desktop, there are no open windows to inform the user that information is being sent over the internet to Microsoft, and he/she is being tracked, and there is no performance hit.

It's like a "perfect-spyware", they only exception being it's easy to remove once spotted.

I still think it is a bad move by Microsoft to include this as an "Update".

Like BritFox wrote in his post, this does not fix a "specific problem" with the OS, does not "improve" functionality in any way, and offers absolutely no benefits as far as the end user is concerned. The only entity to benefit from this, is Microsoft.

This isn't an "update". It should not be included as an optional update.

They can offer a download link in their website and clearly inform the users about the massive amounts of data this service will send back home to Microsoft ("This tracking service collects data about functional issues in Windows" -- is NOT a proper explanation of what kind of data it will collect. It does not inform users that it will collect every search query, every file he opens, every website he visits, his/her name, email address, preferences and interests, and pretty much every keystroke ).

If the user chooses to install it after reading it all, then fine.

It's NOT a typical update. It's NOT what an user expects to be installed by Windows Updates on a non-beta OS he/she has purchased. Users are "Consumers", not "non-paid software testers".

It's a sad day for us long-time Windows users. Windows is becoming the next Android. Microsoft is becoming the next Google. Very sad.

Hi.

At least some of you by now, will understand how the " NSA " gets what they need.

Regards.
Was this answer helpful?

0 comments No comments