Register Free Newsletter Plus Membership
  • Home
    • Newsletters/Alerts
    • Forums
    • About
    • MS-DEFCON System
    • Master Patch List
    • Register
    • Login
Microsoft Patch Defense Condition level 4 There are isolated problems with current patches, but they are well-known and documented on this site.
SIGN IN Not a member? REGISTER PLUS MEMBERSHIP
  • Care to join a Win7 snooping test?

    Posted on November 23, 2016 at 05:42 CST by woody • Comment in the Forums

    This from MrBrian:

    I am conducting Windows telemetry technical tests similar to Ed Bott’s tests (https://www.askwoody.com/2016/the-inside-scoop-on-windows-snooping/), but instead I am testing Windows 7 x64, and I am using Microsoft’s Process Monitor instead of Resource Monitor.

    Background information from Microsoft: “Windows 7, Windows 8 and Windows 10 Telemetry Updates (Diagnostic Tracking)” – https://blogs.technet.microsoft.com/netro/2015/09/09/windows-7-windows-8-and-windows-10-telemetry-updates-diagnostic-tracking/.

    The October 2016 monthly rollup previews and November 2016 monthly rollups contain the Diagnostics Tracking Service, as did some previous Windows updates. See http://www.infoworld.com/article/3132377/microsoft-windows/microsoft-previews-telemetry-push-with-new-win781-patches-kb-3192403-3192404.html for more information.

    The first question that I’d like to address is: does participation in the operating system’s Customer Experience Improvement Program change what the Diagnostics Tracking Service does? Background information about the Customer Experience Improvement Program is at https://www.microsoft.com/products/ceip/en-us/default.mspx.

    How to test:

    1. Set the operating system’s Customer Experience Improvement Program participation setting to the desired setting by following the instructions at http://www.infoworld.com/article/2981947/microsoft-windows/the-truth-about-windows-7-and-81-spy-patches-kb-3068708-3022345-3075249-and-3080149.html.

    2. We need to know the PID (Process ID) of the instance of process svchost.exe that runs the Diagnostics Tracking Service. We’ll do so by using Resource Monitor. Start Resource Monitor by following the instructions at http://www.digitalcitizen.life/how-use-resource-monitor-windows-7. In the CPU section of the Overview tab, find the row with “svchost.exe (utcsvc)” in the Image column and note its corresponding PID in the PID column. This value changes every time you start the operating system.

    3. If you don’t have Process Monitor, download it from https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx.

    4. To reduce memory consumption in Process Monitor, make sure Filter->Drop Filtered Events is ticked. Then exit Process Monitor and start it again to ensure this setting has taken effect.

    5. Add a filter by using Filter->Filter to add filter “PID is <number from step 2> Include”. As an example, my filter is “PID is 472 Include”. Make sure there isn’t more than one filter of type “Include”.

    6. Press the Clear button to clear the output.

    7. Run Process Monitor for at least 70 minutes (and preferably longer) to see patterns that may emerge in the output.

    8. You can toggle capturing of events on or off by pressing the Capture button.

    When Process Monitor has run for a few days on my computer, I’ll report the results here. Feel free to run your own tests and report your findings; be sure to include which operating system you are testing.

    Windows Patches/Security Diagnostics Tracking Service, KB 2952664, telemetry
DON'T MISS OUT!
Subscribe to the Free Newsletter
We promise not to spam you. Unsubscribe at any time.
Invalid email address
Thanks for subscribing!

Register
Lost your password?

Plus Membership

Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.

AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.


Get Plus!

Welcome to our unique respite from the madness.

It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.

Search Newsletters

Search Forums

Advanced Search

View the Forum

  • Recent Replies
  • My Replies
  • My Active Topics
  • New Posts in the Last day
  • Private Messages
  • How to use the Forums
  • All Forums
  • Search for Topics

    • Most popular topics
    • Topics with no replies
    • Recently active topics
    • New posts: Last day
    • New posts: Last three days
    • New posts: Last week
    • New posts: Last month
    • Topics with most replies
    • Latest topics

    Recent Topics

    • ZenRAT Malware Targets Windows Users Via Fake Bitwarden Password Manager by Alex5723
      12 minutes ago
    • Waterfox G just gets better and better by Ascaris
      34 minutes ago
    • Microsoft Backup triggers help-desk calls and confusion by Susan Bradley
      1 hour, 12 minutes ago
    • How Amazon ejected AI-written e-books from its bestseller lists by B. Livingston
      1 hour, 13 minutes ago
    • Ten stunning features in Microsoft Word by Peter Deegan
      10 minutes ago
    • Thunderbolt by Ed Tittel
      1 hour, 16 minutes ago
    • VeraCrypt updates by Alex5723
      3 hours, 20 minutes ago
    • A.I. and AskWoody by WCHS
      4 hours, 33 minutes ago
    • Where is Windows Update? by bsfinkel
      2 hours, 57 minutes ago
    • mailwasher by jferr333
      7 hours, 20 minutes ago
    • Windows Photos by Linda2019
      8 hours, 9 minutes ago
    • OT QuickBooks payroll module not letting you efile 941 by Susan Bradley
      9 hours, 8 minutes ago
    • MSA logins have been retired from DPC May 1st by Cormy1
      9 hours, 6 minutes ago
    • Administrator Lock by John Monge
      13 hours, 6 minutes ago
    • Skype cancels loopback audio by Steven
      16 hours, 58 minutes ago
    • Python re-installation by WSepzcaw
      15 hours, 22 minutes ago
    • Finally updated to Thunderbird 115 by EricB
      7 hours, 51 minutes ago
    • Hard drive boot up problem in Windows AND Linux by rkacmar
      2 hours, 50 minutes ago
    • WSUS fails to download monthly Cumulative Update for Windows 11 Version 22H2 by Bruce23
      8 hours, 21 minutes ago
    • Excel tone by WSmmi16
      13 hours, 3 minutes ago
    • Wait for the bugs to be worked out by Susan Bradley
      19 hours, 30 minutes ago
    • What Windows Really Needs [Pure OPINION] by RetiredGeek
      11 hours, 45 minutes ago
    • “Winmail.dat” attachments when email is sent from Outlook to Thunderbird by MrJimPhelps
      1 day, 3 hours ago
    • win 11 22H2 Memory itegrity error by krism
      1 day, 11 hours ago
    • McLaren Health Care 6TB data breach by Microfix
      1 day, 1 hour ago
    • Long Live the Red Envelope Era | Farewell to DVDs | Netflix by Alex5723
      1 day, 14 hours ago
    • Faststone Image Viewer updates by Alex5723
      2 days, 16 hours ago
    • Malicious ad served inside Bing’s AI chatbot by Alex5723
      2 days, 16 hours ago
    • win10 pro 22H2 current minus 1 mo,to, win11. suggestions… by krism
      2 days, 4 hours ago
    • Microsoft entered negotiations to sell Bing to Apple in 2020 by Alex5723
      3 days, 1 hour ago

    Recent blog posts

    • Microsoft Backup triggers help-desk calls and confusion
    • How Amazon ejected AI-written e-books from its bestseller lists
    • Ten stunning features in Microsoft Word
    • Thunderbolt
    • Wait for the bugs to be worked out
    • MS-DEFCON 4: Is Windows 11 really a disaster?
    • Windows 11, Surface, and Windows Copilot
    • Why File Explorer keeps me on Windows

    Login and Registration

    • Log In
    • Register

    Key Links

    • > Computerworld's The Microsoft Patch Lady
    • > Computerworld's Woody on Windows
    • AskWoody Knowledge Base index
    • Brian's Muscular Portfolios newsletter
    • Gift subscription for Ask Woody Newsletter
    • Microsoft Answers Forum
    • Tasks for the Weekend YouTube Channel
    October 2023
    S M T W T F S
    1234567
    891011121314
    15161718192021
    22232425262728
    293031  
    « Sep    

    Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.

    Mastodon profile for DefConPatch
    Mastodon profile for AskWoody

     

    Home • About • FAQ • Posts & Privacy • Forums • My Account
    Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts

    Copyright ©2004-2023 by AskWoody Tech LLC. All Rights Reserved.