GWX compared to malware hype...

[Cr00zng]

How Microsoft copied malware techniques to make Get Windows 10 the world's PC pest

Microsoft uses techniques similar to aggressive malware to promote its “Get Windows 10” offer.

As many readers have discovered, the persistent and constantly changing methods Microsoft uses to continually reintroduce its “Get Windows 10” tool, or GWX, onto computers means it’s extremely difficult to avoid.

Windows users who decline to use it find it is repeatedly reintroduced. The language of the counter-malware industry is more appropriate than the language of enterprise IT for GWX.

In some respect, GWX does behave similarly to malware, but wasn't it the other way around? Meaning that malware copied techniques from legitimate software for its distribution. Anyway...

Where the article becomes a hype, at least on my system, is in the details of how to completely get rid of GWX:

Unless the user gets rid of ALL of the "Get Windows 10" system updates and its helpers, the GWX popup will persist. These are:

KB2952664
KB3035583
C:\Windows\System32\GWX
C:\Windows\SoftwareDistribution\Download\*KB2952664*
C:\Windows\SoftwareDistribution\Download\*KB3035583*
ALL registry entries for KB2952664 and
(optionally) KB3035583
*-Emphasis mine

On my system the items in red were not done, nor was I aware that they should be, but there's no traces of GWX. A quick search for the directory and registry entries for the KBs referenced came up empty. What had been done, in addition to the items in black, is MS recommendation to disable GWX:

For IT administrators, it is possible to disable the upgrade using Group Policy settings or by using the DisableUpgrade registry key. All other registry keys are not supported mechanisms for controlling notifications or controlling the upgrade process and are not recommended by Microsoft. Please see KB 3080351 for more information.

I have not seen GWX on my system for at least 5-6 month by now. Out of curiosity...

Do you see the items in red above on your system?

 

[ThrashZone]

Not that I see no,
Kind of funny I saw a thread on malwaretips about GWX

 

[arizonajak]

Look into the GWX Control Panel. It defeats the nag icon and keeps it defeated without you having to look for files. I've had it for a few months now. Works great and doesn't hurt the computer.

https://www.youtube.com/watch?v=5pcmDTDRGgA