Google discloses Windows GDI bug

Sadly the problem still persists. I've changed updates to only happen when I manually select check for updates.

I've also set my wifi connection to Metered, which should disable any kind of updates from happening.

But it's still doing something in the background, see pic

damn.jpg
 
So have you found some references to this issue or do you want some links?

One the biggest issues is related to how you handle updates and the second is related to how you sign on.

On WIN 10 Pro, you can use Group Policy to take over total control of how tour PC handles updates. But there is a minimum set of settings you can do without resorting to settings in group policy.

Next is the issue of logging on. It is far better NOT to log on using an MS account but to use a local account instead. This limits the amount of Internet usage keeping you synched with the cloud, especially important if you are wanting to control and monitor data usage.

I prefer using my MS account as I need everything to sync with my home pc

I've done the below went I installed the OS

Go to Updates, select Advanced Options, and then decide which boxes you want ticked. On that screen select "Choose how updates are delivered"
On the next screen switch OFF the option that allows Windows to send updates to other PCs, or at least restrict it to Ps on your local network only. DO NOT allow windows to send updates to PCs on the Internet!
 
Last edited:
I prefer using my MS account as I need everything to sync with my home pc

I've done the below went I installed the OS

Go to Updates, select Advanced Options, and then decide which boxes you want ticked. On that screen select "Choose how updates are delivered"
On the next screen switch OFF the option that allows Windows to send updates to other PCs, or at least restrict it to Ps on your local network only. DO NOT allow windows to send updates to PCs on the Internet!


Well then you need to either reconsider synching with your home PC or at least start managing what you synch -----

Update:

You also need to check on what else is running. Here are a few tools that can help:

(1) https://technet.microsoft.com/en-gb/sysinternals/bb896653?f=255&MSPPError=-2147217396

Process Explorer helps in identifying processes running in the back ground and gives you the option to stop them after deciding if they are valid processes or not.

(2) RunKill: https://www.bleepingcomputer.com/download/rkill/

This will stop any malware that it finds from running and gives you a log file for further analysis. As you like synch with the world out there you may not like what you find going on in the background on your PC.

(3) Run some or other sort of software to check for malware or do a system scan on Windows Defender.

One I know of is a thing called "bitcoin miner" I recently helped someone with his PC and this little piece of junk was causing plenty of issues on that PC.

And before someone starts lambasting WIN 10. this issue has been around on WIN 7, and WIN 8 -----
 
Last edited:
Well then you need to either reconsider synching with your home PC or at least start managing what you synch -----


*edit*

Ok, they all set to Not Configured, which means I need to enable them?

sync.jpg
 
Last edited:
Hold It! Before fiddling in Group Policy first do a bit of reading about the subject!

"Not Configured" does NOT mean synching has been disabled! It simply means that on the relevant synch section a user can decide what to synch and what not to synch. If you change the settings in group policy, you remove that level of control from users.

Go to the synch settings page and follow the link "How does synching work?" If you sign on in a local account none of the options are available.


So go back a few steps.

(1) What did the scannow routine show up? Nothing?
(2) Have you tried to establish what is hogging all that CPU time and Internet connection?

And in any case that might NOT be the reason whey the task menu is not working anyway.

You started with the problem of not being able to access the start menu, progressed to finding all the CPU time is being hogged by one routine which you assumed is stopping the start menu from starting.

Spend more effort in determining what is causing that problems first, before starting to fiddle everywhere!
 
Last edited:
Hold It! Before fiddling in Group Policy first do a bit of reading about the subject!

"Not Configured" does NOT mean synching has been disabled! It simply means that on the relevant synch section a user can decide what to synch and what not to synch. If you change the settings in group policy, you remove that level of control from users.

Go to the synch settings page and follow the link "How does synching work?" If you sign on in a local account none of the options are available.


So go back a few steps.

(1) What did the scannow routine show up? Nothing?
(2) Have you tried to establish what is hogging all that CPU time and Internet connection?

And in any case that might NOT be the reason whey the task menu is not working anyway.

Scannow fixed a whole bunch of stuff, the log file is probably 10 pages long.

The funny thing is this OS installation is only about a month old......

If I google the IP's that using all the bandwidth, they all point to Microsloth, which is odd considering that when you enabled METERED CONNECTION is shouldn't download ANYTHING from them.

I honestly have no idea what is going on here.

Me ending the scvhost (netsvcs) process is the one and only reason the taskbar stops working and i have to end the process otherwise it uses our entire works internet connection maxed out 100% of the time.

Plus, I don't open anything, just switch on pc, the downloading starts, nothing else is open

And lastly, there are no windows updates, the system is currently 100% up to date according to the Windows Update screen thingy
 
Last edited:
Scannow fixed a whole bunch of stuff, the log file is probably 10 pages long.

The funny thing is this OS installation is only about a month old......

If I google the IP's that using all the bandwidth, they all point to Microsloth, which is odd considering that when you enabled METERED CONNECTION is shouldn't download ANYTHING from them.

I honestly have no idea what is going on here.

So that IS why I do NOT sign on with a MS account. It gives me much more "control" over what I want to "synch" and what updates I want to do when and over which connection!

Go through that log file or send it to me via a PM and I will see if I can spot anything that may be behind your issues with the start menu.
 
Last edited:
So that IS why I do NOT sign on with a MS account. It gives me much more "control" over what I want to "synch" and what updates I want to do when and over which connection!

Go though that log file or send it to me via a PM and I will see if I can spot anything that may be behind your issues with the start menu.

Ok, how do I go about not logging in with my MS account anymore?
 
The report further stated that the bug was initially “part of a larger collection of issues discovered in March 2016, and fixed in June 2016, via Microsoft’s security bulletin MS16-074”.

Google said the MS16-074 patches were “insufficient”, and a new bug report was submitted in November 2016.

Sounds like MS are leaving those backdoors open for the NSA.
 
Go to settings, accounts.
click on "your info" if your account is not shown
Click on " sign in with a local account instead"
You may be asked to enter the current ms account password
Fill in the screen and follow the prompts.


All your files should still be accessible and you can switch between the two at any time. I don't.

I only use the ms account log in to update apps in MS store.

and the I control what I share between my devices in other apps.


You should see a massive drop in Internet traffic after a reboot. and then IF this was the problem with the start menu it should come right by itself, IF not, more scratching will be required.
 
Sadly that didn't change a thing. I restarted and then shutdown for a few minutes and nope

The attached image shows one of about 50 IP's still connecting and downloading

P Whois Lookup 40.77.226.181
Lookup results for 40.77.226.181


NetRange: 40.74.0.0 - 40.125.127.255
CIDR: 40.125.0.0/17, 40.74.0.0/15, 40.124.0.0/16, 40.120.0.0/14, 40.112.0.0/13, 40.96.0.0/12, 40.76.0.0/14, 40.80.0.0/12
NetName: MSFT
NetHandle: NET-40-74-0-0-1
Parent: NET40 (NET-40-0-0-0-0)
NetType: Direct Assignment
OriginAS:
Organization: Microsoft Corporation (MSFT)
RegDate: 2015-02-23
Updated: 2015-05-27
Ref: https://whois.arin.net/rest/net/NET-40-74-0-0-1
OrgName: Microsoft Corporation

wtf.jpg
 
Last edited:
This is why I am still on Windows 7... gotta wait for all of the creepy-crawlies to be sorted out with Windows 10 first.

Ma se ****! Glad that I only use Win7 for gaming though - my Primary runs Linux Mint.

:crylaugh:

I was going to tell you that these types of bugs usually go back a couple of generations but someone beat me to the draw :D
 
So did you enable synch in Group Policy?

I haven't touched a thing, everything is default settings, apart from Local Group Settings, all sync options there are ENABLED ie:... do not sync blah blah blah and do not sync blah blah etc etc

Most annoyingly, I can't use the search function, so trying to fix stuff is somewhat more difficult when it comes to finding the right settings page
 
Last edited:
Sadly that didn't change a thing. I restarted and then shutdown for a few minutes and nope

The attached image shows one of about 50 IP's still connecting and downloading

Have you checked to see if BITS (Background Intelligent Transfer Service) is running?

You'll find it under Services

Video: https://www.youtube.com/watch?v=OmWl-sLWOmY
 
Have you checked to see if BITS (Background Intelligent Transfer Service) is running?

You'll find it under Services

Video: https://www.youtube.com/watch?v=OmWl-sLWOmY

In an ideal world, one would not want to disable BITS as you'll have to manually enable it again every time you want to run windows updater

But for the love of my sanity, I will give it a try and report back.
 
Top
Sign up to the MyBroadband newsletter
X