Blackbird front
RSS
Home
Documentation
Screenshots
Download

## Last edit: Sep. 22/2018 Blackbird Changelog

v1.0.28 - Latest

- Fixed App Manager failing to disable apps that have been restored during a Windows update.
- Added more hosts to blacklist



v1.0.27

- Improved STD mode; Now users have the option to confirm or skip force removal of any found task.
- Added new switch /W - Enable/disable Task View on Windows 10 (virtual desktops).
- Added new hosts to blacklist.
- Disabled 'PushToInstall' login/registration scheduled tasks.
- Fixed 'Network Connectivity Assistant' service not getting disabled properly, causing Event Viewer error entries.
- Fixed a localization issue that caused invalid scheduled task states for some users.
- Fixed unavailable keyboard accessibility features after applying Blackbird (ctfmon.exe not loading).
- Fixed /B switch (Enable/disable Runtime Broker) not doing anything.
- Fixed /O switch not enabling OneDrive.
- Fixed the fucking /L switch not restoring LAN/NAS/DLNA connectivity, for reals this time. Only took 2 years, FUCK.



v1.0.15

- Minor scanning speed optimizations (Scan Mode/startup).
- Fixed various crashes and glitches when using certain system languages/localizations.
- Fixed menu selection sometimes not responding correctly to user input.
- Fixed WiFi connection breaking for some users after applying Blackbird.



v1.0.11

- Fixed the "Invalid column size" startup error experienced by some users.



v1.0.1

- Fixed network/LAN connectivity (incl.NAS/SMB/DLNA) not working after using the /L switch.
- Fixed Blackbird crashing at startup in some cases aka. "The 80 Error".
- Fixed small OS detection bugs when using non-english localization/language in Windows.
- Fixed no warning shown when ran on an unknown/unsupported Windows version.



v1.0 - Complete rewrite

- Improved Scan Mode/startup scanner; Now properly detects all problems instead of checking for hardcoded values.
- Improved scheduled task handling; Now properly reports changes and any errors encountered when ran in Verbose mode.
- Improved service handling; Should be much faster with proper verbose info and the ability to block low-level driver services.
- Improved autologger handling; Now detects all active system autologgers instead of relying on a static list.
- Improved OS version detection
- Improved general file/folder operations in regards to permission/access manipulation.
- Improved host blocker; Now supports multiple network interfaces and can block a broader range of IP's.
- Improved -U switch (Disable/enable automatic Windows Updates) to allow Windows 10 users to disable updates
- Improved -D switch (Disable/enable Defender) to fully support newer Windows 10 versions.
- Added Backup Mode functionality (blackbird -bak switch); Saves current system state to an external file.
- Added App Manager for Windows 10; User-friendly system app blocking.
- Added Enable/Disable Address Space Layout Randomization switch (blackbird -aslr)
- Added prompts at startup so users can access certain features directly from the menu (Backup/Recovery, Scan,..)
- Added support for custom external KB updates list
- Added notice at startup if running on an unsupported Windows version.
- Added support for console window size detection and UI resizing
- Added new hosts to blacklist
- Added new updates to blacklist
- Added -I switch to fix Bluetooth connectivity issues (hopefully)
- Now reports WSUS policy anomalies and unauthorized proxy servers on Windows Vista/7/8.
- Now attempts to hide blacklisted KB updates to prevent automatic re-installation (64bit version only).
- Updated STD definitions
- Disabled more services; Now removes NVTelemetryContainer, HPTouchpointAnalytics, VisualDiscovery/VDWFP.
- Disabled more scheduled tasks
- Disabled the 'Advertsing.Xaml' system app on Windows 10
- Disabled Suggested Apps & Tips advertising
- Disabled Teredo/IPv6-tunneling
- Disabled SMBv1 by default for security reasons
- Disabled GameDVR
- Disabled Remote Assistance
- Disabled additional application access to Account Information, Radios and "Unspecified" on updated Windows 10 versions.
- Fixed custom HOSTS.txt file not being detected when running Blackbird from the command line
- Fixed Remote Desktop not working after using Blackbird (is now available after using the -L 'Fix network/LAN connectivity issues" switch)
- Fixed issue with slow network speeds in some browsers
- Fixed improper extended service name resolving, in some cases causing constant disk usage when applied to certain Windows 10 versions.
- Fixed problems when running under non-administrator user accounts when authentication is used.
- Fixed Blackbird defaulting to a Windows 7/8 policy template when ran on an unknown/updated Windows 10 system.
- Fixed -X switch not restoring all Xbox scheduled tasks and user not receiving session notifications such as game invites.
- Fixed -L switch (Fix network/LAN connectivity issues) not fixing LAN connectivity for some users.
- Fixed small STD detection bugs
- Changes to switch system:
- /S Silent Mode can now be used with other switches without applying Blackbird to allow proper scripting.
- /V Verbose Mode now reports all current states and changes correctly, like it should have in the first place.
- Most switches are now Enable/Disable. For example, if OneDrive is currently enabled it will be disabled when running -O switch and vice-versa. The user is notified of the current state.
- All switches are now executed properly when also applying Blackbird and are not overwritten.
- Only switches and functions supported on the local system are now available to the user (depending on Windows version).

Special thanks goes out to Roman from Ukraine for his dedicated and uncompromising bug hunting.



v0.9.98

- Added a switch to fix LAN connectivity problems after running Blackbird v0.9.97 or later (blackbird -l)
- Fixed Recovery mode not properly restoring some registry keys
- Fixed startup scanner sometimes not detecting autologgers as disabled
- Fixed most used apps not displaying in start menu after using Blackbird on older Windows 10 versions
- Fixed Blackbird 32bit version inconsistencies (reupload)

Special thanks to our users who helped us track down the problems very quickly.



v0.9.97

- Full Windows 10 Anniversary/Redstone support
- Disabled several new scheduled tasks
- Disabled several new services
- Disabled new Autologgers
- Disabled settings syncing on Windows 10
- Disabled telemetry uploading on Windows 7 and changed the authorized proxy to localhost (due to October Rollup update - KB3192403)
- Disabled network auto-tuning (speed tweak)
- Patched Windows SMB user crendentials leak
- Patched Web Proxy Auto Discovery
- Patched Smart Multi-Homed Name Resolution
- Patched Link-local Multicast Name Resolution
- Added new hosts to blacklist
- Added switch to disable SmartScreen application checking (blackbird -a)
- Added switch to disable all default Background Access Applications on Windows 10 (blackbird -c)
- Added switch to kill all System Apps on Windows 10 (blackbird -kall)
- Added switch to kill Lockscreen on Windows 10 (blackbird -kl)
- Added switch to enable the Diagnostic Policy Service (blackbird -p)
- Added switch to disable SMB over NetBIOS and close listening port 445 (blackbird -e)
- Changed /f switch and default Blackbird behaviour to not disable Start menu most-used apps list
- Changed folder cache rebuilding to no longer get disabled on Windows 10
- Updated STD definitions
- Improved registry editing by getting proper SID of current user, better 64bit and extended ControlSet support
- Improved disabling of Windows Defender on Windows 10 (blackbird -d switch)
- Multiple small improvements and fixes (too many to list)
- Fixed progress bar bug that caused multiple bars & file-not-found errors to appear during usage. Bad devs.
- Fixed System Apps unable to be killed again when Windows updates revive them (backup issue)
- Fixed duplicated STD output bugs when removing/disabling tasks
- Fixed some temporary files not getting properly removed
- Fixed some scheduled tasks not getting disabled
- Fixed OneDrive background app not getting removed from startup
- Fixed Defender file reviewing/uploading not getting properly disabled
- Fixed Recovery mode not restoring DPS service
- Fixed Diagnosis folder-not-found errors
- Fixed Scan mode not detecting some registry strings correctly



v0.9.95

- New, more awesome logo and icon
- Reduced binary size significantly
- Added support for up to 9 simultaneous command line switches
(Excluding: -r, -std, -scan ; Currently these modes can only be executed one at a time for stability reasons)
- Added full system scan switch (blackbird -scan)
- Added switch to skip update removal (blackbird -noupdate)
- Added switch to skip host blocking (blackbird -nohost)
- Added switch to skip system optimization/speed tweaks,etc. (blackbird -nospeed)
- Added new hosts to blacklist
- Added new update to blacklist (KB3173040)
- Additional P2P-UpdateSharing & WiFiSense registry keys disabled, just for kicks
- Additional Office 2015/16 logging/telemetry disabled
- Disabled Scripted Diagnostics remote server query on all Windows versions
- Disabled Scheduled Diagnostics on Windows 10
- Disabled Error Reporting completely on Windows Home editions and reset consent to zero
- Disabled unattended execution of CEIP and Error Reporting on Windows 10
- Disabled Cloud Experience Host ETW logging on Windows 10
- Disabled Peernet on all Windows versions
- Defender, MRT, CEIP data-leaks are now also patched on pre-Windows 10 versions
- Using external hosts.txt file now skips the internal blacklist (easier management)
- Better registry handling when keys are added dependent on system architecture (32/64bit)
- Improved setting of Diagnosis folder permissions on all Windows versions
- Fixed an issue with IPv6 addresses not getting blocked properly in some cases
- Fixed SpyTask Destroyer output errors when removing tasks
- Fixed Windows Defender data-leaks not getting patched properly
- Fixed duplicate entries in host blocker
- Fixed switches being case-sensitive
- Fixed progress bar errors when removing multiple Windows updates
- Attempt to fix an issue with Blackbird getting stuck at 99% for some users
- Small UI fixes
- Removed -e switch ("eMule LowID fix"), couldn't verify it helps anything


v0.9.93

- Added "alpha build" automatic Lenovo/Dell "Superfish" removal (certificates, registry, files,..)
- Added switches to kill Windows 10 system apps:
blackbird -kc (Kills Cortana, previously was -k)
blackbird -ke (Kills Microsoft Edge)
blackbird -kf (Kills Windows Feedback/ContactSupport)
- Added new hosts to blacklist
- All blocked hosts are now set as metric=1
- Turned UPX compression back on for both 64 & 32bit versions. Let's see what happens.
- Better switch/exit handling (returns to prompt instead of closing window)
- Disabled "Cloud Consumer Experience Features" on Windows 10
- Disabled additional scheduled tasks on Windows 10
- Fixed Error Reporting registry keys not getting set properly
- Fixed OneDrive not getting removed from Explorer in some cases


v0.9.92

- Added support for external hosts file (see ReadMe for more details)
- Added beta version of Blackbird STD (SpyTask Destroyer). See ReadMe for more information
- Added 'Enable OneDrive' switch (blackbird -o)
- Added 'Enable Sensors' switch (blackbird -t) to re-enable auto screen-rotation on tablets
- Added 'Disable Runtime Broker' switch (blackbird -b)
- Added 'Remove Blackbird Network Blocks' switch (blackbird -n)
- Added new KB update to blacklist (KB3150513)
- Disabled folder-cache rebuilding
- Disabled auto-reboot after installing updates on Windows 7/8
- Disabled additional scheduled tasks
- Disabled 'Program Compatibility Assistant' service on Windows 10
- New registry tweaks for Windows 10
- Now alerts the user if automatic updates are turned on (but does not disable them by default)
- Minor Verbose mode verbosity upgrades
- Fixed host blocker not resolving hostnames to IP addresses when DNS queries fail
- Fixed CloudServiceSync registry key unintentionally set to enabled
- Fixed a small output error in Verbose-mode when removing updates
- Fixed several GWX-trigger tasks not getting properly disabled
- Fixed a few scheduled tasks not getting properly restored when using Recovery-mode
- Attempt at fixing localization issues causing Blackbird scanner to report false information


v0.9.89

- Disabled Windows 7/8 "Recommended updates received the same way as important updates" to prevent Windows 10 silent download
- Disabled Windows 10 LockScreen ads
- Added new KB updates to blacklist


v0.9.88

- Partial rewrite/restructure:
AV false-positives should be less of a problem,
Removed KB update-hiding script for the time being (worked only on critical updates anyway).
- Host-blocker changes:
No temporary files created,
Should be a bit faster.
- Verbose-mode changes:
Fixed some updates not getting removed,
Fixed minor output errors,
Displays IP data of resolved host,
Scheduled tasks and hostnames now display in realtime as they're being disabled/blocked.
- Improved progress bar accuracy
- Small UI cosmetic tweaks
- Fixed Administrators-group permission bug when attempting to claim Diagnosis folder
- Fixed startup scanner bug that caused inaccurate Windows updates info to be shown
- Fixed UI scaling errors on Windows 10
- Fixed 'Kill Cortana' switch not closing processes properly
- Fixed Office 2016 telemetry not getting fully disabled


v0.9.85

- Added checks at startup to prevent Blackbird applying to Redstone builds as they are not currently supported and may damage your OS
- Added network tweak (ecn capability)
- Added new KB updates to blacklist
- Added experimental "eMule LowID fix" switch (blackbird -e)
- Added "Show frequently used apps at Start menu" switch (blackbird -f)
- Added "Enable Xbox Live services" switch (blackbird -x)
- Fixed multiple Recovery mode bugs (biggest of which caused most used apps to not show in Start menu after recovery)
- Another attempt at fixing the W10 startup scan bug for realsies this time


v0.9.82

- Switches can now be ran independently without applying Blackbird (excluding Verbose and Silent mode)
- Made some additional attempts at Skype ad blocking
- Dropped UPX compression (making the exe a little bigger) to evade AV false-positives
- Fixed (hopefully) a startup scan bug on Windows 10 that caused "reg key not found" errors to be shown in some cases


v0.9.8

- Disabled additional AIT agents on Windows 7/8
- Disabled all currently known GWX triggers
- Added new servers to blacklist
- Added new KB updates to blacklist
- Disabled additional startup scheduled tasks
- Disabled additional global device access applications
- Multiple Recovery mode optimizations
- Fixed startup scanner bug that caused inaccurate Windows Updates info to be shown when running on Windows 8/8.1
- Fixed a scary bug that caused unresponsive start-menu on Windows 10 in some cases


v0.9.7

- Added new servers to blacklist (Lenovo spyware included)
- Added disable hibernation switch (-h)
- Fixed some variables in IPv6 blocker (version 0.9.6 users should not be affected by this bug)


v0.9.6

- Full IPv6 support (all interfaces;wifi/eth)
- Added new KB updates to blacklist
- Added removal of Windows 10 Upgrade pre-install files/folders on older Windows versions
- Fixed backgroundtaskhost.exe not getting temporarily killed on Windows 10 Home
- Fixed cleanup issue where in some cases not all Blackbird temporary files get deleted at exit
- Fixed some updates not properly hidden as of version 0.9
- Fixed security scanner not finding proper privacy keys causing "not found" errors on Windows 10 if custom settings where applied at Windows 10 setup


v0.9.1

- Fixed "Telemetry = Not blocked" startup scan bug appearing in some cases, even if telemetry is properly blocked


v0.9 - "The UI Update"

- User interface overhaul
- Threshold 2 ready
- Added basic security scan at Blackbird startup
- Added '-m' switch for disabling Malicious Removal Tool updates
- Added new hosts to blacklist
- Added new KB updates to blacklist
- Disabled AutoLoggers on all Windows versions
- Fixed Windows Defender SpyNet reporting not getting disabled
- Fixed Internet Explorer privacy settings not applied correctly on pre-10 Windows versions
- Fixed WGA removal crashing Blackbird in some cases
- WGA is now removed automatically as we consider it rootkit-like software
- Code cleanup / re-structure (because Windows Defender does not seem to like us anymore)
- Various small bug-fixes


v0.89.3

- All system AutoLoggers disabled
- Fixed Autologger-diagtrack-listener.etl not clearing properly
- Fixed Error Reporting Service not getting disabled on Windows 10
- Fixed spelling error in host blocker
- Various bug-fixes


v0.89 - "The Website Update"

- New logo,icon,website
- Full support for all Windows editions
- Speed optimizations; Blackbird should be much faster overall
- Host block addressing optimizations
- Explorer,Edge/IE,Defender,MRT data leaks patched
- WGA removal is now optional, user is prompted to attempt removal if WGA is found.
- Prevents user:SYSTEM read access to diagnostic data
- Additional network tweaks
- Additional Windows10-specific privacy tweaks
- Better service handling
- More services disabled
- More servers added to blacklist (+bonus blocked Skype, Youtube & Facebook ads)
- More KB updates added to blacklist
- Added '-k' switch to kill Cortana completely (prevents searchUI.exe from loading)
- Added '-r' switch. Restores all changes made by Blackbird to default Microsoft values
- Added '-v' switch for extra info/troubleshooting (verbose)
- Added '-u' switch to disable automatic installation of updates
- Added a help menu (-?)
- Windows Defender can now only be disabled with the -d switch
- Removed '-a' switch (alternative host blocking) as it was just hogging space and was not as effective.
- Various bug-fixes


v0.7

- Full Windows 10 support; more spyware removed
- Removes WGA (user should re-run blackbird after rebooting to finalize WGA removal)
- Tracking servers now blocked by IP-range, using new embedded hostname resolver.
- Added '-s' switch for silently running blackbird with no user interaction required.
- Added '-a' switch to use an alternate host blocking method.


v0.5

- More scheduled tasks disabled/removed
- More Microsoft data tracking servers blocked
- Added removal of Windows keylogging data stored locally
- DNS cache is now flushed for security reasons
- Added automatic hiding of critical KB updates to prevent re-installation.
- Disabled Windows network throttling.
- Cleaned up interface


v0.3.1

- fixed parsing error


v0.3

- public release