CompatTelRunner.exe "Debugger"

B

Bournesup

Member
Not sure where this exe is tied to. But it shows up in my autoruns. Initial searches say that it is tied to diagnostics and feedback.. This is the first time this exe showed up in my autoruns
 

Attachments

  • debug.xml
    46.8 KB
It's the telemetry client, seems to be removed just fine, tested now.

Did maybe Windows Update or a user installed a new update after setup?
Use NTLite - Tools - Remove reinstalls to clean it up after each update.

If it's still there, let me know of the exact reg entry that Autoruns is detecting as a leftover.

Thanks.
 
Herre is the registry key

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CompatTelRunner.exe]
"Debugger"="%windir%\\System32\\taskkill.exe"

This was exactly after a host refresh.

Series of steps I performed after a refresh;
  1. Check autoruns: where I find and delete that key
  2. Check for updates via windows update
  3. Ntlite - remove reinstalls
  4. check autoruns; no reference to that autorun key
Nuhi: It's the telemetry client, seems to be removed just fine, tested now.
The key is a leftover after the telemetry client has been removed?
 
Last edited:
Bournesup said:
Herre is the registry key

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CompatTelRunner.exe]
"Debugger"="%windir%\\System32\\taskkill.exe"

This was exactly after a host refresh.

Series of steps I performed after a refresh;
  1. Check autoruns: where I find and delete that key
  2. Check for updates via windows update
  3. Ntlite - remove reinstalls
  4. check autoruns; no reference to that autorun key
Nuhi: It's the telemetry client, seems to be removed just fine, tested now.
The key is a leftover after the telemetry client has been removed?
Click to expand...
That key is on purpose blockade if CompatTelRunner.exe returns, like via cumulative update, it's a reroute to taskkill, could be anything Windows related.
Recommended to keep that reg key, or clean it if you want, you can integrate the cleanup in a form of a Reg file and put it to Integrate - Registry page.

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CompatTelRunner.exe]
 
Calling it spyware is a gross oversimplification. The telemetry functions are inter-dependent.

Compatibility Telemetry Runner's original job was to report what user software is installed so MS can compare what's in common with repeated patterns of Windows or app crashes. There's no way they can quickly debug problems unless they collect some profile data because users are TERRIBLE at explaining things. Anyone who's worked support knows this.

"Windows is crashing" doesn't really help the developers fix bugs. Based on telemetry, for example, someone can determine Adobe PhotoShop crashes more often against a specific Windows update. Without this data, problems might not get resolved or take forever to get fixes.

What everyone forgets is one of the popular W11 hardware bypass hacks is to remove appraiser.dll. This is the telemetry framework that has a hidden list of known apps that are known to cause frequent crashes. It's not entirely useless, but MS undercuts itself by not explaining what this framework does, or how it brings benefits to the other 98% of Windows users.
 
The other scary part it is also tied to MsStore. It determines that none of the files have been tampered with either. Its like a double sided sword, providing telemetry and security.
 
Bournesup said:
The other scary part it is also tied to MsStore. It determines that none of the files have been tampered with either. Its like a double sided sword, providing telemetry and security.
Click to expand...
yep. hence why its spyware. its under the guise of being "useful" when nothing is further from the truth. windows error reporting was designed to send crash logs to Microsoft. Now, this day and age, "telemetry" is all about tracking how you use your pc, what purchases you make, etc. so they can send you relevant advertisements, whilst selling your personal information to advertising companies, such as google. there are many ways to block this spyware, there are apps designed to do it, or you can delete the spyware exe's, using iobit unlocker, and block the corresponding servers, using a HOSTS file. works well :)
 
What exactly is the difference between Remove ReInstalls or run the install Preset (which has been updated in the meantime with new NTL updates/fixes) after a new WU witch no one can predict what new stuff MS put into Windows?
So actually - using Remove Installs you're better off just running an updated Preset and run a WinSxS cleanup afterwards.
A cmd code remove more than using NTL DISM Compatible if loading live.
Thanks.
 
You must log in or register to reply here.
Back
Top