T modded this to avoid removing some updates that actually help windows
It wont disable windows update, but it will disable recommended updates because they're usually the scam ones.
It wont mess with firewall, hosts or lock folders (WTF where they thinking?)

--
batch to uninstall updates
registry fix opt out
disable scheduled tasks for gathering teletry and uploading

use MTRTv2_6 
DONE not edit hosts
DONE no firewall changes 
change auto-update settings so it allows critical updates auto without restart.
DONE not create lockdown folders.

keep kb3102810, speeds update up
keep kb3086255, disables safedisc driver needed by old CD games, but avoids some attacks.
keep kb3078667, fix mem leak, linked article doesn't claim anything bad
keep kb2505438, need font fixes.
keep kb3042058, it's safe, it improves cipher stuff. https://technet.microsoft.com/en-us/library/security/3042058.aspx
auto update on, download & install auto.