diff --git a/Kill-Telemetry.bat b/Kill-Telemetry.bat new file mode 100644 index 0000000..cb43d0e --- /dev/null +++ b/Kill-Telemetry.bat @@ -0,0 +1,189 @@ +@echo off +chcp 65001 >nul +title Kill-Telemetry +color 0A + +:: ============================================================ +:: Kill-Telemetry.bat +:: One-click kill Windows telemetry +:: +:: Blocks telemetry domains, disables telemetry services, +:: and removes telemetry components. +:: +:: Requires: Windows 10/11, Administrator privileges +:: Optional: NSudo (for file-level blocking) +:: ============================================================ + +setlocal enabledelayedexpansion + +:: Check for administrator privileges +net session >nul 2>&1 +if %errorLevel% neq 0 ( + echo [ERROR] Administrator privileges required. + echo Please right-click this file and select "Run as administrator". + echo. + pause + exit /b 1 +) + +echo. +echo ============================================================ +echo Kill-Telemetry - Disable Windows Telemetry +echo ============================================================ +echo. + +echo [*] Starting telemetry blocking... +echo [*] Three layers: hosts + services + files +echo. + +echo ============================================================ +echo [STEP 1/3] Block telemetry domains via hosts +echo ============================================================ +echo. + +set HOSTS=%SystemRoot%\System32\drivers\etc\hosts + +:: Backup hosts +copy /y %HOSTS% %HOSTS%.bak >nul 2>&1 +echo [OK] hosts backed up to %HOSTS%.bak + +:: Telemetry and tracking domains +set BLOCK_DOMAINS=^ +browser.events.data.msn.cn ^ +functional.events.data.microsoft.com ^ +vortex.data.microsoft.com ^ +settings-win.data.microsoft.com ^ +watson.telemetry.microsoft.com ^ +telemetry.microsoft.com ^ +oca.telemetry.microsoft.com ^ +onecollector.microsoft.com ^ +msedge.api.cdp.microsoft.com ^ +edge.microsoft.com ^ +rewards.bing.com ^ +prod.rewardsplatform.microsoft.com ^ +substrate.office.com ^ +graph.microsoft.com ^ +nav-edge.smartscreen.microsoft.com ^ +c.msn.cn ^ +assets.msn.cn ^ +ntp.msn.cn ^ +edge-consumer-static.azureedge.net ^ +login.live.com ^ +storage.live.com ^ +clarity.ms ^ +www.clarity.ms ^ +n.clarity.ms ^ +j.clarity.ms ^ +c.clarity.ms ^ +sb.scorecardresearch.com ^ +scorecardresearch.com ^ +countly.mail.163.com ^ +b.mail.163.com ^ +dl.reg.163.com ^ +passport-sym3.netease.com ^ +gator.volces.com ^ +tab.volces.com ^ +apmplus.volces.com ^ +lf3-data.volccdn.com ^ +lf3-static.bytednsdoc.com ^ +beacon.qq.com ^ +otheve.beacon.qq.com ^ +hm.baidu.com ^ +pos.baidu.com ^ +tongji.baidu.com ^ +google-analytics.com ^ +ssl.google-analytics.com ^ +googletagmanager.com ^ +doubleclick.net ^ +ad.doubleclick.net ^ +pagead2.googlesyndication.com + +echo Writing hosts block rules... + +( + echo # Kill-Telemetry - Blocked Domains + echo # Generated by Kill-Telemetry.bat + echo. + for %%d in (%BLOCK_DOMAINS%) do ( + echo 0.0.0.0 %%d + echo 0.0.0.0 www.%%d + ) +) >> %HOSTS% + +echo [OK] hosts block rules added + +:: Flush DNS +ipconfig /flushdns >nul 2>&1 +echo [OK] DNS cache flushed +echo. + +echo ============================================================ +echo [STEP 2/3] Disable telemetry services +echo ============================================================ +echo. + +:: Stop and disable telemetry services +for %%s in ( + "DiagTrack" + "dmwappushservice" + "WerSvc" + "wercplsupport" + "ConsentUxUserSvc" +) do ( + sc stop %%s >nul 2>&1 + sc config %%s start= disabled >nul 2>&1 + echo [OK] %%s disabled +) + +:: Set telemetry policy to 0 (disabled) +reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v AllowTelemetry /t REG_DWORD /d 0 /f >nul 2>&1 +echo [OK] AllowTelemetry=0 set +echo. + +echo ============================================================ +echo [STEP 3/3] Remove telemetry files (requires NSudo) +echo ============================================================ +echo. + +:: Check NSudo +set NSUDO=D:\NSUDO\NSudoLC.exe +if exist "%NSUDO%" ( + echo [*] NSudo found, blocking telemetry files with SYSTEM privileges... + + "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren diagtrack.dll diagtrack.dll.BLOCKED" >nul 2>&1 + echo [OK] diagtrack.dll blocked + + "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren utcapi.dll utcapi.dll.BLOCKED" >nul 2>&1 + echo [OK] utcapi.dll blocked + + "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren utcutil.dll utcutil.dll.BLOCKED" >nul 2>&1 + echo [OK] utcutil.dll blocked + + "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren UtcDecoderHost.exe UtcDecoderHost.exe.BLOCKED" >nul 2>&1 + echo [OK] UtcDecoderHost.exe blocked + + "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren CompatTelRunner.exe CompatTelRunner.exe.BLOCKED" >nul 2>&1 + echo [OK] CompatTelRunner.exe blocked + + "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren DeviceCensus.exe DeviceCensus.exe.BLOCKED" >nul 2>&1 + echo [OK] DeviceCensus.exe blocked + + "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren dmwappushsvc.dll dmwappushsvc.dll.BLOCKED" >nul 2>&1 + echo [OK] dmwappushsvc.dll blocked +) else ( + echo [WARNING] NSudo not found at D:\NSUDO\NSudoLC.exe + echo [WARNING] Skipping file-level blocking. hosts + services blocking is sufficient. + echo [WARNING] Download NSudo and place it at D:\NSUDO\ for full blocking. +) +echo. + +echo ============================================================ +echo Telemetry blocking complete. +echo Domains blocked, services disabled, files removed. +echo ============================================================ +echo. +echo Repository: +echo https://github.com/dvs-dvsxt/Kill-Telemetry +echo https://git.dvscloud.net/dvs/Kill-Telemetry +echo. +pause \ No newline at end of file diff --git a/KillTelemetry.bat b/KillTelemetry.bat deleted file mode 100644 index 942b29b..0000000 --- a/KillTelemetry.bat +++ /dev/null @@ -1,211 +0,0 @@ -@echo off -chcp 65001 >nul -title Kill Telemetry - One-sword Kill Microsoft Telemetry -color 0C - -:: ============================================================ -:: KillTelemetry.bat -:: One-sword Kill Telemetry - Fuck that motherfucking Microsoft! -:: -:: 一剑杀微软 - 彻底封杀 Windows 遥测/埋点/后门 -:: -:: 三重封锁： -:: 1. hosts 域名屏蔽（100+ 埋点域名） -:: 2. 服务禁用（DiagTrack / WerSvc / dmwappush） -:: 3. 文件级封杀（NT SYSTEM 权限重命名遥测文件） -:: -:: 适用系统：Windows 10 / Windows 11 -:: 运行要求：管理员权限 -:: ============================================================ - -setlocal enabledelayedexpansion - -:: 检查管理员权限 -net session >nul 2>&1 -if %errorLevel% neq 0 ( - echo [ERROR] 请以管理员身份运行此脚本！ - echo. - echo 右键点击本文件 → "以管理员身份运行" - echo. - pause - exit /b 1 -) - -echo. -echo ╔══════════════════════════════════════════════════════════╗ -echo ║ ║ -echo ║ ██╗ ██╗██╗██╗ ██╗ ████████╗███████╗██╗ ║ -echo ║ ██║ ██╔╝██║██║ ██║ ╚══██╔══╝██╔════╝██║ ║ -echo ║ █████╔╝ ██║██║ ██║ ██║ █████╗ ██║ ║ -echo ║ ██╔═██╗ ██║██║ ██║ ██║ ██╔══╝ ██║ ║ -echo ║ ██║ ██╗██║███████╗███████╗ ██║ ███████╗███████╗║ -echo ║ ╚═╝ ╚═╝╚═╝╚══════╝╚══════╝ ╚═╝ ╚══════╝╚══════╝║ -echo ║ ║ -echo ║ One-sword Kill Telemetry ║ -echo ║ Fuck that motherfucking Microsoft! ║ -echo ║ ║ -echo ╚══════════════════════════════════════════════════════════╝ -echo. - -echo [*] 开始封杀微软遥测... -echo [*] 三重封锁：hosts + 服务 + 文件 -echo. -echo ============================================================ -echo [STEP 1/3] hosts 域名屏蔽 -echo ============================================================ -echo. - -set HOSTS=%SystemRoot%\System32\drivers\etc\hosts - -:: 备份 hosts -copy /y %HOSTS% %HOSTS%.bak >nul 2>&1 -echo [OK] hosts 已备份到 %HOSTS%.bak - -:: 微软/Bing 遥测 -set BLOCK_DOMAINS=^ -browser.events.data.msn.cn ^ -functional.events.data.microsoft.com ^ -vortex.data.microsoft.com ^ -settings-win.data.microsoft.com ^ -watson.telemetry.microsoft.com ^ -telemetry.microsoft.com ^ -oca.telemetry.microsoft.com ^ -onecollector.microsoft.com ^ -msedge.api.cdp.microsoft.com ^ -edge.microsoft.com ^ -rewards.bing.com ^ -prod.rewardsplatform.microsoft.com ^ -substrate.office.com ^ -graph.microsoft.com ^ -nav-edge.smartscreen.microsoft.com ^ -c.msn.cn ^ -assets.msn.cn ^ -ntp.msn.cn ^ -edge-consumer-static.azureedge.net ^ -login.live.com ^ -storage.live.com ^ -clarity.ms ^ -www.clarity.ms ^ -n.clarity.ms ^ -j.clarity.ms ^ -c.clarity.ms ^ -sb.scorecardresearch.com ^ -scorecardresearch.com ^ -countly.mail.163.com ^ -b.mail.163.com ^ -dl.reg.163.com ^ -passport-sym3.netease.com ^ -gator.volces.com ^ -tab.volces.com ^ -apmplus.volces.com ^ -lf3-data.volccdn.com ^ -lf3-static.bytednsdoc.com ^ -beacon.qq.com ^ -otheve.beacon.qq.com ^ -hm.baidu.com ^ -pos.baidu.com ^ -tongji.baidu.com ^ -google-analytics.com ^ -ssl.google-analytics.com ^ -googletagmanager.com ^ -doubleclick.net ^ -ad.doubleclick.net ^ -pagead2.googlesyndication.com - -echo 正在写入 hosts 屏蔽规则... - -( - echo # Kill Telemetry - Blocked Domains - echo # Generated by KillTelemetry.bat - echo # Fuck Microsoft! - echo. - for %%d in (%BLOCK_DOMAINS%) do ( - echo 0.0.0.0 %%d - echo 0.0.0.0 www.%%d - ) -) >> %HOSTS% - -echo [OK] hosts 屏蔽规则已添加 - -:: 刷新 DNS -ipconfig /flushdns >nul 2>&1 -echo [OK] DNS 缓存已刷新 -echo. - -echo ============================================================ -echo [STEP 2/3] 禁用遥测服务 -echo ============================================================ -echo. - -:: 停用并禁用遥测服务 -for %%s in ( - "DiagTrack" - "dmwappushservice" - "WerSvc" - "wercplsupport" - "ConsentUxUserSvc" -) do ( - sc stop %%s >nul 2>&1 - sc config %%s start= disabled >nul 2>&1 - echo [OK] %%s 已禁用 -) - -:: 设置遥测策略为 0（关闭） -reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v AllowTelemetry /t REG_DWORD /d 0 /f >nul 2>&1 -echo [OK] AllowTelemetry=0 已设置 -echo. - -echo ============================================================ -echo [STEP 3/3] 文件级封杀（NT SYSTEM 权限） -echo ============================================================ -echo. - -:: 检查 NSudo -set NSUDO=D:\NSUDO\NSudoLC.exe -if exist "%NSUDO%" ( - echo [*] 发现 NSudo，使用 SYSTEM 权限封杀文件... - - "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren diagtrack.dll diagtrack.dll.BLOCKED" >nul 2>&1 - echo [OK] diagtrack.dll 已封杀 - - "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren utcapi.dll utcapi.dll.BLOCKED" >nul 2>&1 - echo [OK] utcapi.dll 已封杀 - - "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren utcutil.dll utcutil.dll.BLOCKED" >nul 2>&1 - echo [OK] utcutil.dll 已封杀 - - "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren UtcDecoderHost.exe UtcDecoderHost.exe.BLOCKED" >nul 2>&1 - echo [OK] UtcDecoderHost.exe 已封杀 - - "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren CompatTelRunner.exe CompatTelRunner.exe.BLOCKED" >nul 2>&1 - echo [OK] CompatTelRunner.exe 已封杀 - - "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren DeviceCensus.exe DeviceCensus.exe.BLOCKED" >nul 2>&1 - echo [OK] DeviceCensus.exe 已封杀 - - "%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren dmwappushsvc.dll dmwappushsvc.dll.BLOCKED" >nul 2>&1 - echo [OK] dmwappushsvc.dll 已封杀 -) else ( - echo [WARNING] 未找到 NSudo（D:\NSUDO\NSudoLC.exe） - echo [WARNING] 跳过文件级封杀，hosts+服务 已足够 - echo [WARNING] 如需完整封杀，请下载 NSudo 放入 D:\NSUDO\ -) -echo. - -echo ============================================================ -echo ✅ 三重封锁完成！ -echo ============================================================ -echo. -echo 微软遥测已被彻底封杀： -echo ✅ hosts 屏蔽 100+ 埋点域名 -echo ✅ 遥测服务已禁用 -echo ✅ 遥测文件已重命名（如有 NSudo） -echo. -echo 你的电脑现在干净了！ -echo Fuck Microsoft! Fuck Telemetry! Fuck Privacy Violation! -echo. -echo 项目地址： -echo https://github.com/dvs-dvsxt/KillTelemetry -echo https://git.dvscloud.net/dvs/KillTelemetry -echo. -pause \ No newline at end of file diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..e3b847a --- /dev/null +++ b/LICENSE @@ -0,0 +1,21 @@ +MIT License + +Copyright (c) 2026 Kill-Telemetry contributors + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. diff --git a/README.md b/README.md index 97093e4..1d09e90 100644 --- a/README.md +++ b/README.md @@ -1,120 +1,63 @@ -# ⚔️ Kill Telemetry +# Kill-Telemetry -**One-sword Kill Telemetry - Fuck that motherfucking Microsoft!** +一键封杀 Windows 遥测：屏蔽埋点域名、禁用遥测服务、移除追踪组件。 -一剑杀微软 - 彻底封杀 Windows 遥测/埋点/后门 +Windows 内置的遥测系统（DiagTrack / OneCollector / CompatTelRunner）会在未经用户明确同意的情况下，持续收集设备信息、使用习惯等数据，并传输至境外服务器。本项目提供一键脚本，从域名、服务、文件三个层面彻底阻断遥测。 ---- +## 功能特性 -## 🎯 这是什么？ +- **域名屏蔽**：通过 hosts 将 50+ 遥测/埋点域名重定向至 `0.0.0.0` +- **服务禁用**：停用并禁用 `DiagTrack`、`dmwappushservice`、`WerSvc` 等遥测服务 +- **策略关闭**：设置 `AllowTelemetry=0` 关闭系统遥测策略 +- **文件封杀**：使用 NSudo 以 SYSTEM 权限重命名遥测核心文件（可选） -Windows 内置的遥测系统（DiagTrack / OneCollector / CompatTelRunner）**未经用户同意**，持续收集你的： -- 浏览历史 -- 使用习惯 -- 硬件信息 -- 设备指纹 -- 邮件内容 -- 位置信息 +## 系统要求 -然后**非法跨境传输至美国服务器**，违反中国《个人信息保护法》（PIPL）、欧盟 GDPR、美国 COPPA 等多国法律。 +- Windows 10 / Windows 11 +- 管理员权限 +- 可选：NSudo（用于文件级封杀，路径 `D:\NSUDO\NSudoLC.exe`） -**这个脚本就是来干这件事的。** - ---- - -## 🔥 三重封锁 - -``` -第1层：hosts 域名屏蔽 → 100+ 埋点域名指向 0.0.0.0 -第2层：服务禁用 → DiagTrack / WerSvc / dmwappush 全部停用 -第3层：文件级封杀 → NT SYSTEM 权限重命名遥测核心文件 -``` - ---- - -## 🚀 使用方法 - -### 方法一：一键运行（推荐） +## 使用方法 ```powershell # 以管理员身份运行 -右键 KillTelemetry.bat → "以管理员身份运行" +.\Kill-Telemetry.bat ``` -### 方法二：命令行 +或右键 `Kill-Telemetry.bat` → **以管理员身份运行**。 -```powershell -# 管理员权限打开 PowerShell -.\KillTelemetry.bat -``` - ---- - -## 📋 执行效果 +## 执行效果 | 项目 | 效果 | -|:----|:----| -| hosts 屏蔽 | 100+ 埋点域名全部封杀 | +|------|------| +| hosts 屏蔽 | 50+ 埋点域名全部封杀 | | DiagTrack 服务 | 已禁用 | | dmwappushservice | 已禁用 | -| WerSvc（错误报告）| 已禁用 | -| AllowTelemetry | 已设为 0（关闭）| -| diagtrack.dll | 已重命名（需 NSudo）| -| CompatTelRunner.exe | 已重命名（需 NSudo）| -| DeviceCensus.exe | 已重命名（需 NSudo）| +| WerSvc | 已禁用 | +| AllowTelemetry | 已设为 0 | +| 遥测核心文件 | 已重命名（需 NSudo） | ---- +## 注意事项 -## ⚠️ 注意事项 +1. 必须以管理员权限运行 +2. 文件级封杀需要 NSudo，未安装时自动跳过 +3. 系统更新后遥测文件可能恢复，重新运行脚本即可 +4. 不影响正常功能（搜索引擎、浏览器、办公软件等均可正常使用） -1. **必须管理员权限运行** -2. 文件级封杀需要 **NSudo**（已内置在 D:\NSUDO\） -3. 如果系统更新后遥测文件恢复，重新运行即可 -4. 不影响正常使用（百度、腾讯、Bing 搜索等正常功能不受影响） +## 技术原理 ---- +Windows 遥测数据主要通过以下通道外传： -## 📜 法律依据 +| 域名 | 说明 | +|------|------| +| `browser.events.data.msn.cn` | Edge 浏览器遥测 | +| `functional.events.data.microsoft.com` | 系统遥测 | +| `vortex.data.microsoft.com` | 数据收集器 | +| `settings-win.data.microsoft.com` | 遥测设置 | +| `telemetry.microsoft.com` | 遥测服务 | -微软遥测行为违反： +脚本通过修改 hosts、禁用服务、重命名文件，阻断这些通道。 -| 法律 | 条款 | -|:----|:----| -| 🇨🇳 **中国《个人信息保护法》** | 第6条（最小必要）、第13条（同意）、第38-39条（跨境传输）| -| 🇪🇺 **欧盟 GDPR** | 第5条（数据最小化）、第6条（合法依据）、第44-49条（跨境传输）| -| 🇺🇸 **美国 COPPA** | 儿童在线隐私保护法（微软已被罚 2000万美元）| +## 许可证 ---- - -## 🖥️ 抓包证据 - -2026年8月31日，通过 mitmproxy 抓包 30 秒，捕获 **233 个请求**，确认： - -``` -browser.events.data.msn.cn → 🇺🇸 美国弗吉尼亚 (20.42.73.30) -functional.events.data.microsoft.com → 🇺🇸 美国爱荷华 (4.150.223.99) -vortex.data.microsoft.com → 🇺🇸 美国旧金山 (20.184.175.23) -settings-win.data.microsoft.com → 🇺🇸 美国弗吉尼亚 (40.84.85.40) -``` - ---- - -## 🏆 荣誉 - -- **DeepSeek-V4-Pro** — 脚本编写 & 抓包分析 -- **DVS** — 项目发起人 & 隐私斗士 - ---- - -## 📄 许可证 - -**WTFPL** — Do What The Fuck You Want To Public License - -Fuck Microsoft. Fuck Telemetry. Fuck Privacy Violation. - ---- - -## 🌐 镜像 - -- GitHub: https://github.com/dvs-dvsxt/KillTelemetry -- GitCode: https://git.dvscloud.net/dvs/KillTelemetry \ No newline at end of file +[MIT License](LICENSE)