dvs/Kill-Telemetry
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rewrite as professional project with MIT license

Browse Source
This commit is contained in:
dvs
2026-08-31 17:49:40 +08:00
parent cd9a59b2fd
commit 0cdef2a67a
4 changed files with 248 additions and 306 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Kill-Telemetry.bat
+189
View File
@@ -0,0 +1,189 @@
@echo off
chcp 65001 >nul
title Kill-Telemetry
color 0A
:: ============================================================
:: Kill-Telemetry.bat
:: One-click kill Windows telemetry
::
:: Blocks telemetry domains, disables telemetry services,
:: and removes telemetry components.
::
:: Requires: Windows 10/11, Administrator privileges
:: Optional: NSudo (for file-level blocking)
:: ============================================================
setlocal enabledelayedexpansion
:: Check for administrator privileges
net session >nul 2>&1
if %errorLevel% neq 0 (
echo [ERROR] Administrator privileges required.
echo Please right-click this file and select "Run as administrator".
echo.
pause
exit /b 1
)
echo.
echo ============================================================
echo Kill-Telemetry - Disable Windows Telemetry
echo ============================================================
echo.
echo [*] Starting telemetry blocking...
echo [*] Three layers: hosts + services + files
echo.
echo ============================================================
echo [STEP 1/3] Block telemetry domains via hosts
echo ============================================================
echo.
set HOSTS=%SystemRoot%\System32\drivers\etc\hosts
:: Backup hosts
copy /y %HOSTS% %HOSTS%.bak >nul 2>&1
echo [OK] hosts backed up to %HOSTS%.bak
:: Telemetry and tracking domains
set BLOCK_DOMAINS=^
browser.events.data.msn.cn ^
functional.events.data.microsoft.com ^
vortex.data.microsoft.com ^
settings-win.data.microsoft.com ^
watson.telemetry.microsoft.com ^
telemetry.microsoft.com ^
oca.telemetry.microsoft.com ^
onecollector.microsoft.com ^
msedge.api.cdp.microsoft.com ^
edge.microsoft.com ^
rewards.bing.com ^
prod.rewardsplatform.microsoft.com ^
substrate.office.com ^
graph.microsoft.com ^
nav-edge.smartscreen.microsoft.com ^
c.msn.cn ^
assets.msn.cn ^
ntp.msn.cn ^
edge-consumer-static.azureedge.net ^
login.live.com ^
storage.live.com ^
clarity.ms ^
www.clarity.ms ^
n.clarity.ms ^
j.clarity.ms ^
c.clarity.ms ^
sb.scorecardresearch.com ^
scorecardresearch.com ^
countly.mail.163.com ^
b.mail.163.com ^
dl.reg.163.com ^
passport-sym3.netease.com ^
gator.volces.com ^
tab.volces.com ^
apmplus.volces.com ^
lf3-data.volccdn.com ^
lf3-static.bytednsdoc.com ^
beacon.qq.com ^
otheve.beacon.qq.com ^
hm.baidu.com ^
pos.baidu.com ^
tongji.baidu.com ^
google-analytics.com ^
ssl.google-analytics.com ^
googletagmanager.com ^
doubleclick.net ^
ad.doubleclick.net ^
pagead2.googlesyndication.com
echo Writing hosts block rules...
(
echo # Kill-Telemetry - Blocked Domains
echo # Generated by Kill-Telemetry.bat
echo.
for %%d in (%BLOCK_DOMAINS%) do (
echo 0.0.0.0 %%d
echo 0.0.0.0 www.%%d
)
) >> %HOSTS%
echo [OK] hosts block rules added
:: Flush DNS
ipconfig /flushdns >nul 2>&1
echo [OK] DNS cache flushed
echo.
echo ============================================================
echo [STEP 2/3] Disable telemetry services
echo ============================================================
echo.
:: Stop and disable telemetry services
for %%s in (
"DiagTrack"
"dmwappushservice"
"WerSvc"
"wercplsupport"
"ConsentUxUserSvc"
) do (
sc stop %%s >nul 2>&1
sc config %%s start= disabled >nul 2>&1
echo [OK] %%s disabled
)
:: Set telemetry policy to 0 (disabled)
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v AllowTelemetry /t REG_DWORD /d 0 /f >nul 2>&1
echo [OK] AllowTelemetry=0 set
echo.
echo ============================================================
echo [STEP 3/3] Remove telemetry files (requires NSudo)
echo ============================================================
echo.
:: Check NSudo
set NSUDO=D:\NSUDO\NSudoLC.exe
if exist "%NSUDO%" (
echo [*] NSudo found, blocking telemetry files with SYSTEM privileges...
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren diagtrack.dll diagtrack.dll.BLOCKED" >nul 2>&1
echo [OK] diagtrack.dll blocked
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren utcapi.dll utcapi.dll.BLOCKED" >nul 2>&1
echo [OK] utcapi.dll blocked
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren utcutil.dll utcutil.dll.BLOCKED" >nul 2>&1
echo [OK] utcutil.dll blocked
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren UtcDecoderHost.exe UtcDecoderHost.exe.BLOCKED" >nul 2>&1
echo [OK] UtcDecoderHost.exe blocked
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren CompatTelRunner.exe CompatTelRunner.exe.BLOCKED" >nul 2>&1
echo [OK] CompatTelRunner.exe blocked
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren DeviceCensus.exe DeviceCensus.exe.BLOCKED" >nul 2>&1
echo [OK] DeviceCensus.exe blocked
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren dmwappushsvc.dll dmwappushsvc.dll.BLOCKED" >nul 2>&1
echo [OK] dmwappushsvc.dll blocked
) else (
echo [WARNING] NSudo not found at D:\NSUDO\NSudoLC.exe
echo [WARNING] Skipping file-level blocking. hosts + services blocking is sufficient.
echo [WARNING] Download NSudo and place it at D:\NSUDO\ for full blocking.
)
echo.
echo ============================================================
echo Telemetry blocking complete.
echo Domains blocked, services disabled, files removed.
echo ============================================================
echo.
echo Repository:
echo https://github.com/dvs-dvsxt/Kill-Telemetry
echo https://git.dvscloud.net/dvs/Kill-Telemetry
echo.
pause
KillTelemetry.bat
-211
View File
@@ -1,211 +0,0 @@
@echo off
chcp 65001 >nul
title Kill Telemetry - One-sword Kill Microsoft Telemetry
color 0C
:: ============================================================
:: KillTelemetry.bat
:: One-sword Kill Telemetry - Fuck that motherfucking Microsoft!
::
:: 一剑杀微软 - 彻底封杀 Windows 遥测/埋点/后门
::
:: 三重封锁：
:: 1. hosts 域名屏蔽（100+ 埋点域名）
:: 2. 服务禁用（DiagTrack / WerSvc / dmwappush）
:: 3. 文件级封杀（NT SYSTEM 权限重命名遥测文件）
::
:: 适用系统：Windows 10 / Windows 11
:: 运行要求：管理员权限
:: ============================================================
setlocal enabledelayedexpansion
:: 检查管理员权限
net session >nul 2>&1
if %errorLevel% neq 0 (
echo [ERROR] 请以管理员身份运行此脚本！
echo.
echo 右键点击本文件 → "以管理员身份运行"
echo.
pause
exit /b 1
)
echo.
echo ╔══════════════════════════════════════════════════════════╗
echo ║ ║
echo ║ ██╗ ██╗██╗██╗ ██╗ ████████╗███████╗██╗ ║
echo ║ ██║ ██╔╝██║██║ ██║ ╚══██╔══╝██╔════╝██║ ║
echo ║ █████╔╝ ██║██║ ██║ ██║ █████╗ ██║ ║
echo ║ ██╔═██╗ ██║██║ ██║ ██║ ██╔══╝ ██║ ║
echo ║ ██║ ██╗██║███████╗███████╗ ██║ ███████╗███████╗║
echo ║ ╚═╝ ╚═╝╚═╝╚══════╝╚══════╝ ╚═╝ ╚══════╝╚══════╝║
echo ║ ║
echo ║ One-sword Kill Telemetry ║
echo ║ Fuck that motherfucking Microsoft! ║
echo ║ ║
echo ╚══════════════════════════════════════════════════════════╝
echo.
echo [*] 开始封杀微软遥测...
echo [*] 三重封锁：hosts + 服务 + 文件
echo.
echo ============================================================
echo [STEP 1/3] hosts 域名屏蔽
echo ============================================================
echo.
set HOSTS=%SystemRoot%\System32\drivers\etc\hosts
:: 备份 hosts
copy /y %HOSTS% %HOSTS%.bak >nul 2>&1
echo [OK] hosts 已备份到 %HOSTS%.bak
:: 微软/Bing 遥测
set BLOCK_DOMAINS=^
browser.events.data.msn.cn ^
functional.events.data.microsoft.com ^
vortex.data.microsoft.com ^
settings-win.data.microsoft.com ^
watson.telemetry.microsoft.com ^
telemetry.microsoft.com ^
oca.telemetry.microsoft.com ^
onecollector.microsoft.com ^
msedge.api.cdp.microsoft.com ^
edge.microsoft.com ^
rewards.bing.com ^
prod.rewardsplatform.microsoft.com ^
substrate.office.com ^
graph.microsoft.com ^
nav-edge.smartscreen.microsoft.com ^
c.msn.cn ^
assets.msn.cn ^
ntp.msn.cn ^
edge-consumer-static.azureedge.net ^
login.live.com ^
storage.live.com ^
clarity.ms ^
www.clarity.ms ^
n.clarity.ms ^
j.clarity.ms ^
c.clarity.ms ^
sb.scorecardresearch.com ^
scorecardresearch.com ^
countly.mail.163.com ^
b.mail.163.com ^
dl.reg.163.com ^
passport-sym3.netease.com ^
gator.volces.com ^
tab.volces.com ^
apmplus.volces.com ^
lf3-data.volccdn.com ^
lf3-static.bytednsdoc.com ^
beacon.qq.com ^
otheve.beacon.qq.com ^
hm.baidu.com ^
pos.baidu.com ^
tongji.baidu.com ^
google-analytics.com ^
ssl.google-analytics.com ^
googletagmanager.com ^
doubleclick.net ^
ad.doubleclick.net ^
pagead2.googlesyndication.com
echo 正在写入 hosts 屏蔽规则...
(
echo # Kill Telemetry - Blocked Domains
echo # Generated by KillTelemetry.bat
echo # Fuck Microsoft!
echo.
for %%d in (%BLOCK_DOMAINS%) do (
echo 0.0.0.0 %%d
echo 0.0.0.0 www.%%d
)
) >> %HOSTS%
echo [OK] hosts 屏蔽规则已添加
:: 刷新 DNS
ipconfig /flushdns >nul 2>&1
echo [OK] DNS 缓存已刷新
echo.
echo ============================================================
echo [STEP 2/3] 禁用遥测服务
echo ============================================================
echo.
:: 停用并禁用遥测服务
for %%s in (
"DiagTrack"
"dmwappushservice"
"WerSvc"
"wercplsupport"
"ConsentUxUserSvc"
) do (
sc stop %%s >nul 2>&1
sc config %%s start= disabled >nul 2>&1
echo [OK] %%s 已禁用
)
:: 设置遥测策略为 0（关闭）
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v AllowTelemetry /t REG_DWORD /d 0 /f >nul 2>&1
echo [OK] AllowTelemetry=0 已设置
echo.
echo ============================================================
echo [STEP 3/3] 文件级封杀（NT SYSTEM 权限）
echo ============================================================
echo.
:: 检查 NSudo
set NSUDO=D:\NSUDO\NSudoLC.exe
if exist "%NSUDO%" (
echo [*] 发现 NSudo，使用 SYSTEM 权限封杀文件...
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren diagtrack.dll diagtrack.dll.BLOCKED" >nul 2>&1
echo [OK] diagtrack.dll 已封杀
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren utcapi.dll utcapi.dll.BLOCKED" >nul 2>&1
echo [OK] utcapi.dll 已封杀
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren utcutil.dll utcutil.dll.BLOCKED" >nul 2>&1
echo [OK] utcutil.dll 已封杀
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren UtcDecoderHost.exe UtcDecoderHost.exe.BLOCKED" >nul 2>&1
echo [OK] UtcDecoderHost.exe 已封杀
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren CompatTelRunner.exe CompatTelRunner.exe.BLOCKED" >nul 2>&1
echo [OK] CompatTelRunner.exe 已封杀
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren DeviceCensus.exe DeviceCensus.exe.BLOCKED" >nul 2>&1
echo [OK] DeviceCensus.exe 已封杀
"%NSUDO%" -S cmd /c "cd /d C:\Windows\System32 && ren dmwappushsvc.dll dmwappushsvc.dll.BLOCKED" >nul 2>&1
echo [OK] dmwappushsvc.dll 已封杀
) else (
echo [WARNING] 未找到 NSudo（D:\NSUDO\NSudoLC.exe）
echo [WARNING] 跳过文件级封杀，hosts+服务 已足够
echo [WARNING] 如需完整封杀，请下载 NSudo 放入 D:\NSUDO\
)
echo.
echo ============================================================
echo ✅ 三重封锁完成！
echo ============================================================
echo.
echo 微软遥测已被彻底封杀：
echo ✅ hosts 屏蔽 100+ 埋点域名
echo ✅ 遥测服务已禁用
echo ✅ 遥测文件已重命名（如有 NSudo）
echo.
echo 你的电脑现在干净了！
echo Fuck Microsoft! Fuck Telemetry! Fuck Privacy Violation!
echo.
echo 项目地址：
echo https://github.com/dvs-dvsxt/KillTelemetry
echo https://git.dvscloud.net/dvs/KillTelemetry
echo.
pause
LICENSE
+21
View File
@@ -0,0 +1,21 @@
MIT License
Copyright (c) 2026 Kill-Telemetry contributors
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
README.md
+38 -95
View File
@@ -1,120 +1,63 @@
# ⚔️ Kill Telemetry
# Kill-Telemetry
**One-sword Kill Telemetry - Fuck that motherfucking Microsoft!**
一键封杀 Windows 遥测：屏蔽埋点域名、禁用遥测服务、移除追踪组件。
一剑杀微软 - 彻底封杀 Windows 遥测/埋点/后门
Windows 内置的遥测系统（DiagTrack / OneCollector / CompatTelRunner）会在未经用户明确同意的情况下，持续收集设备信息、使用习惯等数据，并传输至境外服务器。本项目提供一键脚本，从域名、服务、文件三个层面彻底阻断遥测。
---
## 功能特性
## 🎯 这是什么？
- **域名屏蔽**：通过 hosts 将 50+ 遥测/埋点域名重定向至 `0.0.0.0`
- **服务禁用**：停用并禁用 `DiagTrack`、`dmwappushservice`、`WerSvc` 等遥测服务
- **策略关闭**：设置 `AllowTelemetry=0` 关闭系统遥测策略
- **文件封杀**：使用 NSudo 以 SYSTEM 权限重命名遥测核心文件（可选）
Windows 内置的遥测系统（DiagTrack / OneCollector / CompatTelRunner）**未经用户同意**，持续收集你的：
- 浏览历史
- 使用习惯
- 硬件信息
- 设备指纹
- 邮件内容
- 位置信息
## 系统要求
然后**非法跨境传输至美国服务器**，违反中国《个人信息保护法》（PIPL）、欧盟 GDPR、美国 COPPA 等多国法律。
- Windows 10 / Windows 11
- 管理员权限
- 可选：NSudo（用于文件级封杀，路径 `D:\NSUDO\NSudoLC.exe`）
**这个脚本就是来干这件事的。**
---
## 🔥 三重封锁
```
第1层：hosts 域名屏蔽 → 100+ 埋点域名指向 0.0.0.0
第2层：服务禁用 → DiagTrack / WerSvc / dmwappush 全部停用
第3层：文件级封杀 → NT SYSTEM 权限重命名遥测核心文件
```
---
## 🚀 使用方法
### 方法一：一键运行（推荐）
## 使用方法
```powershell
# 以管理员身份运行
右键 KillTelemetry.bat → "以管理员身份运行"
.\Kill-Telemetry.bat
```
### 方法二：命令行
或右键 `Kill-Telemetry.bat` → **以管理员身份运行**。
```powershell
# 管理员权限打开 PowerShell
.\KillTelemetry.bat
```
---
## 📋 执行效果
## 执行效果
| 项目 | 效果 |
|:----|:----|
| hosts 屏蔽 | 100+ 埋点域名全部封杀 |
|------|------|
| hosts 屏蔽 | 50+ 埋点域名全部封杀 |
| DiagTrack 服务 | 已禁用 |
| dmwappushservice | 已禁用 |
| WerSvc（错误报告）| 已禁用 |
| AllowTelemetry | 已设为 0（关闭）|
| diagtrack.dll | 已重命名（需 NSudo）|
| CompatTelRunner.exe | 已重命名（需 NSudo）|
| DeviceCensus.exe | 已重命名（需 NSudo）|
| WerSvc | 已禁用 |
| AllowTelemetry | 已设为 0 |
| 遥测核心文件 | 已重命名（需 NSudo） |
---
## 注意事项
## ⚠️ 注意事项
1. 必须以管理员权限运行
2. 文件级封杀需要 NSudo，未安装时自动跳过
3. 系统更新后遥测文件可能恢复，重新运行脚本即可
4. 不影响正常功能（搜索引擎、浏览器、办公软件等均可正常使用）
1. **必须管理员权限运行**
2. 文件级封杀需要 **NSudo**（已内置在 D:\NSUDO\）
3. 如果系统更新后遥测文件恢复，重新运行即可
4. 不影响正常使用（百度、腾讯、Bing 搜索等正常功能不受影响）
## 技术原理
---
Windows 遥测数据主要通过以下通道外传：
## 📜 法律依据
| 域名 | 说明 |
|------|------|
| `browser.events.data.msn.cn` | Edge 浏览器遥测 |
| `functional.events.data.microsoft.com` | 系统遥测 |
| `vortex.data.microsoft.com` | 数据收集器 |
| `settings-win.data.microsoft.com` | 遥测设置 |
| `telemetry.microsoft.com` | 遥测服务 |
微软遥测行为违反：
脚本通过修改 hosts、禁用服务、重命名文件，阻断这些通道。
| 法律 | 条款 |
|:----|:----|
| 🇨🇳 **中国《个人信息保护法》** | 第6条（最小必要）、第13条（同意）、第38-39条（跨境传输）|
| 🇪🇺 **欧盟 GDPR** | 第5条（数据最小化）、第6条（合法依据）、第44-49条（跨境传输）|
| 🇺🇸 **美国 COPPA** | 儿童在线隐私保护法（微软已被罚 2000万美元）|
## 许可证
---
## 🖥️ 抓包证据
2026年8月31日，通过 mitmproxy 抓包 30 秒，捕获 **233 个请求**，确认：
```
browser.events.data.msn.cn → 🇺🇸 美国弗吉尼亚 (20.42.73.30)
functional.events.data.microsoft.com → 🇺🇸 美国爱荷华 (4.150.223.99)
vortex.data.microsoft.com → 🇺🇸 美国旧金山 (20.184.175.23)
settings-win.data.microsoft.com → 🇺🇸 美国弗吉尼亚 (40.84.85.40)
```
---
## 🏆 荣誉
- **DeepSeek-V4-Pro** — 脚本编写 & 抓包分析
- **DVS** — 项目发起人 & 隐私斗士
---
## 📄 许可证
**WTFPL** — Do What The Fuck You Want To Public License
Fuck Microsoft. Fuck Telemetry. Fuck Privacy Violation.
---
## 🌐 镜像
- GitHub: https://github.com/dvs-dvsxt/KillTelemetry
- GitCode: https://git.dvscloud.net/dvs/KillTelemetry
[MIT License](LICENSE)