[原创]续：WMI进程占用CPU过高，由Alibaba的pcUnitTest.exe文件引起

最新推荐文章于 2022-05-10 20:48:53 发布

potato699

最新推荐文章于 2022-05-10 20:48:53 发布

阅读量435

点赞数

分类专栏：电脑故障文章标签： windows cpu 阿里巴巴

本文链接：https://blog.csdn.net/bobo98/article/details/120165156

版权

电脑故障专栏收录该内容

7 篇文章 0 订阅

订阅专栏

本文描述了一位用户通过PowerShell脚本尝试永久移除Alibaba的AliPaladin和AlibabaProtect服务以提升电脑速度的过程。用户分享了详细的操作步骤，包括修改注册表和权限设置，但遇到问题：重启后服务仍会自启，导致100%CPU占用。用户提出可能的解决方案，如使用虚拟机隔离Alibaba应用，并表达了对自动化解决方案的需求。

摘要由CSDN通过智能技术生成

将Alibaba干掉后，电脑速度明显快了！但前次（https://blog.csdn.net/bobo98/article/details/120070943）的方法并不完美，一个问题是，每次重启电脑后，那东西又会自启，如附骨之蛆！！

那么有方法能根治吗？这是一个困绕我N多年的老问题（N>10+）！再次查找资料，发现一篇文章①介绍方法，尝试解决。

PowerShell脚本：（重要：进入备份目录！然后管理员执行）

#
function Remove-RegistryValue($key, $value)
{
    Remove-ItemProperty $key $value
}

function Set-RegistryValue($key, $name, $value, $type = "String")
{
    if ((Test-Path $key) -eq $false)
    {
        md $key | Out-Null
    }
    Set-ItemProperty $key $name $value -type $type
}

function Get-RegistryValue($key, $name)
{
    if((Test-Path $key) -eq $false)
    {
        return $null
    }
    else
    {
        $tmpStr = (Get-ItemProperty $key).$name
        $tmpStr = $tmpStr.Replace("\??\", "")
        $tmpStr.Replace("""",  "")
    }
}

$tmpDate = Get-Date -Format "yyyyMMddHHmm"
$addr = "HKLM:\SYSTEM\CurrentControlSet\Services\AliPaladin"
$aliPldPath = Get-RegistryValue $addr "ImagePath"
if([String]::IsNullOrEmpty($aliPldPath))
{
    Write-Warning "错误：HKLM:\SYSTEM\CurrentControlSet\Services\AliPaladin不能找到! `
    `n执行被中止！`n或者已执行，请勿重复！`n";""
    return -1 | Out-Null
}
Reg export $addr.Replace(":", "") ("AliPaladin.reg." + $tmpDate)
Remove-Item -Recurse -Path $addr

$person = [System.Security.Principal.NTAccount]"Everyone"
$access = [System.Security.AccessControl.RegistryRights]"SetValue"
$inheritance = [System.Security.AccessControl.InheritanceFlags]"None"
$propagation = [System.Security.AccessControl.PropagationFlags]"None"
$type = [System.Security.AccessControl.AccessControlType]"Deny"
$rule = New-Object System.Security.AccessControl.RegistryAccessRule( `
$person,$access,$inheritance,$propagation,$type)

$addr = "HKLM:\SYSTEM\CurrentControlSet\Services\AlibabaProtect"
$aliProPath = Get-RegistryValue $addr "ImagePath"
Set-RegistryValue $addr "Start" 3 "Dword"
$acl = Get-Acl $addr
$acl.AddAccessRule($rule)
Set-Acl $addr $acl

icacls $aliPldPath /C /setowner "Administrators"
icacls $aliPldPath /C /grant ("Administrators" + ":F")
icacls $aliPldPath /C /deny ("Everyone" + ":RXW")
icacls $aliPldPath /C /setowner "NT Service\TrustedInstaller"

$aliProDir = (Split-Path $aliProPath) + "\"

icacls ($aliProDir + "AliPaladin_win7.sys") /C /setowner "Administrators"
icacls ($aliProDir + "AliPaladin_win7.sys") /C /grant ("Administrators" + ":F")
icacls ($aliProDir + "AliPaladin_win7.sys") /C /deny ("Everyone" + ":RXW")
icacls ($aliProDir + "AliPaladin_win7.sys") /C /setowner "NT Service\TrustedInstaller"
icacls ($aliProDir + "AliPaladin_win10.sys") /C /setowner "Administrators"
icacls ($aliProDir + "AliPaladin_win10.sys") /C /grant ("Administrators" + ":F")
icacls ($aliProDir + "AliPaladin_win10.sys") /C /deny ("Everyone" + ":RXW")
icacls ($aliProDir + "AliPaladin_win10.sys") /C /setowner "NT Service\TrustedInstaller"
icacls ($aliProDir + "AliPaladin64_win7.sys") /C /setowner "Administrators"
icacls ($aliProDir + "AliPaladin64_win7.sys") /C /grant ("Administrators" + ":F")
icacls ($aliProDir + "AliPaladin64_win7.sys") /C /deny ("Everyone" + ":RXW")
icacls ($aliProDir + "AliPaladin64_win7.sys") /C /setowner "NT Service\TrustedInstaller"
icacls ($aliProDir + "AliPaladin64_win10.sys") /C /setowner "Administrators"
icacls ($aliProDir + "AliPaladin64_win10.sys") /C /grant ("Administrators" + ":F")
icacls ($aliProDir + "AliPaladin64_win10.sys") /C /deny ("Everyone" + ":RXW")
icacls ($aliProDir + "AliPaladin64_win10.sys") /C /setowner "NT Service\TrustedInstaller"