windows提示“为了对电脑进行保护，已经阻止此应用”的解决方案 mmc.exe

声明

版权声明：本文思路摘抄自CSDN博主「四海一叶秋」的原创文章，遵循CC 4.0 BY-SA版权协议，转载请附上原文出处链接及本声明。本文对原文进行了解决方案上的完善。
原文链接：https://blog.csdn.net/hfhbutn/article/details/108742504

一、报错样例

上述内容报错一般为打开计算机服务、系统管理等需要用到mmc.exe的情况。

二、可能原因

1.出现这个提示你一定开启了UAC

这个很好解释，没有UAC电脑不会验证你程序是否合法以拦截你的信息。大部分解决方案是让你关掉UAC，然后让木马长驱直入。

2.因木马或硬盘坏道等原因mmc程序被篡改

出现这个提示原因是系统验证mmc.exe时发生了错误，错误原因之一就有可能是mmc真的被木马或者硬盘坏道改了。具体检查方法就是下载一个sigcheck.exe检查一下，方法就是把下载下来压缩包里的sigcheck.exe拷贝到C:\Windows\System32\sigcheck.exe这个位置下然后打开cmd输入：

sigcheck C:\Windows\System32\mmc.exe

检查一下是否是这个问题。正确的展示结果为：

3.因木马或过度优化导致mmc程序依赖的CryptSvc服务被关闭

因mmc打不开所以打开服务需要管理员运行powershell，然后输入services.msc以检查里面是否有Cryptographic Services服务。如果没有的话证明这个服务被木马删掉了！

4.因木马或硬盘坏道等原因mmc程序依赖的文件被篡改

如果上述问题检查都没有问题那就是这个问题了。

三、解决方案

1.如果你不在意你的系统安全可以直接关掉UAC。关掉方法采用该reg文件：

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=dword:00000000
"EnableLUA"=dword:00000000
"ConsentPromptBehaviorAdmin"=dword:00000000
"FilterAdministratorToken"=dword:00000001

版权声明：本Reg脚本复制自CSDN博主「四海一叶秋」的原创文章，遵循CC 4.0 BY-SA版权协议，转载请附上原文出处链接及本声明。
原文链接：https://blog.csdn.net/hfhbutn/article/details/108742504
当然嘛，后果就是你电脑运行软件你不知道了

2.根据检查制定策略

无论前述三种原因是哪种可能，都需要解决一下你系统文件被篡改的问题。解决方法也很简单，运行以下脚本：

dism /online /cleanup-image /restorehealth

执行结束后重启一下。只有执行了这个脚本之后你系统文件才能保证是完整正确的。但不一定完全解决了问题。
如果你mmc程序依赖的CryptSvc服务丢了那么此时报错依然是无法解决的。此时就需要从其它电脑上导入注册表来用于恢复CryptSvc服务了。恢复方法如下【只适用于windows10】：
找到和你电脑版本一致的的正常系统的[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CryptSvc]表项，导出为reg并复制到有问题的电脑上导入该reg即可。
如果你没有一致的系统那么我推荐你直接升级到Windows10的最新版本21H2（用微软的易升就行了）。如果你的系统是Windows10的21H2版本那么我这里提供一下21H2版本下系统的reg文件内容：

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CryptSvc]
"DependOnService"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00
"Description"="@%SystemRoot%\\system32\\cryptsvc.dll,-1002"
"DisplayName"="@%SystemRoot%\\system32\\cryptsvc.dll,-1001"
"ErrorControl"=dword:00000001
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\
  00,01,00,00,00,60,ea,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
  00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
  6b,00,20,00,4e,00,65,00,74,00,77,00,6f,00,72,00,6b,00,53,00,65,00,72,00,76,\
  00,69,00,63,00,65,00,20,00,2d,00,70,00,00,00
"ObjectName"="NT Authority\\NetworkService"
"RequiredPrivileges"=hex(7):53,00,65,00,43,00,68,00,61,00,6e,00,67,00,65,00,4e,\
  00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,\
  67,00,65,00,00,00,53,00,65,00,43,00,72,00,65,00,61,00,74,00,65,00,47,00,6c,\
  00,6f,00,62,00,61,00,6c,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,\
  65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65,00,72,00,73,00,6f,00,6e,00,61,\
  00,74,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,\
  00,00
"ServiceSidType"=dword:00000001
"Start"=dword:00000002
"Type"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CryptSvc\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  63,00,72,00,79,00,70,00,74,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,\
  00
"ServiceDllUnloadOnStop"=dword:00000001
"ServiceMain"="CryptServiceMain"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CryptSvc\Security]
"Security"=hex:01,00,04,80,d8,00,00,00,e4,00,00,00,00,00,00,00,14,00,00,00,02,\
  00,c4,00,07,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,05,12,00,\
  00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,\
  00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,14,00,\
  8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,18,00,fd,01,02,00,01,\
  02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,18,00,8d,00,02,00,01,02,\
  00,00,00,00,00,0f,02,00,00,00,01,00,00,00,00,00,38,00,8d,00,02,00,01,0a,00,\
  00,00,00,00,0f,03,00,00,00,00,04,00,00,85,43,ef,be,88,67,63,7e,4d,7a,39,ab,\
  de,fa,60,72,9f,f6,9f,a8,57,72,db,fe,9e,1c,a3,2d,96,ba,04,a4,01,01,00,00,00,\
  00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

保存为reg文件并运行导入后重启即可！其它系统没有尝试，不保证此reg文件可用！