第三方服务的ErrorControl注册表为3可能导致系统循环重启，例如wps引入的ldpkit

原创

Windows技术交流

修改于 2024-03-19 17:41:46

1.9K0

修改于 2024-03-19 17:41:46

文章被收录于专栏：Windows技术交流Windows技术交流

感兴趣的可以试一下WPS引入的这个注册表ldpkit，导致机器循环重启

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ldpkit]

"Description"="LDP Service for kingsoft wps ."

"RequiredPrivileges"=hex(7):53,00,65,00,54,00,63,00,62,00,50,00,72,00,69,00,76,\

00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,44,00,65,00,62,00,75,00,\

67,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,\

00,53,00,68,00,75,00,74,00,64,00,6f,00,77,00,6e,00,50,00,72,00,69,00,76,00,\

69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,43,00,72,00,65,00,61,00,74,\

00,65,00,47,00,6c,00,6f,00,62,00,61,00,6c,00,50,00,72,00,69,00,76,00,69,00,\

6c,00,65,00,67,00,65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65,00,72,00,73,\

00,6f,00,6e,00,61,00,74,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,\

67,00,65,00,00,00,00,00

"Type"=dword:00000010

"Start"=dword:00000002

"ErrorControl"=dword:00000003

"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\

74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\

00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\

6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00

"DisplayName"="ldpkit"

"ObjectName"="LocalSystem"

"RebootMessage"="cirtical system service were terminated!"

"FailureActions"=hex:01,00,00,00,01,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\

00,01,00,00,00,60,ea,00,00,01,00,00,00,e0,93,04,00,01,00,00,00,c0,27,09,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ldpkit\Security]

"Security"=hex:01,00,14,80,50,00,00,00,5c,00,00,00,14,00,00,00,30,00,00,00,02,\

00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\

00,00,02,00,20,00,01,00,00,00,00,03,18,00,00,00,0c,00,01,02,00,00,00,00,00,\

05,20,00,00,00,20,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,\

00,00,00,05,12,00,00,00

解决办法就是把"ErrorControl"=dword:00000003

改成

"ErrorControl"=dword:00000000

或

"ErrorControl"=dword:00000001

关于ErrorControl的资料：

https://www.php.net/manual/zh/win32service.constants.errorcontrol.php

https://www.itprotoday.com/compute-engines/what-are-errorcontrol-start-and-type-values-under-services-subkeys

What are the ErrorControl, Start and Type values under the Services subkeys?

Each of the main 3 values and their contents are described below.

ErrorControl

This is used if the service fails to startup upon boot.

Value	Meaning
0x00	If this driver can't be loaded or started ignore the problem and display no error
0x01	If the driver fails produce a warning but let bootup continue
0x02	Panic. If the current config is last known good continue, if not switch to last known good
0x03	Record the current startup as a failure. If this is last known good run diagnostic, if not switch to last known good and reboot

Start

This defines when in the boot sequence the service should be started. You can also set these by using the Services control panel applet.

Value	Start Type	Meaning
0x00	Boot	The kernel loaded will load this driver first as its needed to use the boot volume device
0x01	System	This is loaded by the I/O subsystem
0x02	Autoload	The service is always loaded and run
0x03	Manual	This service does not start automatically and must be manually started by the user
0x04	Disabled	The service is disabled and should not be started

Type

This defines the kind of service or driver. They are loaded in the following order down the list.

Value	Meaning
0x01	Kernel-mode device driver
0x02	Kernel-mode device driver that implements the file system
0x04	Information used by the Network Adapter
0x10	A Win32 service that should be run as a stand-alone process
0x20	A Win32 service that can share address space with other services of the same type

http://systemmanager.ru/win2k_regestry.en/46711.htm

ErrorControl

HKLM\SYSTEM\CurrentControlSet\Services\<service-name>

Data type	Range	Default value
REG_DWORD	0 - 3	Usually 0 or 1

Description

Specifies how to proceed if the driver for the service or device fails to load or to initialize properly. By default, the value of ErrorControl for all Windows 2000 services and drivers is 0 or 1.

Value	Meaning
0	Ignore: If the driver fails to load or initialize, startup proceeds with no warning messages.
1	Normal: If the driver fails to load or initialize, startup proceeds, but a warning message appears.
2	Severe: If the driver fails to load or initialize, the system declares the startup to have failed and restarts by using the LastKnownGood control set. If startup is already using the LastKnownGood control set, it continues.
3	Critical: If the driver fails to load or initialize, the system declares the startup to have failed and restarts by using the LastKnownGood control set. If startup is already using the LastKnownGood control set, the system stops the startup procedures and runs a debugging program.