从外平台迁移Windows到腾讯云的校时问题如何解决

最新版Process Explorer，版本v17.08，不适用2008R2，会报错"无法定位程序输入点 GetProcessInformation 于动态链接库KERNEL32.dll上"
上个版本，v17.06可以

得把阿里云、华为云的东西删干净才行，必须在winpe下才能删干净

尤其是PV驱动

以及一些注册表里的服务
AgentWatch
AliSecGuard
AliyunService
cloudmonitor

cloudResetPwdAgent
cloudResetPwdUpdateAgent
HwDiskMon

BALLOON
PVPanic
vioscsi
VirtioSerial

XenVbd
XenPCI
XenNet
QEMU Guest Agent VSS Provider

这些服务有些是隐藏的，在 services.msc 列表里看不到，涉及到以下目录

C:\Program Files (x86)\Alibaba\
C:\Program Files (x86)\Alibaba\cloudmonitor\wrapper\bin\UninstallApp-NT.bat
C:\Program Files\Alibaba\
C:\Program Files\AliyunService\
C:\ProgramData\aliyun\

C:\CloudResetPwdUpdateAgent\
C:\CloudResetPwdAgent\

C:\Windows\System32\drivers

具体可参考
https://cloud.tencent.com/developer/article/2477622
https://cloud.tencent.com/developer/article/2476224
https://cloud.tencent.com/developer/article/2464824

sc.exe stop AgentWatch
sc.exe stop AliSecGuard
sc.exe stop AliyunService
sc.exe stop cloudmonitor

sc.exe stop cloudResetPwdAgent
sc.exe stop cloudResetPwdUpdateAgent
sc.exe stop HwDiskMon

sc.exe stop BALLOON
sc.exe stop PVPanic
sc.exe stop vioscsi
sc.exe stop VirtioSerial

sc.exe stop XenVbd
sc.exe stop XenPCI
sc.exe stop XenNet
sc.exe stop "QEMU Guest Agent VSS Provider"

sc.exe delete AgentWatch
sc.exe delete AliSecGuard
sc.exe delete AliyunService
sc.exe delete cloudmonitor

sc.exe delete cloudResetPwdAgent
sc.exe delete cloudResetPwdUpdateAgent
sc.exe delete HwDiskMon

sc.exe delete BALLOON
sc.exe delete PVPanic
sc.exe delete vioscsi
sc.exe delete VirtioSerial

sc.exe delete XenVbd
sc.exe delete XenPCI
sc.exe delete XenNet
sc.exe delete "QEMU Guest Agent VSS Provider"

Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope CurrentUser -Force
$client1 = new-object System.Net.WebClient
$client1.DownloadFile('http://windows-1251783334.cos.ap-shanghai.myqcloud.com/Install_QCloudVirtIO_new.zip','C:\Users\Administrator\Desktop\Install_QCloudVirtIO_new.zip')

powershell执行上述代码下载压缩包到桌面
然后手动解压到，比如C:\Users\Administrator\Desktop\Install_QCloudVirtIO_new\
然后powershell执行
Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope CurrentUser -Force
cd C:\Users\Administrator\Desktop\Install_QCloudVirtIO_new\
#会先删除RedHat驱动然后安装腾讯云驱动
.\install_qcloud_virtio.ps1


#删除PV驱动
Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope CurrentUser -Force
$PVDrivers1 = pnputil.exe -e | Select-String -Pattern "PV Driver Developers" -Context 1, 0
$PVDrivers1
#$OEMNumbers = $PVDrivers1.Context.PreContext | Select-String -Pattern "oem\d+\.inf" -AllMatches | % { $_.Matches } | % { $_.Value }
$OEMNumbers = $PVDrivers1 | ForEach-Object { $_.Context.PreContext } | Select-String -Pattern "oem\d+\.inf" -AllMatches | ForEach-Object { $_.Matches } | ForEach-Object { $_.Value }
$OEMNumbers

if($OEMNumbers -eq $null)
{Write-Host "get null"}else{
foreach ($OEMNumber in $OEMNumbers) {
    Write-Host $OEMNumber
    Write-Host "Deleting $OEMNumber"
    pnputil.exe -f -d $OEMNumber
    Write-Host "`n`n"
}
}

然后手动重启机器

①执行命令挂载注册表（注意调整盘符）：
reg.exe load "HKLM\aaaaa" "E:\windows\system32\config\SYSTEM"

②运行regedit打开注册表，在HKEY_LOCAL_MACHINE\aaaaa\ControlSet001\Services下面找到如下服务路径，从各服务根路径上删掉

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AgentWatch
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AliSecGuard
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AliyunService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\cloudmonitor

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\cloudResetPwdAgent
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\cloudResetPwdUpdateAgent
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\HwDiskMon

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BALLOON
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PVPanic
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vioscsi
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VirtioSerial

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\XenVbd
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\XenPCI
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\XenNet
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\QEMU Guest Agent VSS Provider

③卸载注册表
reg.exe unload "HKLM\aaaaa"

④删除这些目录
C:\Program Files (x86)\Alibaba\
C:\Program Files\Alibaba\
C:\Program Files\AliyunService\
C:\ProgramData\aliyun\

⑤删除C:\Windows\System32\drivers\目录里的如下驱动
HwDiskMon.sys（华为）
pvpanic.sys（外平台引入的虚拟化驱动）
vioser.sys（外平台引入的虚拟化驱动）
balloon.sys（外平台引入的虚拟化驱动）
vioscsi.sys（外平台引入的虚拟化驱动）
xennet.sys（外平台引入的虚拟化驱动）
xenpci.sys（外平台引入的虚拟化驱动）
xenvbd.sys（外平台引入的虚拟化驱动）
BAPIDRV64.SYS（360）