安照《》这篇文章的方案思路进行排除解决。

解决办法

对于本次出现的错误，在查看正常系统服务注册表文件时发现少几个项值。并检查一些数值数据是否被篡改如下：
BEGIN 下为非正常系统的注册表项
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSSEARCH]
"Type"=dword:00000020
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"DisplayName"="Microsoft Search"
"ImagePath"=hex(2):22,00,43,3a,5c,50,72,6f,67,61,\
6d,20,46,69,6c,65,73,6d,\
00,6e,53,79,74,\
65,4d,63,68,42,2e,78,22,00
"Description"="基于结构化和半结构化数据的内容以及属性生成全文索引，以便可以对数据进行快速的单词搜索"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSSEARCH\Performance]
"PerfIniFile"="DssCntrs.ini"
"Last Counter"=dword:00001290
"Last Help"=dword:00001291
"First Counter"=dword:00001260
"First Help"=dword:00001261
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSSEARCH\Enum]
"0"="Root\\LEGACY_MSSEARCH\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
下为正常系统的注册表项
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSSEARCH]
"Type"=dword:00000020
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):22,00
"DisplayName"="Microsoft Search"
"DependOnService"=hex(7):52,4e,54,4c,\
4d,00
"DependOnGroup"=hex(7):00,00
"ObjectName"="LocalSystem"
"Description"="基于结构化和半结构化数据的内容以及属性生成全文索引，以便可以对数据进行快速的单词搜索"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSSEARCH\Performance]
"PerfIniFile"="DssCntrs.ini"
"Last Counter"=dword:00000ffe
"Last Help"=dword:00000fff
"First Counter"=dword:00000fce
"First Help"=dword:00000fcf
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSSEARCH\Security]
"Security"=hex:01,14,80,b8,c4,30,02,1c,01,ff,0f,88,06,fd,\
05,12,18,05,\
20,8d,04,0b,23,\
01,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSSEARCH\Enum]
"0"="Root\\LEGACY_MSSEARCH\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
END

尝试用正常系统的注册表项添加到非正常系统中去。（因为对比的两个系统版本、结构相同，所此次就直接通过导入导出注册表项进行批量修改）。