干掉AlibabaProtect的更加正确的方式
以上既不影响AlibabaProtect功能，又能让你觉得不爽的时候，任务管理器去掉，这并不会完全禁止AlibabaProtect，否则阿里系app，登录，拉取网页内容等功能会工作不正常。
此方法同时禁止AlibabaProtect自动开机启动。但阿里app在需要的时候会自动启动这个服务。此方法并不禁止这种行为。
写个.ps1文件（Powershell脚本执行文件），写入如下命令，以管理员身份执行（如果是工作计算机且域管理员禁止.ps1脚本执行，那么打开一个管理员身份的powershell，粘贴进去执行）
事儿干完后重启即可。
如果真的一点也不想要AliProtect，哪怕可被任务管理器也不行，那就在脚本最后再加两行
icacls "AlibabaProtect.exe" /C /deny ("Everyone"+":(RX,W)")
icacls "AlibabaProtect.exe" /C /setowner "NT Service\TrustedInstaller"
function Remove-RegistryValue($key, $value)
{
Remove-ItemProperty $key $value
}
function Set-RegistryValue($key, $name, $value, $type = "String")
{
if ((Test-Path $key) -eq $false)
{
md $key | Out-Null
}
Set-ItemProperty $key $name $value -type $type
}
Remove-Item -Path "HKLM:\SYSTEM\CurrentControlSet\Services\AliPaladin"
$person = [System.Security.Principal.NTAccount]"Everyone"
$access = [System.Security.AccessControl.RegistryRights]"SetValue"
$inheritance = [System.Security.AccessControl.InheritanceFlags]"None"
$propagation = [System.Security.AccessControl.PropagationFlags]"None"
$type = [System.Security.AccessControl.AccessControlType]"Deny"
$rule = New-Object System.Security.AccessControl.RegistryAccessRule( `
$person,$access,$inheritance,$propagation,$type)
$addr = "HKLM:\SYSTEM\CurrentControlSet\Services\AlibabaProtect"
Set-RegistryValue $addr "Start" 3 "Dword"
$acl = Get-Acl $addr
$acl.AddAccessRule($rule)
Set-Acl $addr $acl
icacls "$Env:WinDir\System32\drivers\AliPaladin.sys" /C /setowner "Administrators"
icacls "$Env:WinDir\System32\drivers\AliPaladin.sys" /C /grant ("Administrators" + ":(F)")
icacls "$Env:WinDir\System32\drivers\AliPaladin.sys" /C /deny ("Everyone" + ":(RX,W)")
icacls "$Env:WinDir\System32\drivers\AliPaladin.sys" /C /setowner "NT Service\TrustedInstaller"
cd "${Env:ProgramFiles(x86)}\AlibabaProtect"
$contents = Get-ChildItem -Directory | Select-Object -Last 1
cd $contents
icacls "AliPaladin.sys" /C /setowner "Administrators"
icacls "AliPaladin.sys" /C /grant ("Administrators" + ":(F)")
icacls "AliPaladin.sys" /C /deny ("Everyone" + ":(RX,W)")
icacls "AliPaladin.sys" /C /setowner "NT Service\TrustedInstaller"
icacls "AliPaladin_win7.sys" /C /setowner "Administrators"
icacls "AliPaladin_win7.sys" /C /grant ("Administrators" + ":(F)")
icacls "AliPaladin_win7.sys" /C /deny ("Everyone" + ":(RX,W)")
icacls "AliPaladin_win7.sys" /C /setowner "NT Service\TrustedInstaller"
icacls "AliPaladin_win10.sys" /C /setowner "Administrators"
icacls "AliPaladin_win10.sys" /C /grant ("Administrators" + ":(F)")
icacls "AliPaladin_win10.sys" /C /deny ("Everyone" + ":(RX,W)")
icacls "AliPaladin_win10.sys" /C /setowner "NT Service\TrustedInstaller"
icacls "AliPaladin64.sys" /C /setowner "Administrators"
icacls "AliPaladin64.sys" /C /grant ("Administrators" + ":(F)")
icacls "AliPaladin64.sys" /C /deny ("Everyone" + ":(RX,W)")
icacls "AliPaladin64.sys" /C /setowner "NT Service\TrustedInstaller"
icacls "AliPaladin64_win7.sys" /C /setowner "Administrators"
icacls "AliPaladin64_win7.sys" /C /grant ("Administrators" + ":(F)")
icacls "AliPaladin64_win7.sys" /C /deny ("Everyone" + ":(RX,W)")
icacls "AliPaladin64_win7.sys" /C /setowner "NT Service\TrustedInstaller"
icacls "AliPaladin64_win10.sys" /C /setowner "Administrators"
icacls "AliPaladin64_win10.sys" /C /grant ("Administrators" + ":(F)")
icacls "AliPaladin64_win10.sys" /C /deny ("Everyone" + ":(RX,W)")
icacls "AliPaladin64_win10.sys" /C /setowner "NT Service\TrustedInstaller"
