瑞星卡卡安全论坛

Minidump文件分析后如下：
BugCheck 100000D1, {0, 2, 8, 0}

Probably caused by : SKNFW.sys ( SKNFW+3e2d )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                            *
*                        Bugcheck Analysis                                    *
*                                                                            *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000008, value 0 = read operation, 1 = write operation
Arg4: 00000000, address which referenced memory

Debugging Details:
------------------
READ_ADDRESS:  00000000
CURRENT_IRQL:  2
FAULTING_IP:
+23
00000000 ??              ???
PROCESS_NAME:  svchost.exe
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  DRIVER_FAULT
BUGCHECK_STR:  0xD1
LAST_CONTROL_TRANSFER:  from baa0be2d to 00000000
FAILED_INSTRUCTION_ADDRESS:
+23
00000000 ??              ???

STACK_TEXT: 
WARNING: Frame IP not in any known module. Following frames may be wrong.
baccf9e4 baa0be2d 00000000 00000016 baccfae8 0x0
baccfa68 a993d86c 88f0e008 00000016 baccfae8 SKNFW+0x3e2d
baccfb04 a9947d35 88f1bbe8 1ae078ca 00003500 tcpip!UDPDeliver+0x1be
baccfb5c a993cef5 890e2688 ecc56491 1ae078ca tcpip!UDPRcv+0x164
baccfbbc a993cb19 00000020 890e2688 a993d592 tcpip!DeliverToUser+0x18e
baccfc38 a993c836 a997c8f0 890e2688 8959b016 tcpip!DeliverToUserEx+0x95e
baccfcf0 a996adcc 890e2688 8959b02a 000000e3 tcpip!IPRcvPacket+0x6cb
baccfd24 baa1d24b 890e2688 8959b016 000000f7 tcpip!IPRcv+0x27
baccfd5c baa1d2ff 0cabb1e5 8959b008 8959b008 wanarp!WanReceiveCommon+0x17d
baccfd88 8a1dd45e 0cabb1e5 8959b008 8959b008 wanarp!WanNdisReceive+0x23
00000000 00000000 00000000 00000000 00000000 0x8a1dd45e


STACK_COMMAND:  kb
FOLLOWUP_IP:
SKNFW+3e2d
baa0be2d ??              ???

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  SKNFW+3e2d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: SKNFW

IMAGE_NAME:  SKNFW.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  43e9b70f

FAILURE_BUCKET_ID:  0xD1_CODE_AV_NULL_IP_SKNFW+3e2d

BUCKET_ID:  0xD1_CODE_AV_NULL_IP_SKNFW+3e2d

Followup: MachineOwner


================================
注：上网环境：公司内部无线VPN
系统是干净的XP Sp3，没有换过网卡这类的问题，devmgmt.msc里面貌似也没什么异常的虚拟网络设备存在

看最后几行stack，莫非内网其他电脑有Arp???

用户系统信息：Mozilla/5.0 (Windows; U; Windows NT 5.1; ja; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

天网倒闭了，官网都已经打不开了，很久没更新了