Wininet.dll反复导致explorer.exe和dllhost.exe崩溃的排查与修复求助

各位好，我遇到了一个棘手的问题，想请大家帮忙分析解决：

我用SUSE的Harvester（底层基于KVM）运行虚拟机，其中一台装的是Windows 10 Pro 22H2版本。今天我从VM快照恢复这台机器后，出现了一系列异常状况：

遇到的具体症状 #

• explorer.exe持续崩溃，就连任务管理器偶尔也会跟着崩溃
• 我通过任务管理器勉强完成了这些操作：
  • 杀掉explorer.exe进程，避免它反复尝试重启（每次重启都失败）
  • 成功打开Windows终端
  • 如果指定具体文件夹启动explorer.exe，文件资源管理器窗口能正常打开且不崩溃；但直接启动的话还是会崩
  • 通过文件管理器右键点击「网络」，能打开老版Windows 7风格的控制面板
  • 能打开事件查看器
• 无法完成的操作：
  • 右键点击「此电脑」或者通过终端命令启动Windows 10设置界面，都打不开
• 机器会在一段时间后自动关机，我猜测可能和explorer.exe长时间关闭有关，但不确定具体原因

事件查看器的关键发现 #

从事件查看器里我看到，所有崩溃的程序都和wininet.dll有关——不管是explorer.exe还是频繁崩溃的dllhost.exe，崩溃日志里都指向这个DLL文件。但我不清楚到底是什么原因导致wininet.dll出问题，也不知道该怎么修复。

虚拟机配置信息 #

apiVersion: kubevirt.io/v1
kind: VirtualMachine
metadata:
  annotations:
    field.cattle.io/description: '<vm description>'
    harvesterhci.io/reservedMemory: 256Mi
    harvesterhci.io/vmRunStrategy: RerunOnFailure
    kubevirt.io/latest-observed-api-version: v1
    kubevirt.io/storage-observed-api-version: v1alpha3
    network.harvesterhci.io/ips: '[]'
    restore.harvesterhci.io/last-restore-uid: restore-windows-10-clean-install-8q88l-522856a9-fba0-40aa-ab66-b328830cc14f
    restore.harvesterhci.io/name: restore-windows-10-clean-install-8q88l
  creationTimestamp: "2023-01-03T23:11:55Z"
  finalizers:
  - wrangler.cattle.io/VMController.UnsetOwnerOfPVCs
  generation: 6
  labels:
    harvesterhci.io/creator: harvester
    harvesterhci.io/os: windows
  managedFields:
  - apiVersion: kubevirt.io/v1alpha3
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          f:kubevirt.io/latest-observed-api-version: {}
          f:kubevirt.io/storage-observed-api-version: {}
    manager: Go-http-client
    operation: Update
    time: "2023-01-07T15:25:12Z"
  - apiVersion: kubevirt.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:field.cattle.io/description: {}
          f:harvesterhci.io/reservedMemory: {}
          f:harvesterhci.io/vmRunStrategy: {}
          f:network.harvesterhci.io/ips: {}
          f:restore.harvesterhci.io/last-restore-uid: {}
          f:restore.harvesterhci.io/name: {}
        f:finalizers:
          .: {}
          v:"wrangler.cattle.io/VMController.UnsetOwnerOfPVCs": {}
        f:labels:
          .: {}
          f:harvesterhci.io/creator: {}
          f:harvesterhci.io/os: {}
      f:spec:
        .: {}
        f:runStrategy: {}
        f:template:
          .: {}
          f:metadata:
            .: {}
            f:annotations:
              .: {}
              f:harvesterhci.io/sshNames: {}
            f:creationTimestamp: {}
            f:labels:
              .: {}
              f:harvesterhci.io/vmName: {}
          f:spec:
            .: {}
            f:accessCredentials: {}
            f:affinity:
              f:nodeAffinity:
                f:preferredDuringSchedulingIgnoredDuringExecution: {}
            f:domain:
              .: {}
              f:cpu:
                .: {}
                f:cores: {}
              f:devices:
                .: {}
                f:disks: {}
                f:hostDevices: {}
                f:inputs: {}
                f:interfaces: {}
              f:features:
                .: {}
                f:acpi:
                  .: {}
                  f:enabled: {}
              f:machine: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
            f:evictionStrategy: {}
            f:hostname: {}
            f:networks: {}
            f:nodeSelector:
              .: {}
              f:kubernetes.io/hostname: {}
            f:volumes: {}
    manager: harvester
    operation: Update
    time: "2023-01-07T15:30:15Z"
  - apiVersion: kubevirt.io/v1alpha3
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        .: {}
        f:conditions: {}
        f:created: {}
        f:printableStatus: {}
        f:ready: {}
        f:volumeSnapshotStatuses: {}
    manager: Go-http-client
    operation: Update
    subresource: status
    time: "2023-01-07T15:51:40Z"
  name: <vm name>
  namespace: default
  resourceVersion: "9944363"
  uid: 8f4632c7-08b2-4045-a180-9e42a7188c75
spec:
  runStrategy: RerunOnFailure
  template:
    metadata:
      annotations:
        harvesterhci.io/sshNames: '[]'
      creationTimestamp: null
      labels:
        harvesterhci.io/vmName: <vm name>
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: network.harvesterhci.io/mgmt
                operator: In
                values:
                - "true"
      domain:
        cpu:
          cores: 4
        devices:
          disks:
          - bootOrder: 1
            cdrom:
              bus: sata
            name: cdrom-disk
          - bootOrder: 2
            disk:
              bus: sata
            name: rootdisk
          inputs:
          - bus: usb
            name: tablet
            type: tablet
          interfaces:
          - bridge: {}
            macAddress: <inet mac address>
            model: e1000
            name: default
        features:
          acpi:
            enabled: true
        machine:
          type: q35
        memory:
          guest: 16128Mi
        resources:
          limits:
            cpu: "4"
            memory: 16Gi
          requests:
            cpu: 250m
            memory: 10922Mi
      evictionStrategy: LiveMigrate
      hostname: <vm name>
      networks:
      - multus:
          networkName: default/lan
        name: default
      nodeSelector:
        kubernetes.io/hostname: <host name>
      volumes:
      - name: cdrom-disk
        persistentVolumeClaim:
          claimName: restore-windows-10-clean-install-522856a9-fba0-40aa-ab66-b328830cc14f-cdrom-disk
      - name: rootdisk
        persistentVolumeClaim:
          claimName: restore-windows-10-clean-install-522856a9-fba0-40aa-ab66-b328830cc14f-rootdisk

事件查看器错误截图：
事件查看器错误详情截图

备注：内容来源于stack exchange，提问作者coolcat007