Bluescreen using vpn 100% reproducible

Question

Hello.

Yesterday i got alot of bluescreens, and i eventually traced it back to my VPN connection. When connected to a VPN, i bluescreen any time i try to ping or access anything on that network. Both through wifi and LAN. Bluescreens within seconds every time, 100%reproducible.'
Problem first occurred yesterday after a reboot.

Info:

• Open vpn GUI
• Lenovo T590
• Intel(R) Core(TM) i7-8665U
• Windows 10 enterprise version 21H2
• Mini dump files Onedrive link

What I've tried as of writing:

• Update windows
• Update drivers
• Reinstall VPN

Answer 1

For updating Intel drivers you can use either the Lenovo website drivers or the drivers from the Intel driver and support assistant.

Drivers can be saved to the desktop.

The internet can be disconnected by removing Etheret (Cat5e, etc.), and Wifi (hardware off if available).

https://www.intel.com/content/www/us/en/download/18002/intel-driver-support-assistant.html
https://www.intel.com/content/www/us/en/support/detect.html

Any software that had drivers that was involved in the crash(es) can either be uninstalled or uninstalled and reinstalled.

During the troubleshooting it's best to uninstall so that you can achieve an end point quickly where there are no BSOD or unexpected shutdowns and restarts.

Then reinstall software and monitor for recurrent BSOD and unexpected shutdowns and restarts.

This can reduce the total troubleshooting time.

There were multiple entries in the event logs reporting bacstac corruption.
This was not related to the BSOD and was just a finding.

Make sure that the software related to TAP-Windows Adapter V9 / tap0901.sys is completely uninstalled.
It can be reinstalled whenever you need to use it but the longer the time between reinstallation the more time to confirm computer stability / instability.

Please use reliability monitor to get a better view of what is happening:

https://www.howtogeek.com/166911/reliability-monitor-is-the-best-windows-troubleshooting-tool-you-arent-using/

.
.
.
.
.

Please remember to vote and to mark the replies as answers if they help.

On the bottom of each post there is:

Propose as answer = answered the question

On the left side of each post there is /\ with a number: click = a helpful post
.
.
.
.
.

Answer 2

Please run the V2 log collector and post a share link into this thread using one drive, drop box, or google drive.

https://www.tenforums.com/bsod-crashes-debugging/2198-bsod-posting-instructions.html

https://www.elevenforum.com/t/bsod-posting-instructions.103/

.
.
.
.
.

Please remember to vote and to mark the replies as answers if they help.

On the bottom of each post there is:

Propose as answer = answered the question

On the left side of each post there is /\ with a number: click = a helpful post
.
.
.
.
.

Answer 3

Please perform the following steps:

1) Uninstall Fortinet software using the applicable uninstall tool.

https://docs.fortinet.com/document/forticlient/7.0.0/administration-guide/7962/uninstalling-forticlient#:~:text=Go%20to%20Settings%2C%20then%20unlock,Windows%20Add%2FRemove%20Programs%20application.

https://www.fortinet.com/products/endpoint-security/forticlient

https://support.fortinet.com/welcome/#/

2) Make sure that Microsoft Defender is on

3) Run the V2 log collector > post a new share link into the newest post

4) Reinstall any of these drivers if available on the Lenovo website:

e1d68x64
netwtw08
sntie.sys
tap0901.sys

5) If there are no BSOD or unexpected shutdowns or restarts for the next two days then you can reinstall Fortinet software

fortifilter FortiClient NDIS 6.3 Packet Filter Service c:\windows\system32\drivers\fortifilter.sys

e1dexpress Intel(R) PRO/1000 PCI Express Network Connection Driver D c:\windows\system32\driverstore\filerepository\e1d68x64.inf_amd64_128a45a0c539b1b7\e1d68x64.sys

netwtw08 ___ Intel(R) Wireless kortdriver for Windows 10 64-bit c:\windows\system32\drivers\netwtw08.sys

sntie SIMATIC Industrial Ethernet (ISO) c:\windows\system32\drivers\sntie.sys

tap0901 TAP-Windows Adapter V9 c:\windows\system32\drivers\tap0901.sys

.
.
.
.
.

Please remember to vote and to mark the replies as answers if they help.

On the bottom of each post there is:

Propose as answer = answered the question

On the left side of each post there is /\ with a number: click = a helpful post
.
.
.
.
.

Answer 4

These were the misbehaving drivers in the latest BSOD with bugcheck 1E:

tap0901.sys
e1d68x64.sys
sntie.sys

1) If possible uninstall any of these software / drivers and only reinstall what you cannot wait to use.

a) OpenVPN 2.5.6-I601 amd64 2.5.029 OpenVPN, Inc. 20220505

TAP-Win32 Adapter V9 or
OpenVPN driver or COMODO
https://openvpn.net/community-downloads/
http://forums.comodo.com/index.php?action=dlattach

b) Intel(R) Ethernet Connection (6) I219-LM
e1d68x64.sys

c) SIMATIC Industrial Ethernet (ISO)
sntie.sys

2) Uninstall and reinstall as needed the software related to BACstac

Name [00000017] TAP-Windows Adapter V9
Adapter Type Ethernet 802.3
Product Type TAP-Windows Adapter V9
Installed Yes
PNP Device ID ROOT\NET\0001
Last Reset 05/05/2022 09:53
Index 17
Service Name tap0901
Driver C:\WINDOWS\SYSTEM32\DRIVERS\TAP0901.SYS (9.24.6.601, 38.98 KB (39,920 bytes), 05/05/2022 09:26)

Name [00000013] Intel(R) Ethernet Connection (6) I219-LM
Adapter Type Ethernet 802.3
Product Type Intel(R) Ethernet Connection (6) I219-LM
Installed Yes
PNP Device ID PCI\VEN_8086&DEV_15BD&SUBSYS_227917AA&REV_30\3&11583659&1&FE
Last Reset 05/05/2022 09:53
Index 13
Service Name e1dexpress
Driver C:\WINDOWS\SYSTEM32\DRIVERSTORE\FILEREPOSITORY\E1D68X64.INF_AMD64_128A45A0C539B1B7\E1D68X64.SYS (12.18.9.17, 604.60 KB (619,112 bytes), 27/07/2020 06:22)

e1dexpress Intel(R) PRO/1000 PCI Express Network Connection Driver D c:\windows\system32\driverstore\filerepository\e1d68x64.inf_amd64_128a45a0c539b1b7\e1d68x64.sys

sntie SIMATIC Industrial Ethernet (ISO) c:\windows\system32\drivers\sntie.sys

tap0901 TAP-Windows Adapter V9 c:\windows\system32\drivers\tap0901.sys

Event[46759]:
Log Name: System
Source: Service Control Manager
Date: 2022-05-05T09:53:36.4500000Z
Event ID: 7023
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: SE2020LT07.sinus.local
Description:
The BACstac service terminated with the following error:
The configuration data for this product is corrupt. Contact your support personnel.

.
.
.
.
.

Please remember to vote and to mark the replies as answers if they help.

On the bottom of each post there is:

Propose as answer = answered the question

On the left side of each post there is /\ with a number: click = a helpful post
.
.
.
.
.

Answer 5

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--