tap0901.sys causes BSOD (PAGE FAULT IN NONPAGED AREA)

[anders-reimer]

Hey there.

This is my first time posting in here. I'm getting kind of desperate here because neither Microsoft, my retailer, PIA, Acer or any one can seem to figure out a solution to my problem.

My issue: my Acer laptop (Travelmate X349-G2-M) keeps BSOD'ing. Usually the stop code is PAGE FAULT IN NONPAGED AREA.

When using driver verifier it states that tap0901.sys is the culprit. The tap0901.sys is obiously an integral part of my Private Internet Access VPN-program, so I can't just remove it from the PC.
When I'm not using driver verifier WhoCrashed reports the Windows 10 kernel as the culprit, which I know realistically can't cause the PC to BSOD and that it must be caused by another driver.

The problem usually appears when the PC has been put to sleep and wakes up again. When using the verifier it shuts down at the exact moment PIA is about to say "you are connected". The TAP-driver is updated to the latest version on the OpenVPN-website.

All drivers are updated to the latest version. Chkdsk has been performed several times. Scannow reports no issues. DISM has been run several times. Memtest 86+ shows no errors in RAM after 13 passes. Avira reports no vira or malware. Windows Defender is completely turned off so no interference with that from Avira. Intel SSD Toolbox reports no SSD errors. Windows 10 has been reinstalled twice.

Can anybody see what I'm missing? I hope to hear from some experts or someone that has encountered the same issue maybe.

Earlier I had a Lenovo u330p with Windows 10 and PIA installed and never ever encountered any issues with that. I just can't see what I'm doing wrong.

 

[Colif]

Its possible its another driver causing the errors? I know its blaming tap driver but it might be caused by another process.

Can you follow option one here
and then do this step below: Small memory dumps - Have Windows Create a Small Memory Dump (Minidump) on BSOD

that creates a file in c windows/minidump
copy the file(s) to documents
upload the copy from documents to a cloud server and share the link here and I will ask someone with right software to read them we will see what we can find

I have seen something about tap driver recently but cannot remember exact details

Is the PIA driver digitally signed to work with Win 10?

 

[anders-reimer]

Its possible its another driver causing the errors? I know its blaming tap driver but it might be caused by another process.

Can you follow option one here
and then do this step below: Small memory dumps - Have Windows Create a Small Memory Dump (Minidump) on BSOD

that creates a file in c windows/minidump
copy the file(s) to documents
upload the copy from documents to a cloud server and share the link here and I will ask someone with right software to read them we will see what we can find

I have seen something about tap driver recently but cannot remember exact details

Is the PIA driver digitally signed to work with Win 10?

Hello Colif

Thank you for taking the time. Here's a link to the minidumps https://1drv.ms/f/s!AkIbp7jSkispvBQf228dJYfsCpnJ - I hope this works.

The TAP-driver doesn't have the "Microsoft Hardware Compatibility" sign on it when found in Device Manager. But it didn't have it either before I updated the driver.

 

[gardenman]

Hi, I ran the dump files through the debugger and got the following information: https://pste.eu/p/WkkJ.html

File: 120117-14578-01.dmp (Dec 1 2017 - 13:40:40)
BugCheck: [DRIVER_VERIFIER_DETECTED_VIOLATION (C4)]
*** WARNING: Unable to verify timestamp for tap0901.sys
Probably caused by: tap0901.sys (Process: openvpn.exe)
Uptime: 0 Day(s), 0 Hour(s), 33 Min(s), and 39 Sec(s)

File: 120117-13890-01.dmp (Dec 1 2017 - 06:26:37)
BugCheck: [DRIVER_VERIFIER_DETECTED_VIOLATION (C4)]
*** WARNING: Unable to verify timestamp for tap0901.sys
Probably caused by: tap0901.sys (Process: openvpn.exe)
Uptime: 0 Day(s), 0 Hour(s), 01 Min(s), and 23 Sec(s)

File: 113017-4046-01.dmp (Nov 30 2017 - 05:11:05)
BugCheck: [PAGE_FAULT_IN_NONPAGED_AREA (50)]
Probably caused by: memory_corruption (Process: System)
Uptime: 0 Day(s), 2 Hour(s), 57 Min(s), and 10 Sec(s)

I can't help you with this. Wait for someone else to reply. Good luck.

 

[anders-reimer]

Hi, I ran the dump files through the debugger and got the following information: https://pste.eu/p/WkkJ.html

File: 120117-14578-01.dmp (Dec 1 2017 - 13:40:40)
BugCheck: [DRIVER_VERIFIER_DETECTED_VIOLATION (C4)]
*** WARNING: Unable to verify timestamp for tap0901.sys
Probably caused by: tap0901.sys (Process: openvpn.exe)
Uptime: 0 Day(s), 0 Hour(s), 33 Min(s), and 39 Sec(s)

File: 120117-13890-01.dmp (Dec 1 2017 - 06:26:37)
BugCheck: [DRIVER_VERIFIER_DETECTED_VIOLATION (C4)]
*** WARNING: Unable to verify timestamp for tap0901.sys
Probably caused by: tap0901.sys (Process: openvpn.exe)
Uptime: 0 Day(s), 0 Hour(s), 01 Min(s), and 23 Sec(s)

File: 113017-4046-01.dmp (Nov 30 2017 - 05:11:05)
BugCheck: [PAGE_FAULT_IN_NONPAGED_AREA (50)]
Probably caused by: memory_corruption (Process: System)
Uptime: 0 Day(s), 2 Hour(s), 57 Min(s), and 10 Sec(s)

I can't help you with this. Wait for someone else to reply. Good luck.

Hello.

Thank you so much for taking the time to debug it. Hopefully someone will see and recognize some of it.

 

[Colif]

Win 10 released in July 2015, any drivers older than that might be the cause

Old drivers:
hswultpep.sys (Dated Jan 30 2013) - Intel Power Engine Plug-in - http://www.herdprotect.com/hswultpep.sys-e0d76f0516cb9dd5cea4709bbb333a43130bb019.aspx
aPs2Kb2Hid.sys (Dated Aug 05 2013) - Dritek System Inc. PS/2 KB to HID Device Driver

Have you tried updating Avira? Perhaps remove it until we figure out the problem as it might be causing the problem. I found references to security programs not allowing tap to install, so maybe.

tap0901.sys isn't that old, its from Apr 21 2016 but clearly driver verifer doesn't like it

 

[Paul NZ]

It maybe crashing on openvpn. And verifier is still running. Disable it

 

[anders-reimer]

Win 10 released in July 2015, any drivers older than that might be the cause

Old drivers:
hswultpep.sys (Dated Jan 30 2013) - Intel Power Engine Plug-in - http://www.herdprotect.com/hswultpep.sys-e0d76f0516cb9dd5cea4709bbb333a43130bb019.aspx
aPs2Kb2Hid.sys (Dated Aug 05 2013) - Dritek System Inc. PS/2 KB to HID Device Driver

Have you tried updating Avira? Perhaps remove it until we figure out the problem as it might be causing the problem. I found references to security programs not allowing tap to install, so maybe.

tap0901.sys isn't that old, its from Apr 21 2016 but clearly driver verifer doesn't like it

I can't seem to find any trustworthy place to download updates for these drivers. I guess I can't just delete them from the system?

Avira is updated and only just installed. I have been using Windows Defender up until now.

 

[anders-reimer]

It maybe crashing on openvpn. And verifier is still running. Disable it

Yes, it IS crashing on OpenVPN, when verifier is running, and not always when verifier is disabled. I can't uninstall OpenVPN as it is necessary for my VPN software to run. The PC usually crashes after being put to sleep and then waking up and trying to connect the VPN software.

 

[Colif]

I wonder what Dritek System Inc. PS/2 KB to HID is part of, I can't see any keyboard drivers mentioned on the Acer website.

Do you have a program called Acer launch manager?

The Launch Manager software is basically a keyboard driver, but for enhanced keyboard functions -- the play, pause, stop, volume and Windows function keys on laptop computers. The software launches when the computer loads Windows and allows you to customize action keys on your keyboard.

https://www.techwalla.com/articles/what-is-dritek-launch-manager

Strange part is its not mentioned on the Acer website.
Intel Power Engine ... is hard to nail down, I think its part of ME (Management Engine)Driver, latest version on Acer web site is from 2016/12/02

Acer website: https://www.acer.com/ac/en/ID/content/support-product/7023;-;

@ Paul: OP mentioned we already knew that was crashing, the question he has is why is it crashing.

 

[anders-reimer]

I wonder what Dritek System Inc. PS/2 KB to HID is part of, I can't see any keyboard drivers mentioned on the Acer website.

Do you have a program called Acer launch manager?

The Launch Manager software is basically a keyboard driver, but for enhanced keyboard functions -- the play, pause, stop, volume and Windows function keys on laptop computers. The software launches when the computer loads Windows and allows you to customize action keys on your keyboard.

https://www.techwalla.com/articles/what-is-dritek-launch-manager

Strange part is its not mentioned on the Acer website.
Intel Power Engine ... is hard to nail down, I think its part of ME (Management Engine)Driver, latest version on Acer web site is from 2016/12/02

Acer website: https://www.acer.com/ac/en/ID/content/support-product/7023;-;

@ Paul: OP mentioned we already knew that was crashing, the question he has is why is it crashing.

Thank you so much for your time.

I haven't got Acer Launch Manager. I believe that was one of the first things I removed from the PC when I bought it. And it hasn't shown up when reinstalling Windows 10, so it shouldn't be here or at least I can't find it. There is a Quick Access Application on the product page of my PC on Acer's website - I guess there is no harm in trying to download that and see if that is what should be called Acer Launch Manger. I can always uninstall it again.

That Dritek driver is a mystery to me. When googling it it appears that it only causes issues for the users. And my PC is a laptop, and it looks to my untrained eyes that this is a driver for an external keyboard, but I could easily be wrong.

As an interim solution to my TAP-driver problem, I have removed the PIA application, and gone with an L2TP/IPsec configuration on my PC, as this doesn't use a TAP-driver I believe. But as I know, L2TP/IPsec is not as secure as the OpenVPN solution, I really hope that PIA can help me figure this one out.

 

[Colif]

Gardenman knows more about VPN than I do (that is not hard)

I saw the quick access thing too. Acer launch manager seems to be old software too, as article mentions XP which is ancient.

It seems that no more Launch Manager downloads available for latest Acer notebook which pre-installed with Windows 10. Some of you might asking why we need to install it, What actually Launch Manager do?. The main function of Acer Dritek Launch Manager is to display particular function on your Screen/LCD whenever you pressed certain key or hotkey on your keyboard. A simple example and a very good reason to use Launch Manager is when you press the CAPS LOCK key, it will display an icon on your LED/LCD screen showing CAPS LOCK is ON or OFF.

http://laptop-driver.blogspot.com.au/2016/02/acer-launch-manager-for-windows-10_10.html

it doesn't come on win 10 PC at all, and yet here it is?

whether you remove or not is up to you as if only BSOD you were getting were caused by the tap0901.sys file, I would just ignore it: http://www.shouldiremoveit.com/Launch-Manager-10648-program.aspx

 

[anders-reimer]

Gardenman knows more about VPN than I do (that is not hard)

I saw the quick access thing too. Acer launch manager seems to be old software too, as article mentions XP which is ancient.

It seems that no more Launch Manager downloads available for latest Acer notebook which pre-installed with Windows 10. Some of you might asking why we need to install it, What actually Launch Manager do?. The main function of Acer Dritek Launch Manager is to display particular function on your Screen/LCD whenever you pressed certain key or hotkey on your keyboard. A simple example and a very good reason to use Launch Manager is when you press the CAPS LOCK key, it will display an icon on your LED/LCD screen showing CAPS LOCK is ON or OFF.

http://laptop-driver.blogspot.com.au/2016/02/acer-launch-manager-for-windows-10_10.html

it doesn't come on win 10 PC at all, and yet here it is?

whether you remove or not is up to you as if only BSOD you were getting were caused by the tap0901.sys file, I would just ignore it: http://www.shouldiremoveit.com/Launch-Manager-10648-program.aspx

Funny thing is that it seems like the Quick Access does what the Launch Manager would do too. I uninstalled it again. It didn't do much but bring an app that would dim the blue lights in the screen and show on-screen when Caps Lock is used.

But to recap in terms of the VPN issue, if someone should ever stumble upon this thread looking for a solution - it doesn't look like there is one, at least not one where you get to use the PIA application and thereby the TAP-driiver from OpenVPN. Instead you can opt for the little less secure L2TP/IPsec solution using the built-in VPN tool that Windows 10 has to offer.
I guess that the ordinary user would be perfectly content with using L2TP/IPsec even though it is not AS secure as the OpenVPN - it just sucks that I have paid for the PIA application and now I'm only able to use the next best thing.