BSOD - IRQL - tcpip.sys

When using Norton vpn and internet like a browser, I get a blue screen restart.  Error - IRQL - tcpip.sys.

Support has reinstalled Norton 360 (several rimes), reset the ip of winsock, ivp4 and ivp6, etc.  Checked all network drivers.  Still happens.  Does not occur with 360 on and vpn off.  I have two different windows 11 (Microsoft surface) and two different router situations.  Same problem on all. Help please.

Hello all,

Probably doesn't add anything useful, but I insert an image from the last .dmp

The problem happens everytime I try to use Norton VPN. Sometimes almost immediately, sometimes after half an hour or so.

Updated every driver I could think of, ran scans as suggested in this forum, but everything to no avail.

Hope that a solution from Norton will be presented shortly.

You're most welcome.

SA

Both computers are Microsoft windows 11 certified.  The TAP driver is for the Proton VPN (wireguard) and works just fine.  When the TAP driver removed, the Norton problem persists.  By process of elimination it appears to be a problem with the miniport drivers (or one of them) but I can' t find any updates on the Microsoft site.

Thanks you for your advice. I will proceed without Norton VPN.  Just a little frustrating.  Norton VPN worked fine until about the week after Christmas; must have been a Norton upgrade because I was able to undo all other updates.

Again thanks.

 

Both computers are Microsoft windows 11 certified.  The TAP driver is for the Proton VPN (wireguard) and works just fine.  When the TAP driver removed, the Norton problem persists.  By process of elimination it appears to be a problem with the miniport drivers (or one of them) but I can' t find any updates on the Microsoft site.

Thanks you for your advice. I will proceed without Norton VPN.  Just a little frustrating.  Norton VPN worked fine until about the week after Christmas; must have been a Norton upgrade because I was able to undo all other updates.

Again thanks.

 

FWIW!! Tap drivers are NO LONGER used nor a part of Norton. If that driver remains installed it CAN be a part of the issue. Removing it is of course at your liberty and is a suggestion on my part. Chasing a ghost here it appears. 

According to MS the Surface 3 is NOT Windows 11 compatible. Depending on the Surface Studio model is may be compatible. Can you verify? Running Windows 11 on unsupported hardware will cause issues. 

https://support.microsoft.com/en-us/surface/surface-supported-operating-systems-9559cc3c-7a38-31b6-d9fb-571435e84cd1#bkmk_surface3

SA

Erros happened way before I had to add the proton vpn because i could not use the norton vpn.  I'll try the miniport ip driver again, thanks.

Remove the TAP-ProtonVpn Windows Adapter V9 and reboot / recheck. REINSTALL your Wan miniport IP driver as well it has an issue. Clearing the former and a restart may correct that issue though.

SA

KB5022836 does not show on update list.network adapters.jpg

I updated my Windows 11 laptop this morning after doing so yesterday and it offered several more updates including a triad of Realtek drivers which failed with the same error code. I didn't take the liberty to write the error down and should have. Nevertheless nothing changed with the restart. Could you confirm that KB5022836 is or isn't installed on your devices? Also get a screenshot of your network adapters installed in Device Manager and post for us. I'd like to see what is there or better yet what shouldn't be there. TIA!! 

SA

No. I have reinstalled windows 11 but still have same problem.  Everything else works great.

Do you have the N360 VPN set to start with Windows boot?

SA

I have two computers: surface laptop 3 and surface studio laptop. Both on the latest version of windows 11.  I also have two primary locations one on Astound, provided by RCN, and the other Spectrum.  Both have ARRIS cable modems, one (Spectrum) with eero router and the other with LUXUL router.  Same issue on both computers and both locations.

I have run all suggested cmd commands.  Updated/reinstalled all drivers to Surface (Microsoft OEM) drivers.  Problem still exists; same BSOD and error message.  No problems with Norton VPN off.  Norton support has tried to no avail. Windows 11 22H2 build 22621.1265.

Firewall log attached.

You haven't provided any screenshots of what your Norton history is telling you thus far. There may be some useful information there that will clue as to what is happening. Specifically history in the area of "Firewall -Network and Connections". Have you updated your chipset drivers from your OEM manufacturer website? Not using the Windows WHQL drivers on the machines other than the Surface device? Who is the maker of  the other device? What is the Windows "build" on both machines? I'm finding it hard to imagine two devices on the same network having the same issue and Norton VPN is causing it. There is some sort of misconfiguration happening in my view.

You also mentioned two different router situations, please explain those so we can understand that as well.

SA

Thank you for your help.  I've exhausted your suggestions and everything else I found on the internet.  I guess I need to forgo Norton VPN and use another.  I've tried Proton VPN without any problems.  Again, thanks.

Also, please add your screenshots into your posts vice "attaching" a pdf or other file. Everyone can then view the screenshots without the security risk of opening a possible nefarious file.

How to add images into your posts instructions: https://community.norton.com/forums/how-post-image-forums-0

SA

 

Hello James. Leave your VPN disabled. If you can boot into Windows, check for your graphics driver being from Microsoft (WHQL) vice your OEM. Update it with your OEM ( Manufacturers ) drivers and restart. The other issue is there CAN be system file corruption causing the IRQL_NOT_LESS_OR_EQUAL issue. While you have the computer up manually run Windows updates. 

Some things you can also do are running this command from an elevated ( admin ) command prompt: sfc / scannow. Allow the test to run until done. Another test is DISM. Test with those as well to see whether you have system file corruption.

Repair Windows Update Errors:

https://support.microsoft.com/en-us/help/947821/fix-windows-update-error...

Repair a Windows Image

https://support.microsoft.com/en-us/help/947821/fix-windows-update-error...

https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/re...

SA

I'm sorry, I hope this is what you need.

What you have posted is just a list of running processes. 

process list.jpg

What we need is the output from Bluescreenview that is produced from a crash dump. Note the column headings - Dump file, etc. Clicking on one of those files will create the output we are looking for. 

blue screen output.JPG

Instructions to post screenshots can be found here
https://community.norton.com/forums/how-post-image-forums-0

Not many volunteers here will open .pdf files for security reasons.

 

attached are 8 pdf files of bluescreenview results.  The two files showing errors are dump14.pdf and dump17.pdf.