Completely uninstalling Tunnelblick (and any rebranded versions of Tunnelblick) only removes kexts that are loaded by Tunnelblick or the rebranded software -- it doesn't remove kexts that are loaded by other VPN software. I suspect other VPN software is loading the kexts.
Tunnelblick has never set up the system to load "foo.tun" and "foo.tap" at system start. Other VPN software such as Cisco AnyConnect does that. (Very old versions loaded them at Tunnelblick's launch; for the past several years Tunnelblick has instead loaded net.tunnelblick.tun and net.tunnelblick.tap only when needed for a VPN connection, and then unloaded them when the connection is terminated.)
First, make sure that Tunnelblick is not being launched when you log in:
- Quit Tunnelblick
- Go to the "Users and Groups" System Preferences and click on the "Login Items" tab. Remove any Tunnelblick entries (using the "-" button at the bottom of the list. The checkbox doesn't enable/disable -- it launches but "hides" the application). Also remove any other VPN software.
- Restart your computer.
If 'foo.tun' and 'foo.tap' reappear, Tunnelblick isn't loading them. It's something else.
The best place to look for that is in the "Login Items", as described above, and in
- /System/Library/LaunchAgents
- /System/Library/LaunchDaemons
- /Users/YOUR_USERNAME/Library/LaunchAgents
You are looking for a .plist from some other VPN software -- something that does not start with "com.apple.".
If you find such a .plist, rename it to be ...plist.OLD, then restart your computer. If "foo.tun" and "foo.tap" are gone and everything else works OK, you can go back and delete the .plist.OLD files.