<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font size="-1"><font face="Courier New">OK. I tried that</font></font>.
The result was the same.<br>
Also, even after extra effort to uninstall, the WiinPcap install
process reports that WinPcap 4.1.2 is already installed.<br>
<br>
Thanks,<br>
<br>
Fred<br>
<br>
On 12/8/2011 11:57 AM, Black, Michael (IS) wrote:
<blockquote cite="mid:7D54DF7E-EC37-4827-9CC0-E65B0427FF9D@mimectl"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<style>.EmailQuote {
BORDER-LEFT: #800000 2px solid; PADDING-LEFT: 4pt; MARGIN-LEFT: 1pt
}
</style>
<style id="owaParaStyle">P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
</style>
<div style="FONT-FAMILY: Tahoma; DIRECTION: ltr; COLOR: #000000;
FONT-SIZE: 10pt">
<p>Googling the error finds this:</p>
<p> </p>
<p style="PADDING-BOTTOM: 0px; WIDOWS: 2; TEXT-TRANSFORM: none;
BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; MARGIN:
0px 0px 0.8em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT:
12px/17px Arial, Helvetica, sans-serif; WHITE-SPACE: normal;
ORPHANS: 2; LETTER-SPACING: normal; HEIGHT: auto; COLOR:
rgb(0,0,0); WORD-SPACING: 0px; PADDING-TOP: 0px;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width:
0px">
<a moz-do-not-send="true" style="PADDING-BOTTOM: 0px; MARGIN:
0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; HEIGHT: auto;
COLOR: rgb(0,0,255); TEXT-DECORATION: none; PADDING-TOP:
0px" name="Q-30" target="_blank"><span
style="PADDING-BOTTOM: 0px; LINE-HEIGHT: 17px; MARGIN:
0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; HEIGHT: auto;
COLOR: rgb(0,0,0); FONT-SIZE: 18px; FONT-WEIGHT: bold;
PADDING-TOP: 0px" class="Q">Q-30:</span></a><span
class="Apple-converted-space"> </span><i
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT: 0px;
PADDING-RIGHT: 0px; HEIGHT: auto; PADDING-TOP: 0px">The
WinPcap installation fails with the error message "An error
occurred while installing the NPF driver ( -1 ). Please
contact the WinPcap team".</i></p>
<p style="PADDING-BOTTOM: 0px; WIDOWS: 2; TEXT-TRANSFORM: none;
BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; MARGIN:
0px 0px 0.8em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT:
12px/17px Arial, Helvetica, sans-serif; WHITE-SPACE: normal;
ORPHANS: 2; LETTER-SPACING: normal; HEIGHT: auto; COLOR:
rgb(0,0,0); WORD-SPACING: 0px; PADDING-TOP: 0px;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width:
0px">
<span style="PADDING-BOTTOM: 0px; LINE-HEIGHT: 17px; MARGIN:
0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; HEIGHT: auto;
COLOR: rgb(0,0,0); FONT-SIZE: 18px; FONT-WEIGHT: bold;
PADDING-TOP: 0px" class="A">A:</span><span
class="Apple-converted-space"> </span>This error is usually
caused by an antivirus or antimalware software that
incorrectly detects the WinPcap kernel driver (NPF) as
malware. This is because in the past some malware tools have
been developed over the WinPcap library.</p>
<p style="PADDING-BOTTOM: 0px; WIDOWS: 2; TEXT-TRANSFORM: none;
BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; MARGIN:
0px 0px 0.8em; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; FONT:
12px/17px Arial, Helvetica, sans-serif; WHITE-SPACE: normal;
ORPHANS: 2; LETTER-SPACING: normal; HEIGHT: auto; COLOR:
rgb(0,0,0); WORD-SPACING: 0px; PADDING-TOP: 0px;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width:
0px">
The workaround is to disable such antivirus/antimalware
programs while installing WinPcap.</p>
<div>
<p> </p>
<div style="FONT-FAMILY: Tahoma; FONT-SIZE: 13px">
<p>Michael D. Black</p>
<p>Senior Scientist</p>
<p>Advanced Analytics Directorate</p>
<p>Advanced GEOINT Solutions Operating Unit</p>
<p>Northrop Grumman Information Systems</p>
</div>
</div>
<div>
<hr tabindex="-1">
<div id="x_divRplyFwdMsg"><font color="#000000" face="Tahoma"
size="2"><b>From:</b> <a class="moz-txt-link-abbreviated" href="mailto:winpcap-users-bounces@winpcap.org">winpcap-users-bounces@winpcap.org</a>
[<a class="moz-txt-link-abbreviated" href="mailto:winpcap-users-bounces@winpcap.org">winpcap-users-bounces@winpcap.org</a>] on behalf of Fred
Marshall [<a class="moz-txt-link-abbreviated" href="mailto:fmarshall@acm.org">fmarshall@acm.org</a>]<br>
<b>Sent:</b> Thursday, December 08, 2011 1:48 PM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</a><br>
<b>Subject:</b> EXT :[Winpcap-users] Windows 7 Pro x64 RE
Install Fails<br>
</font><br>
</div>
</div>
<font size="2"><span style="FONT-SIZE: 10pt">
<div class="PlainText">Windows 7 Pro x64<br>
Had Wireshark and WinPCAP installed and working.<br>
Downloaded latest Wireshark and WinPCAP.<br>
Have Uninstalled, Deleted, Run Revo Uninstaller etc. etc.
but the same <br>
problem keeps occurring and I can't successfully install
WinPCAP:<br>
<br>
The WinPCAP 4.1.2 Setup Errors opening file for writing:<br>
<br>
C:\Windows\system32\Packet.dll<br>
<br>
Retry hits the same error.<br>
Ignore yiels: An error occurred while installing the NPF
driver <br>
(0x00000430)<br>
<br>
Install.log:<br>
<br>
WinPcap 4.1.0.2001 Installation LOG<br>
-----------------------------------------------------<br>
Debug Information<br>
<br>
<br>
Operating system detected on registry: 7 - AMD64<br>
True operating system (kernel.dll): 7 - AMD64<br>
npptools.dll present on the system: false<br>
netnm.inf present on the system: false<br>
nmnt.sys present on the system: false<br>
<br>
End of log<br>
-----------------------------------------------------<br>
<br>
I've run the Wireshark install "as Administrator" with the
same results.<br>
<br>
What shall I do? I'm stuck.<br>
<br>
Thanks,<br>
<br>
Fred<br>
_______________________________________________<br>
Winpcap-users mailing list<br>
<a class="moz-txt-link-abbreviated" href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a><br>
<a moz-do-not-send="true"
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>
</div>
</span></font></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Winpcap-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a>
<a class="moz-txt-link-freetext" href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</a>
</pre>
</blockquote>
</body>
</html>