<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font size="-1"><font face="Courier New">Does that latet information
about uninstalled/not uninstalled help any?<br>
<br>
</font></font>On 12/8/2011 3:00 PM, Fred Marshall wrote:
<blockquote cite="mid:4EE14182.7010606@acm.org" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<font size="-1"><font face="Courier New">OK. I tried that</font></font>.
The result was the same.<br>
Also, even after extra effort to uninstall, the WiinPcap install
process reports that WinPcap 4.1.2 is already installed.<br>
<br>
Thanks,<br>
<br>
Fred<br>
<br>
On 12/8/2011 11:57 AM, Black, Michael (IS) wrote:
<blockquote
cite="mid:7D54DF7E-EC37-4827-9CC0-E65B0427FF9D@mimectl"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<style>.EmailQuote {
BORDER-LEFT: #800000 2px solid; PADDING-LEFT: 4pt; MARGIN-LEFT: 1pt
}
</style>
<style id="owaParaStyle">P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
</style>
<div style="FONT-FAMILY: Tahoma; DIRECTION: ltr; COLOR: #000000;
FONT-SIZE: 10pt">
<p>Googling the error finds this:</p>
<p> </p>
<p style="PADDING-BOTTOM: 0px; WIDOWS: 2; TEXT-TRANSFORM:
none; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px;
MARGIN: 0px 0px 0.8em; PADDING-LEFT: 0px; PADDING-RIGHT:
0px; FONT: 12px/17px Arial, Helvetica, sans-serif;
WHITE-SPACE: normal; ORPHANS: 2; LETTER-SPACING: normal;
HEIGHT: auto; COLOR: rgb(0,0,0); WORD-SPACING: 0px;
PADDING-TOP: 0px; -webkit-text-size-adjust: auto;
-webkit-text-stroke-width: 0px"> <a moz-do-not-send="true"
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT:
0px; PADDING-RIGHT: 0px; HEIGHT: auto; COLOR:
rgb(0,0,255); TEXT-DECORATION: none; PADDING-TOP: 0px"
name="Q-30" target="_blank"><span style="PADDING-BOTTOM:
0px; LINE-HEIGHT: 17px; MARGIN: 0px; PADDING-LEFT: 0px;
PADDING-RIGHT: 0px; HEIGHT: auto; COLOR: rgb(0,0,0);
FONT-SIZE: 18px; FONT-WEIGHT: bold; PADDING-TOP: 0px"
class="Q">Q-30:</span></a><span
class="Apple-converted-space"> </span><i
style="PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-LEFT:
0px; PADDING-RIGHT: 0px; HEIGHT: auto; PADDING-TOP: 0px">The
WinPcap installation fails with the error message "An
error occurred while installing the NPF driver ( -1 ).
Please contact the WinPcap team".</i></p>
<p style="PADDING-BOTTOM: 0px; WIDOWS: 2; TEXT-TRANSFORM:
none; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px;
MARGIN: 0px 0px 0.8em; PADDING-LEFT: 0px; PADDING-RIGHT:
0px; FONT: 12px/17px Arial, Helvetica, sans-serif;
WHITE-SPACE: normal; ORPHANS: 2; LETTER-SPACING: normal;
HEIGHT: auto; COLOR: rgb(0,0,0); WORD-SPACING: 0px;
PADDING-TOP: 0px; -webkit-text-size-adjust: auto;
-webkit-text-stroke-width: 0px"> <span
style="PADDING-BOTTOM: 0px; LINE-HEIGHT: 17px; MARGIN:
0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; HEIGHT: auto;
COLOR: rgb(0,0,0); FONT-SIZE: 18px; FONT-WEIGHT: bold;
PADDING-TOP: 0px" class="A">A:</span><span
class="Apple-converted-space"> </span>This error is
usually caused by an antivirus or antimalware software that
incorrectly detects the WinPcap kernel driver (NPF) as
malware. This is because in the past some malware tools have
been developed over the WinPcap library.</p>
<p style="PADDING-BOTTOM: 0px; WIDOWS: 2; TEXT-TRANSFORM:
none; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px;
MARGIN: 0px 0px 0.8em; PADDING-LEFT: 0px; PADDING-RIGHT:
0px; FONT: 12px/17px Arial, Helvetica, sans-serif;
WHITE-SPACE: normal; ORPHANS: 2; LETTER-SPACING: normal;
HEIGHT: auto; COLOR: rgb(0,0,0); WORD-SPACING: 0px;
PADDING-TOP: 0px; -webkit-text-size-adjust: auto;
-webkit-text-stroke-width: 0px"> The workaround is to
disable such antivirus/antimalware programs while installing
WinPcap.</p>
<div>
<p> </p>
<div style="FONT-FAMILY: Tahoma; FONT-SIZE: 13px">
<p>Michael D. Black</p>
<p>Senior Scientist</p>
<p>Advanced Analytics Directorate</p>
<p>Advanced GEOINT Solutions Operating Unit</p>
<p>Northrop Grumman Information Systems</p>
</div>
</div>
<div>
<hr tabindex="-1">
<div id="x_divRplyFwdMsg"><font color="#000000"
face="Tahoma" size="2"><b>From:</b> <a
moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:winpcap-users-bounces@winpcap.org">winpcap-users-bounces@winpcap.org</a>
[<a moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:winpcap-users-bounces@winpcap.org">winpcap-users-bounces@winpcap.org</a>]
on behalf of Fred Marshall [<a moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:fmarshall@acm.org">fmarshall@acm.org</a>]<br>
<b>Sent:</b> Thursday, December 08, 2011 1:48 PM<br>
<b>To:</b> <a moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</a><br>
<b>Subject:</b> EXT :[Winpcap-users] Windows 7 Pro x64
RE Install Fails<br>
</font><br>
</div>
</div>
<font size="2"><span style="FONT-SIZE: 10pt">
<div class="PlainText">Windows 7 Pro x64<br>
Had Wireshark and WinPCAP installed and working.<br>
Downloaded latest Wireshark and WinPCAP.<br>
Have Uninstalled, Deleted, Run Revo Uninstaller etc.
etc. but the same <br>
problem keeps occurring and I can't successfully install
WinPCAP:<br>
<br>
The WinPCAP 4.1.2 Setup Errors opening file for writing:<br>
<br>
C:\Windows\system32\Packet.dll<br>
<br>
Retry hits the same error.<br>
Ignore yiels: An error occurred while installing the NPF
driver <br>
(0x00000430)<br>
<br>
Install.log:<br>
<br>
WinPcap 4.1.0.2001 Installation LOG<br>
-----------------------------------------------------<br>
Debug Information<br>
<br>
<br>
Operating system detected on registry: 7 - AMD64<br>
True operating system (kernel.dll): 7 - AMD64<br>
npptools.dll present on the system: false<br>
netnm.inf present on the system: false<br>
nmnt.sys present on the system: false<br>
<br>
End of log<br>
-----------------------------------------------------<br>
<br>
I've run the Wireshark install "as Administrator" with
the same results.<br>
<br>
What shall I do? I'm stuck.<br>
<br>
Thanks,<br>
<br>
Fred<br>
_______________________________________________<br>
Winpcap-users mailing list<br>
<a moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a><br>
<a moz-do-not-send="true"
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>
</div>
</span></font></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Winpcap-users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</a>
</pre>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Winpcap-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a>
<a class="moz-txt-link-freetext" href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</a>
</pre>
</blockquote>
</body>
</html>