<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
Problem solved.<br>
Recall that this is a system that had no remnants of WinPcap on it
as nearly as I was humanly capable of finding and removing things.
Same process after each install attempt.<br>
WinPcap was complaining at install that it was already installed ..
but it "wasn't".<br>
Program uninstalls were tried but there was nothing to uninstall.
Windows AND Revo.<br>
The registry was cleared out.<br>
The Program Files were cleared out.<br>
Envisioning having to reinstall Windows, I took a flyer and ran
ComboFix on the system.<br>
<br>
It quarantined:<br>
Packet.dll<br>
winpcap.dll<br>
these files were both in <br>
<br>
c:\windows\SysWOW64 .... imagine that!<br>
<br>
That's not where they usually show up with a normal install. And,
of course, why they didn't show up in a Search remains a mystery as
well.<br>
<br>
Anyway, after this WinPcap installed just fine.<br>
A lesson learned.<br>
Thanks all for your forbearance!<br>
<br>
Fred<br>
<br>
<br>
On 1/12/2012 9:27 PM, Fred Marshall wrote:
<blockquote cite="mid:4F0FC0B5.3040703@acm.org" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<font size="-1"><font face="Courier New">Mark,<br>
<br>
Well, I haven't really changed the apps since I had WinPCAP
working before on this system. I think the nfp issue deserves
some focus.<br>
<br>
Regards,<br>
<br>
Fred<br>
</font></font> <br>
On 1/9/2012 1:11 PM, Mark Pizzolato - WinPCap-Users wrote:
<blockquote
cite="mid:0CC6789C1C831B4C8CCFF49D45D7010F7EEF576522@REDROOF2.alohasunset.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New","serif";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:772673522;
mso-list-type:hybrid;
mso-list-template-ids:1790630900 414989494 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Calibri","sans-serif";
mso-fareast-font-family:Calibri;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New","serif";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New","serif";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New","serif";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1
{mso-list-id:1776293351;
mso-list-type:hybrid;
mso-list-template-ids:-1431793986 -628304970 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:\F0D8;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:24.75pt;
text-indent:-.25in;
font-family:Wingdings;
mso-fareast-font-family:Calibri;
mso-bidi-font-family:"Times New Roman";}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:60.75pt;
text-indent:-.25in;
font-family:"Courier New","serif";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:96.75pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:132.75pt;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:168.75pt;
text-indent:-.25in;
font-family:"Courier New","serif";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:204.75pt;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:240.75pt;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:276.75pt;
text-indent:-.25in;
font-family:"Courier New","serif";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:312.75pt;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi
Fred,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hmmm…
You say “huge task to configure it with app’s, etc.”
suggests to me that one of those steps is involved in the
issues you are having with WinPcap.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Feel
free to keep banging your head against this issue without
making much real progress or you can try to start from a
scratch system with a working WinPcap environment and add
each of the “apps” one at a time to determine the one
which negatively interacts….<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Good
Luck.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoListParagraph"
style="text-indent:-.25in;mso-list:l0 level1 lfo3"><!--[if !supportLists]--><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><span
style="mso-list:Ignore">-<span style="font:7.0pt
"Times New Roman""> </span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Mark<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue
1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">
<a moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:winpcap-users-bounces@winpcap.org">winpcap-users-bounces@winpcap.org</a>
[<a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="mailto:winpcap-users-bounces@winpcap.org">mailto:winpcap-users-bounces@winpcap.org</a>]
<b>On Behalf Of </b>Fred Marshall<br>
<b>Sent:</b> Monday, January 09, 2012 1:05 PM<br>
<b>To:</b> <a moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</a><br>
<b>Subject:</b> Re: [Winpcap-users] Windows 7 Pro
x64 RE Install Fails<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New","serif"">Mark,<br>
<br>
Well, this is a fairly new system and it's set up as the
"tool workstation" for network administrator tasks. <br>
It's a huge task to configure it with app's, etc.<br>
Yet, nothing very strange about it.<br>
I won't say that the system hasn't had its quirks but I
have no evidence to suggest one thing or another.</span><br>
<br>
On 1/8/2012 5:00 PM, Mark Pizzolato - WinPCap-Users wrote:
<o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I’m
not sure what you are trying to determine.</span><o:p></o:p></p>
<p class="MsoListParagraph"
style="margin-left:24.75pt;text-indent:-.25in;mso-list:l1
level1 lfo2"><!--[if !supportLists]--><span
style="font-family:Wingdings"><span
style="mso-list:Ignore">Ø<span style="font:7.0pt
"Times New Roman""> </span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Sc
qc npf</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:24.75pt"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Returns
the configuration for the npf service</span><o:p></o:p></p>
<p class="MsoListParagraph"
style="margin-left:24.75pt;text-indent:-.25in;mso-list:l1
level1 lfo2"><!--[if !supportLists]--><span
style="font-family:Wingdings"><span
style="mso-list:Ignore">Ø<span style="font:7.0pt
"Times New Roman""> </span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Net
start npf</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:24.75pt"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Starts
the npf service.</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Clearly
these are NOT the same thing.</span><o:p></o:p></p>
<p class="MsoListParagraph"
style="margin-left:24.75pt;text-indent:-.25in;mso-list:l1
level1 lfo2"><!--[if !supportLists]--><span
style="font-family:Wingdings"><span
style="mso-list:Ignore">Ø<span style="font:7.0pt
"Times New Roman""> </span></span></span><!--[endif]--><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Sc
start npf</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:24.75pt"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">would
be the same as “net start npf”</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:24.75pt"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:0in"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Something
is clearly tangled up on the system which doesn’t work.
Winpcap works for me (and MANY other folks) on MANY Win7
x64 systems without any problem.</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:0in"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:0in"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Even
though you’ve had control of the affected system since
it shipped, something that happened to the system while
you’ve had control of it has created this tangle.</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:0in"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:0in"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I
hate to suggest restoring the system to the condition it
shipped in would likely make things work, but that may
be what you need to do….</span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:0in"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoListParagraph" style="margin-left:0in"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Good
Luck.</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<div style="border:none;border-left:solid blue
1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">
<a moz-do-not-send="true"
href="mailto:winpcap-users-bounces@winpcap.org">winpcap-users-bounces@winpcap.org</a>
[<a moz-do-not-send="true"
href="mailto:winpcap-users-bounces@winpcap.org">mailto:winpcap-users-bounces@winpcap.org</a>]
<b>On Behalf Of </b>Fred Marshall<br>
<b>Sent:</b> Sunday, January 08, 2012 4:31 PM<br>
<b>To:</b> <a moz-do-not-send="true"
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</a><br>
<b>Subject:</b> Re: [Winpcap-users] Windows 7 Pro
x64 RE Install Fails</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Courier
New","serif"">I've had control of this
system since it was shipped .. basically. <br>
I have another Window 7 64 system that works fine -
uses the same antivirus too.<br>
<br>
Today I figured out that the npf.sys driver must be a
problem.<br>
<br>
On the troubled system, I ran<br>
sc qc npf<br>
and get a good report.<br>
So it seems the file is "there".....<br>
<br>
If I run:<br>
sc config npf start= auto<br>
there is no complaint; yet, it doesn't seem to do
anything in a reboot.<br>
<br>
If I run <br>
net start npf<br>
I get Syhstem error 2 has occurred<br>
The system cannot find the file specified. !!!!!!<br>
<br>
So, it appears there is a difference between<br>
sc qc npf<br>
and<br>
net start npf<br>
<br>
I've also looked at the ... well I can't find the full
steps but it's like in the not plugnplay, hidden, etc.<br>
and it's not showing there.......<br>
<br>
Everything has been run as Administrator, etc.<br>
<br>
</span>Fred<br>
On 1/5/2012 4:45 PM, "Fish" (David B. Trout) wrote: <o:p></o:p></p>
<pre>Fred Marshall wrote:<o:p></o:p></pre>
<pre> <o:p></o:p></pre>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<pre>This problem persists and I've not found a solution.<o:p></o:p></pre>
<pre>Is there any way to install WinPcap on Windows 7 x64???<o:p></o:p></pre>
</blockquote>
<pre> <o:p></o:p></pre>
<pre>I've installed it many times on my Windows 7 x64 system without any problem<o:p></o:p></pre>
<pre>whatsoever. So have many others. There is obviously something unique about<o:p></o:p></pre>
<pre>your particular system that you need to figure out.<o:p></o:p></pre>
<pre> <o:p></o:p></pre>
<pre>Did you perchance change the permissions of your system drive (the Program<o:p></o:p></pre>
<pre>Files directory)? Or change the permissions of your Registry? Did you maybe<o:p></o:p></pre>
<pre>disable some critical Windows service or something? Have you tried<o:p></o:p></pre>
<pre>COMPLETELY uninstalling your anti-virus? (just as a test)<o:p></o:p></pre>
<pre> <o:p></o:p></pre>
<pre>You (or someone else) obviously changed something on your system to prevent<o:p></o:p></pre>
<pre>the installation of WinPCap from succeeding, and you need to figure out what<o:p></o:p></pre>
<pre>that something was.<o:p></o:p></pre>
<pre> <o:p></o:p></pre>
</div>
<p class="MsoNormal"><br>
<br>
<br>
<o:p></o:p></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>Winpcap-users mailing list<o:p></o:p></pre>
<pre><a moz-do-not-send="true" href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a><o:p></o:p></pre>
<pre><a moz-do-not-send="true" href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><o:p></o:p></pre>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Winpcap-users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</a>
</pre>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Winpcap-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a>
<a class="moz-txt-link-freetext" href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</a>
</pre>
</blockquote>
</body>
</html>