[Winpcap-users] Windows 7 Pro x64 RE Install Fails

Sun Jan 29 06:00:08 PST 2012

Congrats...

FYI...the Windows search function doesn't find program files and such unless you tell it to.

http://windows.microsoft.com/en-US/windows-vista/Improve-Windows-searches-using-the-index-frequently-asked-questions

Michael D. Black

Senior Scientist

Advanced Analytics Directorate

Advanced GEOINT Solutions Operating Unit

Northrop Grumman Information Systems

________________________________
From: winpcap-users-bounces at winpcap.org [winpcap-users-bounces at winpcap.org] on behalf of Fred Marshall [fmarshall at acm.org]
Sent: Saturday, January 28, 2012 8:12 PM
To: winpcap-users at winpcap.org
Subject: EXT :Re: [Winpcap-users] Windows 7 Pro x64 RE Install Fails

Problem solved.
Recall that this is a system that had no remnants of WinPcap on it as nearly as I was humanly capable of finding and removing things.  Same process after each install attempt.
WinPcap was complaining at install that it was already installed .. but it "wasn't".
Program uninstalls were tried but there was nothing to uninstall.  Windows AND Revo.
The registry was cleared out.
The Program Files were cleared out.
Envisioning having to reinstall Windows, I took a flyer and ran ComboFix on the system.

It quarantined:
Packet.dll
winpcap.dll
these files were both in

c:\windows\SysWOW64 .... imagine that!

That's not where they usually show up with a normal install.  And, of course, why they didn't show up in a Search remains a mystery as well.

Anyway, after this WinPcap installed just fine.
A lesson learned.
Thanks all for your forbearance!

Fred

On 1/12/2012 9:27 PM, Fred Marshall wrote:
Mark,

Well, I haven't really changed the apps since I had WinPCAP working before on this system.  I think the nfp issue deserves some focus.

Regards,

Fred

On 1/9/2012 1:11 PM, Mark Pizzolato - WinPCap-Users wrote:
Hi Fred,

Hmmm… You say “huge task to configure it with app’s, etc.”  suggests to me that one of those steps is involved in the issues you are having with WinPcap.

Feel free to keep banging your head against this issue without making much real progress or you can try to start from a scratch system with a working WinPcap environment and add each of the “apps” one at a time to determine the one which negatively interacts….

Good Luck.

-          Mark

From: winpcap-users-bounces at winpcap.org<mailto:winpcap-users-bounces at winpcap.org> [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Fred Marshall
Sent: Monday, January 09, 2012 1:05 PM
To: winpcap-users at winpcap.org<mailto:winpcap-users at winpcap.org>
Subject: Re: [Winpcap-users] Windows 7 Pro x64 RE Install Fails

Mark,

Well, this is a fairly new system and it's set up as the "tool workstation" for network administrator tasks.
It's a huge task to configure it with app's, etc.
Yet, nothing very strange about it.
I won't say that the system hasn't had its quirks but I have no evidence to suggest one thing or another.

On 1/8/2012 5:00 PM, Mark Pizzolato - WinPCap-Users wrote:
I’m not sure what you are trying to determine.

>  Sc qc npf

Returns the configuration for the npf service

>  Net start npf

Starts the npf service.
Clearly these are NOT the same thing.

>  Sc start npf

would be the same as “net start npf”

Something is clearly tangled up on the system which doesn’t work.  Winpcap works for me (and MANY other folks) on MANY Win7 x64 systems without any problem.

Even though you’ve had control of the affected system since it shipped, something that happened to the system while you’ve had control of it has created this tangle.

I hate to suggest restoring the system to the condition it shipped in would likely make things work, but that may be what you need to do….

Good Luck.

From: winpcap-users-bounces at winpcap.org<mailto:winpcap-users-bounces at winpcap.org> [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Fred Marshall
Sent: Sunday, January 08, 2012 4:31 PM
To: winpcap-users at winpcap.org<mailto:winpcap-users at winpcap.org>
Subject: Re: [Winpcap-users] Windows 7 Pro x64 RE Install Fails

I've had control of this system since it was shipped .. basically.
I have another Window 7 64 system that works fine - uses the same antivirus too.

Today I figured out that the npf.sys driver must be a problem.

On the troubled system, I ran
sc qc npf
and get a good report.
So it seems the file is "there".....

If I run:
sc config npf start= auto
there is no complaint; yet, it doesn't seem to do anything in a reboot.

If I run
net start npf
I get Syhstem error 2 has occurred
The system cannot find the file specified. !!!!!!

So, it appears there is a difference between
sc qc npf
and
net start npf

I've also looked at the ... well I can't find the full steps but it's like in the not plugnplay, hidden, etc.
and it's not showing there.......

Everything has been run as Administrator, etc.

Fred
On 1/5/2012 4:45 PM, "Fish" (David B. Trout) wrote:

Fred Marshall wrote:

This problem persists and I've not found a solution.

Is there any way to install WinPcap on Windows 7 x64???

I've installed it many times on my Windows 7 x64 system without any problem

whatsoever. So have many others. There is obviously something unique about

your particular system that you need to figure out.

Did you perchance change the permissions of your system drive (the Program

Files directory)? Or change the permissions of your Registry? Did you maybe

disable some critical Windows service or something? Have you tried

COMPLETELY uninstalling your anti-virus? (just as a test)

You (or someone else) obviously changed something on your system to prevent

the installation of WinPCap from succeeding, and you need to figure out what

that something was.

_______________________________________________

Winpcap-users mailing list

Winpcap-users at winpcap.org<mailto:Winpcap-users at winpcap.org>

https://www.winpcap.org/mailman/listinfo/winpcap-users

_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org<mailto:Winpcap-users at winpcap.org>
https://www.winpcap.org/mailman/listinfo/winpcap-users

_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org<mailto:Winpcap-users at winpcap.org>
https://www.winpcap.org/mailman/listinfo/winpcap-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20120129/7c5d975a/attachment-0001.html>