[Winpcap-users] WinPcap 4.1.2 Setup Error

[Chin Shi Hong]

On Fri, May 18, 2012 at 4:12 PM, Jay Kay <gamekid334 at gmail.com> wrote:
> Michael,
>
> Thanks for the quick reply.
>
> I downloaded the suite, started the install and ran procmon.exe as you
> instructed.  It was going a little slow at first, but soon after clicking
> "Filter" it hit a BSoD.  After my system restarted I tried running procmon
> again (forgetting to start the installation first though) and it almost
> immediately hit the BSoD again.  I then tested it in safe mode out of
> curiosity but apparently a necessary driver is missing when in that mode,
> but it didn't crash it.
>
> Any other suggestions or reasons why procmon could have crashed the system?
>  That is the first time this has happened to it.  It was such a good idea,
> too.  I should probably also note that I'm running 64-bit Windows and 2GB of
> RAM.
>
> Thanks,
>  - Jay
>
>
> On Fri, May 18, 2012 at 12:15 AM, Michael Lehr <michael at maystreet.com>
> wrote:
>>
>> Jay,
>>
>> I don't really know the answer specifically for winpcap, but generally I
>> would use the sysinternals suite, start the install, run procmon (filter on
>> the install application), do the install, and see what files & registry keys
>> it is accessing to make its decision.  Maybe there is still something
>> lingering.
>>
>> http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx
>>
>> Michael Lehr
>>
>>
>> On Fri, May 18, 2012 at 12:35 AM, Jay Kay <gamekid334 at gmail.com> wrote:
>>>
>>> Hi again,
>>>
>>> I sent this (below) into the mailing list about a month ago.  I still
>>> haven't figured out the problem.  Any help would be vastly appreciated.
>>>
>>> Oh, I'm also running Windows 7 if that helps.
>>>
>>> Thanks again,
>>>  - Jay
>>>
>>> ___
>>>
>>>> Hi,
>>>>
>>>> I've had WinPcap installed on my computer before but uninstalled it at
>>>> some point, or so I thought.  I recently tried reinstalling WinPcap 4.1.2,
>>>> but whenever I do, I get the message:
>>>>
>>>> "A previous version of WinPCap has been detected on the system and
>>>> cannot be removed because in use by another application. Please close all
>>>> the WinPcap-based applications and run the installer again."
>>>>
>>>> One problem:  I can't seem to find any traces of WinPcap on my computer.
>>>>  No uninstallation executables, no DLLs, no registry keys.  What's even more
>>>> interesting is the fact that Wireshark denies its existence, SmartSniff
>>>> seems to recognise its presence but can't seem to use it and Cain can use it
>>>> with absolutely no problems.
>>>>
>>>> I've tried everything I could dig up but to no avail, and I was hoping
>>>> that someone here could help me.  Any suggestions?
>>>>
>>>> Thanks!
>>>>  - Jay
>>>
>>>
>>>
>>> _______________________________________________
>>> Winpcap-users mailing list
>>> Winpcap-users at winpcap.org
>>> https://www.winpcap.org/mailman/listinfo/winpcap-users
>>>
>>
>>
>> _______________________________________________
>> Winpcap-users mailing list
>> Winpcap-users at winpcap.org
>> https://www.winpcap.org/mailman/listinfo/winpcap-users
>>
>
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users
>

Jay,

Firstly, reboot your computer. Then, run Device Manager, enable "Show
Hidden Devices" by click on View -> Show Hidden Devices, Then, in
"Non-Plug and Play Drivers", look for "NetGroup Packet Filter Driver",
see whether it is there or not.

Regards,
Just call me Mr. Chin