Nmap Development mailing list archives

Previous By Date Next
Previous By Thread Next

Re: "Failed to create the npf service for win7, win8 and win10"

From: Leonidas Platonas <leonidas23.32 () gmail com>
Date: Thu, 11 Jan 2018 03:40:23 +0200
CreateDirectory: "C:\Program Files\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 8870 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1034 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 8892 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall2.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall2.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 840
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npf.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npf.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.cat"
File: wrote 10303 to "C:\Program Files\Npcap\npf.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.inf"
File: wrote 8632 to "C:\Program Files\Npcap\npf.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npf_wfp.inf"
File: wrote 2390 to "C:\Program Files\Npcap\npf_wfp.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10323 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8657 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2404 to "C:\Program Files\Npcap\npcap_wfp.inf"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 176664 to "C:\Program Files\Npcap\Uninstall.exe"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 778
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 163024 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 165584 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll"
(overwriteflag=1)
Call: 795
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 188112 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 192208 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 940
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap"
"WinPcapCompatible"="0x00000001"
Jump: 951
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll"
(overwriteflag=1)
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallPath"="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Writting service options to registry
Call: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackAdapter"="\Device\{A69A743B-252B-4F51-A84F-BD644ED283D5}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackAdapter"="\Device\{A69A743B-252B-4F51-A84F-BD644ED283D5}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
detailprint: Identify the wireless adapters and write them into the registry
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 690
Call: 868
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-SHA1.cer"
File: wrote 1320 to "C:\Users\user\AppData\Local\Temp\Insecure-SHA1.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1526 to "C:\Users\user\AppData\Local\Temp\Insecure-EV.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: The cache in driver store was cleared
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 906
detailprint: The npcap service for Win7, Win8 and Win10 was successfully
created
Jump: 914
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 932
detailprint: Failed to create the npf service for Win7, Win8 and Win10
MessageBox: 0,"Failed to create the npf service for Win7, Win8 and Win10.
Please try installing Npcap again, or use the latest official Npcap
installer from https://nmap.org/npcap/";
Call: 1094
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf_wifi"
"Start"="0x00000004"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi"
"Start"="0x00000004"
Call: 1036
detailprint: Starting the npf driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Starting the npcap driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 1189
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayName"="Npcap 0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayVersion"="0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"Publisher"="Nmap Project"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLInfoAbout"="http://www.npcap.org";
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLUpdateInfo"="http://www.npcap.org";
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMajor"="0"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMinor"="1"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoModify"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoRepair"="0x00000001"
detailprint: Finish setting system restore point: Before installation of
Npcap 0.97
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\SysRestore.dll"
File: skipped:
"C:\Users\user\AppData\Local\Temp\nsmE206.tmp\SysRestore.dll"
(overwriteflag=1)
Aborting: ""
Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\final.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\InstallOptions.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\modern-header.bmp")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\options.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\SysRestore.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\")
Call: 722
Jump: 751
Jump: 754
detailprint: Windows CurrentVersion: 6.1 (Win7)
Call: 85
Call: 999
Jump: 1012
Jump: 1024
Jump: 1036
IfFileExists: file "C:\npcap_install_options.txt" does not exist, jumping
221
Call: 222
Jump: 239
Jump: 256
Call: 260
Jump: 350
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
MessageBox: 292,"Npcap 0.97 is already installed. Reinstall (possibly with
different options)?"
Jump: 489
settings logging to 0
logging set to 1
Call: 1209
File: overwriteflag=0, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\modern-header.bmp"
File: wrote 70976 to
"C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=1 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 529
WriteINIStr: wrote [Field 2] State=1 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 542
WriteINIStr: wrote [Field 3] State=1 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
WriteINIStr: wrote [Field 3] Flags=DISABLED in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 559
WriteINIStr: wrote [Field 4] State=0 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 572
WriteINIStr: wrote [Field 5] State=1 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 585
WriteINIStr: wrote [Field 6] State=0 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 598
WriteINIStr: wrote [Field 7] State=1 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 615
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\InstallOptions.dll"
File: wrote 14848 to
"C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\InstallOptions.dll"
Jump: 660
Jump: 670
New install of "Npcap 0.97" to "C:\Program Files\Npcap"
Section: "WinPcap"
Call: 1075
detailprint: Stopping the npf driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: wrote 6656 to
"C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
detailprint: Stopping the npcap driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Start setting system restore point: Before installation of
Npcap 0.97
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll"
File: wrote 5632 to
"C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll"
Jump: 1152
Call: 766
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 8870 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1034 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 8892 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall2.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall2.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 840
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npf.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npf.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.cat"
File: wrote 10303 to "C:\Program Files\Npcap\npf.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.inf"
File: wrote 8632 to "C:\Program Files\Npcap\npf.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npf_wfp.inf"
File: wrote 2390 to "C:\Program Files\Npcap\npf_wfp.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10323 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8657 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2404 to "C:\Program Files\Npcap\npcap_wfp.inf"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 176664 to "C:\Program Files\Npcap\Uninstall.exe"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 778
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 163024 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 165584 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll"
(overwriteflag=1)
Call: 795
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 188112 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 192208 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 940
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap"
"WinPcapCompatible"="0x00000001"
Jump: 951
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll"
(overwriteflag=1)
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallPath"="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Writting service options to registry
Call: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackAdapter"="\Device\{E381E2DC-37D8-4F56-9BFB-92CB70821F22}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackAdapter"="\Device\{E381E2DC-37D8-4F56-9BFB-92CB70821F22}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
detailprint: Identify the wireless adapters and write them into the registry
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 690
Call: 868
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-SHA1.cer"
File: wrote 1320 to "C:\Users\user\AppData\Local\Temp\Insecure-SHA1.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1526 to "C:\Users\user\AppData\Local\Temp\Insecure-EV.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: The cache in driver store was cleared
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 906
detailprint: The npcap service for Win7, Win8 and Win10 was successfully
created
Jump: 914
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 932
detailprint: Failed to create the npf service for Win7, Win8 and Win10
MessageBox: 0,"Failed to create the npf service for Win7, Win8 and Win10.
Please try installing Npcap again, or use the latest official Npcap
installer from https://nmap.org/npcap/";
Call: 1094
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf_wifi"
"Start"="0x00000004"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi"
"Start"="0x00000004"
Call: 1036
detailprint: Starting the npf driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Starting the npcap driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 1189
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayName"="Npcap 0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayVersion"="0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"Publisher"="Nmap Project"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLInfoAbout"="http://www.npcap.org";
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLUpdateInfo"="http://www.npcap.org";
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMajor"="0"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMinor"="1"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoModify"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoRepair"="0x00000001"
detailprint: Finish setting system restore point: Before installation of
Npcap 0.97
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll"
File: skipped:
"C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll"
(overwriteflag=1)
Aborting: ""
Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\final.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\InstallOptions.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\modern-header.bmp")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\")
Call: 722
Jump: 751
Jump: 754
detailprint: Windows CurrentVersion: 6.1 (Win7)
Call: 85
Call: 999
Jump: 1012
Jump: 1024
Jump: 1036
IfFileExists: file "C:\npcap_install_options.txt" does not exist, jumping
221
Call: 222
Jump: 239
Jump: 256
Call: 260
Jump: 350
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 1209
File: overwriteflag=0, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\modern-header.bmp"
File: wrote 70976 to
"C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=1 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 529
WriteINIStr: wrote [Field 2] State=1 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 542
WriteINIStr: wrote [Field 3] State=1 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
WriteINIStr: wrote [Field 3] Flags=DISABLED in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 559
WriteINIStr: wrote [Field 4] State=0 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 572
WriteINIStr: wrote [Field 5] State=1 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 585
WriteINIStr: wrote [Field 6] State=0 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 598
WriteINIStr: wrote [Field 7] State=1 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 615
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\InstallOptions.dll"
File: wrote 14848 to
"C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\InstallOptions.dll"
Jump: 660
Jump: 670
New install of "Npcap 0.97" to "C:\Program Files\Npcap"
Section: "WinPcap"
Call: 1075
detailprint: Stopping the npf driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: wrote 6656 to
"C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
detailprint: Stopping the npcap driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Start setting system restore point: Before installation of
Npcap 0.97
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll"
File: wrote 5632 to
"C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll"
Jump: 1152
Call: 766
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 8870 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1034 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 8892 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall2.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall2.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 840
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npf.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npf.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.cat"
File: wrote 10303 to "C:\Program Files\Npcap\npf.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.inf"
File: wrote 8632 to "C:\Program Files\Npcap\npf.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npf_wfp.inf"
File: wrote 2390 to "C:\Program Files\Npcap\npf_wfp.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10323 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8657 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2404 to "C:\Program Files\Npcap\npcap_wfp.inf"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 176664 to "C:\Program Files\Npcap\Uninstall.exe"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 778
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 163024 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 165584 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll"
(overwriteflag=1)
Call: 795
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 188112 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 192208 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 940
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap"
"WinPcapCompatible"="0x00000001"
Jump: 951
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll"
(overwriteflag=1)
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallPath"="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Writting service options to registry
Call: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackAdapter"="\Device\{DE207534-4265-4C88-B23D-9729F12AE973}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackAdapter"="\Device\{DE207534-4265-4C88-B23D-9729F12AE973}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
detailprint: Identify the wireless adapters and write them into the registry
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 690
Call: 868
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-SHA1.cer"
File: wrote 1320 to "C:\Users\user\AppData\Local\Temp\Insecure-SHA1.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1526 to "C:\Users\user\AppData\Local\Temp\Insecure-EV.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: The cache in driver store was cleared
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 906
detailprint: The npcap service for Win7, Win8 and Win10 was successfully
created
Jump: 914
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 932
detailprint: Failed to create the npf service for Win7, Win8 and Win10
MessageBox: 0,"Failed to create the npf service for Win7, Win8 and Win10.
Please try installing Npcap again, or use the latest official Npcap
installer from https://nmap.org/npcap/";
Call: 1094
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf_wifi"
"Start"="0x00000004"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi"
"Start"="0x00000004"
Call: 1036
detailprint: Starting the npf driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Starting the npcap driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 1189
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayName"="Npcap 0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayVersion"="0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"Publisher"="Nmap Project"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLInfoAbout"="http://www.npcap.org";
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLUpdateInfo"="http://www.npcap.org";
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMajor"="0"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMinor"="1"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoModify"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoRepair"="0x00000001"
detailprint: Finish setting system restore point: Before installation of
Npcap 0.97
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll"
File: skipped:
"C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll"
(overwriteflag=1)
Aborting: ""
Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\final.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\InstallOptions.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\modern-header.bmp")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\")


On 11 January 2018 at 03:37, Leonidas Platonas <leonidas23.32 () gmail com>
wrote:


hello there

i cant install npcap on windows 7

"Failed to create the npf service for win7, win8 and win10"     how do i
solve this on windows 7?      I found this but it didnt solve my issue :
https://osqa-ask.wireshark.org/questions/45894/driver-
signing-error-trying-to-install-npcap#fmanswer

p.s.1  i need it to run in winpcap compatible mode.

i added this in https://ask.wireshark.org/  also


thanks


_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
Previous By Date Next
Previous By Thread Next

Current thread: