Nmap Development mailing list archives
Re: "Failed to create the npf service for win7, win8 and win10"
From: Leonidas Platonas <leonidas23.32 () gmail com>
Date: Thu, 11 Jan 2018 03:40:23 +0200
CreateDirectory: "C:\Program Files\Npcap" created File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE" File: wrote 8870 to "C:\Program Files\Npcap\LICENSE" File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat" File: wrote 1034 to "C:\Program Files\Npcap\DiagReport.bat" File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1" File: wrote 8892 to "C:\Program Files\Npcap\DiagReport.ps1" File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall2.exe" File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall2.exe" File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe" File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall.exe" Call: 840 CreateDirectory: "C:\Program Files\Npcap" (1) File: overwriteflag=0, allowskipfilesflag=2, name="npf.sys" File: wrote 72400 to "C:\Program Files\Npcap\npf.sys" File: overwriteflag=0, allowskipfilesflag=2, name="npf.cat" File: wrote 10303 to "C:\Program Files\Npcap\npf.cat" File: overwriteflag=0, allowskipfilesflag=2, name="npf.inf" File: wrote 8632 to "C:\Program Files\Npcap\npf.inf" File: overwriteflag=0, allowskipfilesflag=2, name="npf_wfp.inf" File: wrote 2390 to "C:\Program Files\Npcap\npf_wfp.inf" File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys" File: wrote 72400 to "C:\Program Files\Npcap\npcap.sys" File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat" File: wrote 10323 to "C:\Program Files\Npcap\npcap.cat" File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf" File: wrote 8657 to "C:\Program Files\Npcap\npcap.inf" File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf" File: wrote 2404 to "C:\Program Files\Npcap\npcap_wfp.inf" CreateDirectory: "C:\Program Files\Npcap" (1) File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe" File: wrote 176664 to "C:\Program Files\Npcap\Uninstall.exe" detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10 Call: 778 CreateDirectory: "C:\Windows\system32" (1) File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 330960 to "C:\Windows\system32\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 163024 to "C:\Windows\system32\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 98000 to "C:\Windows\system32\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 64208 to "C:\Windows\system32\WlanHelper.exe" CreateDirectory: "C:\Windows\system32\Npcap" (1) CreateDirectory: "C:\Windows\system32\Npcap" created File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 330960 to "C:\Windows\system32\Npcap\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 165584 to "C:\Windows\system32\Npcap\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 98000 to "C:\Windows\system32\Npcap\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 64208 to "C:\Windows\system32\Npcap\WlanHelper.exe" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll" (overwriteflag=1) Call: 795 CreateDirectory: "C:\Windows\system32" (1) File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 376016 to "C:\Windows\system32\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 188112 to "C:\Windows\system32\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 110800 to "C:\Windows\system32\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 74448 to "C:\Windows\system32\WlanHelper.exe" CreateDirectory: "C:\Windows\system32\Npcap" (1) CreateDirectory: "C:\Windows\system32\Npcap" created File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 376016 to "C:\Windows\system32\Npcap\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 192208 to "C:\Windows\system32\Npcap\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 110800 to "C:\Windows\system32\Npcap\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 74448 to "C:\Windows\system32\Npcap\WlanHelper.exe" Call: 940 WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001" Jump: 951 WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll" (overwriteflag=1) WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe"" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) detailprint: Writting service options to registry Call: 981 Call: 951 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf" "Start"="0x00000001" WriteRegStr: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "LoopbackAdapter"="\Device\{A69A743B-252B-4F51-A84F-BD644ED283D5}" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "LoopbackSupport"="0x00000001" Jump: 959 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "DltNull"="0x00000001" Jump: 963 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "AdminOnly"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "Dot11Support"="0x00000001" Jump: 971 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "VlanSupport"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "WinPcapCompatible"="0x00000001" Jump: 981 Call: 951 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001" WriteRegStr: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "LoopbackAdapter"="\Device\{A69A743B-252B-4F51-A84F-BD644ED283D5}" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "LoopbackSupport"="0x00000001" Jump: 959 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "DltNull"="0x00000001" Jump: 963 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "AdminOnly"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "Dot11Support"="0x00000001" Jump: 971 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "VlanSupport"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "WinPcapCompatible"="0x00000001" Jump: 981 detailprint: Identify the wireless adapters and write them into the registry Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) Call: 690 Call: 868 CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1) File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-SHA1.cer" File: wrote 1320 to "C:\Users\user\AppData\Local\Temp\Insecure-SHA1.cer" Call: 1209 File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1) File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer" File: wrote 1526 to "C:\Users\user\AppData\Local\Temp\Insecure-EV.cer" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) detailprint: The cache in driver store was cleared Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) Jump: 906 detailprint: The npcap service for Win7, Win8 and Win10 was successfully created Jump: 914 Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) Jump: 932 detailprint: Failed to create the npf service for Win7, Win8 and Win10 MessageBox: 0,"Failed to create the npf service for Win7, Win8 and Win10. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/" Call: 1094 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf" "Start"="0x00000001" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf_wifi" "Start"="0x00000004" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "Start"="0x00000004" Call: 1036 detailprint: Starting the npf driver Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) detailprint: Starting the npcap driver Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll" (overwriteflag=1) Jump: 1189 WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayName"="Npcap 0.97" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayVersion"="0.97" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "Publisher"="Nmap Project" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLInfoAbout"="http://www.npcap.org" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLUpdateInfo"="http://www.npcap.org" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMajor"="0" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMinor"="1" WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoModify"="0x00000001" WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoRepair"="0x00000001" detailprint: Finish setting system restore point: Before installation of Npcap 0.97 Call: 1209 File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\SysRestore.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\SysRestore.dll" (overwriteflag=1) Aborting: "" Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\final.ini") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\InstallOptions.dll") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\modern-header.bmp") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\options.ini") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\SysRestore.dll") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll") RMDir: RemoveDirectory("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\") Call: 722 Jump: 751 Jump: 754 detailprint: Windows CurrentVersion: 6.1 (Win7) Call: 85 Call: 999 Jump: 1012 Jump: 1024 Jump: 1036 IfFileExists: file "C:\npcap_install_options.txt" does not exist, jumping 221 Call: 222 Jump: 239 Jump: 256 Call: 260 Jump: 350 Call: 260 Call: 260 Call: 260 Call: 260 Call: 260 Call: 260 Call: 260 Call: 260 MessageBox: 292,"Npcap 0.97 is already installed. Reinstall (possibly with different options)?" Jump: 489 settings logging to 0 logging set to 1 Call: 1209 File: overwriteflag=0, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\modern-header.bmp" File: wrote 70976 to "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\modern-header.bmp" WriteINIStr: wrote [Field 1] State=1 in C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini Jump: 529 WriteINIStr: wrote [Field 2] State=1 in C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini Jump: 542 WriteINIStr: wrote [Field 3] State=1 in C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini WriteINIStr: wrote [Field 3] Flags=DISABLED in C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini Jump: 559 WriteINIStr: wrote [Field 4] State=0 in C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini Jump: 572 WriteINIStr: wrote [Field 5] State=1 in C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini Jump: 585 WriteINIStr: wrote [Field 6] State=0 in C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini Jump: 598 WriteINIStr: wrote [Field 7] State=1 in C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini Jump: 615 Call: 1209 File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\InstallOptions.dll" File: wrote 14848 to "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\InstallOptions.dll" Jump: 660 Jump: 670 New install of "Npcap 0.97" to "C:\Program Files\Npcap" Section: "WinPcap" Call: 1075 detailprint: Stopping the npf driver Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: wrote 6656 to "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" detailprint: Stopping the npcap driver Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) detailprint: Start setting system restore point: Before installation of Npcap 0.97 Call: 1209 File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll" File: wrote 5632 to "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll" Jump: 1152 Call: 766 CreateDirectory: "C:\Program Files\Npcap" (1) File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE" File: wrote 8870 to "C:\Program Files\Npcap\LICENSE" File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat" File: wrote 1034 to "C:\Program Files\Npcap\DiagReport.bat" File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1" File: wrote 8892 to "C:\Program Files\Npcap\DiagReport.ps1" File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall2.exe" File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall2.exe" File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe" File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall.exe" Call: 840 CreateDirectory: "C:\Program Files\Npcap" (1) File: overwriteflag=0, allowskipfilesflag=2, name="npf.sys" File: wrote 72400 to "C:\Program Files\Npcap\npf.sys" File: overwriteflag=0, allowskipfilesflag=2, name="npf.cat" File: wrote 10303 to "C:\Program Files\Npcap\npf.cat" File: overwriteflag=0, allowskipfilesflag=2, name="npf.inf" File: wrote 8632 to "C:\Program Files\Npcap\npf.inf" File: overwriteflag=0, allowskipfilesflag=2, name="npf_wfp.inf" File: wrote 2390 to "C:\Program Files\Npcap\npf_wfp.inf" File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys" File: wrote 72400 to "C:\Program Files\Npcap\npcap.sys" File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat" File: wrote 10323 to "C:\Program Files\Npcap\npcap.cat" File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf" File: wrote 8657 to "C:\Program Files\Npcap\npcap.inf" File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf" File: wrote 2404 to "C:\Program Files\Npcap\npcap_wfp.inf" CreateDirectory: "C:\Program Files\Npcap" (1) File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe" File: wrote 176664 to "C:\Program Files\Npcap\Uninstall.exe" detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10 Call: 778 CreateDirectory: "C:\Windows\system32" (1) File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 330960 to "C:\Windows\system32\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 163024 to "C:\Windows\system32\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 98000 to "C:\Windows\system32\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 64208 to "C:\Windows\system32\WlanHelper.exe" CreateDirectory: "C:\Windows\system32\Npcap" (1) CreateDirectory: "C:\Windows\system32\Npcap" created File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 330960 to "C:\Windows\system32\Npcap\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 165584 to "C:\Windows\system32\Npcap\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 98000 to "C:\Windows\system32\Npcap\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 64208 to "C:\Windows\system32\Npcap\WlanHelper.exe" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll" (overwriteflag=1) Call: 795 CreateDirectory: "C:\Windows\system32" (1) File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 376016 to "C:\Windows\system32\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 188112 to "C:\Windows\system32\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 110800 to "C:\Windows\system32\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 74448 to "C:\Windows\system32\WlanHelper.exe" CreateDirectory: "C:\Windows\system32\Npcap" (1) CreateDirectory: "C:\Windows\system32\Npcap" created File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 376016 to "C:\Windows\system32\Npcap\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 192208 to "C:\Windows\system32\Npcap\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 110800 to "C:\Windows\system32\Npcap\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 74448 to "C:\Windows\system32\Npcap\WlanHelper.exe" Call: 940 WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001" Jump: 951 WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll" (overwriteflag=1) WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe"" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) detailprint: Writting service options to registry Call: 981 Call: 951 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf" "Start"="0x00000001" WriteRegStr: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "LoopbackAdapter"="\Device\{E381E2DC-37D8-4F56-9BFB-92CB70821F22}" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "LoopbackSupport"="0x00000001" Jump: 959 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "DltNull"="0x00000001" Jump: 963 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "AdminOnly"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "Dot11Support"="0x00000001" Jump: 971 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "VlanSupport"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "WinPcapCompatible"="0x00000001" Jump: 981 Call: 951 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001" WriteRegStr: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "LoopbackAdapter"="\Device\{E381E2DC-37D8-4F56-9BFB-92CB70821F22}" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "LoopbackSupport"="0x00000001" Jump: 959 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "DltNull"="0x00000001" Jump: 963 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "AdminOnly"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "Dot11Support"="0x00000001" Jump: 971 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "VlanSupport"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "WinPcapCompatible"="0x00000001" Jump: 981 detailprint: Identify the wireless adapters and write them into the registry Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) Call: 690 Call: 868 CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1) File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-SHA1.cer" File: wrote 1320 to "C:\Users\user\AppData\Local\Temp\Insecure-SHA1.cer" Call: 1209 File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1) File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer" File: wrote 1526 to "C:\Users\user\AppData\Local\Temp\Insecure-EV.cer" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) detailprint: The cache in driver store was cleared Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) Jump: 906 detailprint: The npcap service for Win7, Win8 and Win10 was successfully created Jump: 914 Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) Jump: 932 detailprint: Failed to create the npf service for Win7, Win8 and Win10 MessageBox: 0,"Failed to create the npf service for Win7, Win8 and Win10. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/" Call: 1094 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf" "Start"="0x00000001" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf_wifi" "Start"="0x00000004" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "Start"="0x00000004" Call: 1036 detailprint: Starting the npf driver Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) detailprint: Starting the npcap driver Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll" (overwriteflag=1) Jump: 1189 WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayName"="Npcap 0.97" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayVersion"="0.97" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "Publisher"="Nmap Project" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLInfoAbout"="http://www.npcap.org" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLUpdateInfo"="http://www.npcap.org" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMajor"="0" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMinor"="1" WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoModify"="0x00000001" WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoRepair"="0x00000001" detailprint: Finish setting system restore point: Before installation of Npcap 0.97 Call: 1209 File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll" (overwriteflag=1) Aborting: "" Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\final.ini") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\InstallOptions.dll") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\modern-header.bmp") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll") RMDir: RemoveDirectory("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\") Call: 722 Jump: 751 Jump: 754 detailprint: Windows CurrentVersion: 6.1 (Win7) Call: 85 Call: 999 Jump: 1012 Jump: 1024 Jump: 1036 IfFileExists: file "C:\npcap_install_options.txt" does not exist, jumping 221 Call: 222 Jump: 239 Jump: 256 Call: 260 Jump: 350 Call: 260 Call: 260 Call: 260 Call: 260 Call: 260 Call: 260 Call: 260 Call: 260 Call: 1209 File: overwriteflag=0, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\modern-header.bmp" File: wrote 70976 to "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\modern-header.bmp" WriteINIStr: wrote [Field 1] State=1 in C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini Jump: 529 WriteINIStr: wrote [Field 2] State=1 in C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini Jump: 542 WriteINIStr: wrote [Field 3] State=1 in C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini WriteINIStr: wrote [Field 3] Flags=DISABLED in C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini Jump: 559 WriteINIStr: wrote [Field 4] State=0 in C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini Jump: 572 WriteINIStr: wrote [Field 5] State=1 in C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini Jump: 585 WriteINIStr: wrote [Field 6] State=0 in C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini Jump: 598 WriteINIStr: wrote [Field 7] State=1 in C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini Jump: 615 Call: 1209 File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\InstallOptions.dll" File: wrote 14848 to "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\InstallOptions.dll" Jump: 660 Jump: 670 New install of "Npcap 0.97" to "C:\Program Files\Npcap" Section: "WinPcap" Call: 1075 detailprint: Stopping the npf driver Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: wrote 6656 to "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" detailprint: Stopping the npcap driver Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) detailprint: Start setting system restore point: Before installation of Npcap 0.97 Call: 1209 File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll" File: wrote 5632 to "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll" Jump: 1152 Call: 766 CreateDirectory: "C:\Program Files\Npcap" (1) File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE" File: wrote 8870 to "C:\Program Files\Npcap\LICENSE" File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat" File: wrote 1034 to "C:\Program Files\Npcap\DiagReport.bat" File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1" File: wrote 8892 to "C:\Program Files\Npcap\DiagReport.ps1" File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall2.exe" File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall2.exe" File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe" File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall.exe" Call: 840 CreateDirectory: "C:\Program Files\Npcap" (1) File: overwriteflag=0, allowskipfilesflag=2, name="npf.sys" File: wrote 72400 to "C:\Program Files\Npcap\npf.sys" File: overwriteflag=0, allowskipfilesflag=2, name="npf.cat" File: wrote 10303 to "C:\Program Files\Npcap\npf.cat" File: overwriteflag=0, allowskipfilesflag=2, name="npf.inf" File: wrote 8632 to "C:\Program Files\Npcap\npf.inf" File: overwriteflag=0, allowskipfilesflag=2, name="npf_wfp.inf" File: wrote 2390 to "C:\Program Files\Npcap\npf_wfp.inf" File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys" File: wrote 72400 to "C:\Program Files\Npcap\npcap.sys" File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat" File: wrote 10323 to "C:\Program Files\Npcap\npcap.cat" File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf" File: wrote 8657 to "C:\Program Files\Npcap\npcap.inf" File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf" File: wrote 2404 to "C:\Program Files\Npcap\npcap_wfp.inf" CreateDirectory: "C:\Program Files\Npcap" (1) File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe" File: wrote 176664 to "C:\Program Files\Npcap\Uninstall.exe" detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10 Call: 778 CreateDirectory: "C:\Windows\system32" (1) File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 330960 to "C:\Windows\system32\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 163024 to "C:\Windows\system32\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 98000 to "C:\Windows\system32\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 64208 to "C:\Windows\system32\WlanHelper.exe" CreateDirectory: "C:\Windows\system32\Npcap" (1) CreateDirectory: "C:\Windows\system32\Npcap" created File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 330960 to "C:\Windows\system32\Npcap\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 165584 to "C:\Windows\system32\Npcap\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 98000 to "C:\Windows\system32\Npcap\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 64208 to "C:\Windows\system32\Npcap\WlanHelper.exe" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll" (overwriteflag=1) Call: 795 CreateDirectory: "C:\Windows\system32" (1) File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 376016 to "C:\Windows\system32\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 188112 to "C:\Windows\system32\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 110800 to "C:\Windows\system32\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 74448 to "C:\Windows\system32\WlanHelper.exe" CreateDirectory: "C:\Windows\system32\Npcap" (1) CreateDirectory: "C:\Windows\system32\Npcap" created File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll" File: wrote 376016 to "C:\Windows\system32\Npcap\wpcap.dll" File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll" File: wrote 192208 to "C:\Windows\system32\Npcap\Packet.dll" File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe" File: wrote 110800 to "C:\Windows\system32\Npcap\NpcapHelper.exe" File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe" File: wrote 74448 to "C:\Windows\system32\Npcap\WlanHelper.exe" Call: 940 WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001" Jump: 951 WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll" (overwriteflag=1) WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe"" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) detailprint: Writting service options to registry Call: 981 Call: 951 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf" "Start"="0x00000001" WriteRegStr: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "LoopbackAdapter"="\Device\{DE207534-4265-4C88-B23D-9729F12AE973}" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "LoopbackSupport"="0x00000001" Jump: 959 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "DltNull"="0x00000001" Jump: 963 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "AdminOnly"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "Dot11Support"="0x00000001" Jump: 971 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "VlanSupport"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters" "WinPcapCompatible"="0x00000001" Jump: 981 Call: 951 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001" WriteRegStr: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "LoopbackAdapter"="\Device\{DE207534-4265-4C88-B23D-9729F12AE973}" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "LoopbackSupport"="0x00000001" Jump: 959 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "DltNull"="0x00000001" Jump: 963 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "AdminOnly"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "Dot11Support"="0x00000001" Jump: 971 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "VlanSupport"="0x00000000" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "WinPcapCompatible"="0x00000001" Jump: 981 detailprint: Identify the wireless adapters and write them into the registry Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) Call: 690 Call: 868 CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1) File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-SHA1.cer" File: wrote 1320 to "C:\Users\user\AppData\Local\Temp\Insecure-SHA1.cer" Call: 1209 File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1) File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer" File: wrote 1526 to "C:\Users\user\AppData\Local\Temp\Insecure-EV.cer" Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) detailprint: The cache in driver store was cleared Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) Jump: 906 detailprint: The npcap service for Win7, Win8 and Win10 was successfully created Jump: 914 Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) Jump: 932 detailprint: Failed to create the npf service for Win7, Win8 and Win10 MessageBox: 0,"Failed to create the npf service for Win7, Win8 and Win10. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/" Call: 1094 WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf" "Start"="0x00000001" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf_wifi" "Start"="0x00000004" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001" WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "Start"="0x00000004" Call: 1036 detailprint: Starting the npf driver Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) detailprint: Starting the npcap driver Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) Call: 1209 File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll" (overwriteflag=1) Jump: 1189 WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayName"="Npcap 0.97" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayVersion"="0.97" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "Publisher"="Nmap Project" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLInfoAbout"="http://www.npcap.org" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLUpdateInfo"="http://www.npcap.org" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMajor"="0" WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMinor"="1" WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoModify"="0x00000001" WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoRepair"="0x00000001" detailprint: Finish setting system restore point: Before installation of Npcap 0.97 Call: 1209 File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll" File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll" (overwriteflag=1) Aborting: "" Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\final.ini") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\InstallOptions.dll") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\modern-header.bmp") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll") Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll") RMDir: RemoveDirectory("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\") On 11 January 2018 at 03:37, Leonidas Platonas <leonidas23.32 () gmail com> wrote:
hello there i cant install npcap on windows 7 "Failed to create the npf service for win7, win8 and win10" how do i solve this on windows 7? I found this but it didnt solve my issue : https://osqa-ask.wireshark.org/questions/45894/driver- signing-error-trying-to-install-npcap#fmanswer p.s.1 i need it to run in winpcap compatible mode. i added this in https://ask.wireshark.org/ also thanks
_______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/
Current thread:
- "Failed to create the npf service for win7, win8 and win10" Leonidas Platonas (Jan 16)
- Re: "Failed to create the npf service for win7, win8 and win10" Leonidas Platonas (Jan 16)
- Re: "Failed to create the npf service for win7, win8 and win10" Leonidas Platonas (Jan 16)
- Re: "Failed to create the npf service for win7, win8 and win10" Leonidas Platonas (Jan 16)