Re: "Failed to create the npf service for win7, win8 and win10"

Leonidas Platonas <[email protected]>
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CAMCE9zXk8LkzSvGhVgKd+0s8G0KiLwQhNuHH2w_SBYfxBWG8nA@mail.gmail.com> 
CreateDirectory: "C:\Program Files\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 8870 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1034 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 8892 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall2.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall2.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 840
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npf.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npf.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.cat"
File: wrote 10303 to "C:\Program Files\Npcap\npf.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.inf"
File: wrote 8632 to "C:\Program Files\Npcap\npf.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npf_wfp.inf"
File: wrote 2390 to "C:\Program Files\Npcap\npf_wfp.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10323 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8657 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2404 to "C:\Program Files\Npcap\npcap_wfp.inf"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 176664 to "C:\Program Files\Npcap\Uninstall.exe"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 778
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 163024 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 165584 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll"
(overwriteflag=1)
Call: 795
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 188112 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 192208 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 940
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap"
"WinPcapCompatible"="0x00000001"
Jump: 951
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll"
(overwriteflag=1)
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallPath"="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Writting service options to registry
Call: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackAdapter"="\Device\{A69A743B-252B-4F51-A84F-BD644ED283D5}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackAdapter"="\Device\{A69A743B-252B-4F51-A84F-BD644ED283D5}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
detailprint: Identify the wireless adapters and write them into the registry
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 690
Call: 868
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-SHA1.cer"
File: wrote 1320 to "C:\Users\user\AppData\Local\Temp\Insecure-SHA1.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1526 to "C:\Users\user\AppData\Local\Temp\Insecure-EV.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: The cache in driver store was cleared
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 906
detailprint: The npcap service for Win7, Win8 and Win10 was successfully
created
Jump: 914
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 932
detailprint: Failed to create the npf service for Win7, Win8 and Win10
MessageBox: 0,"Failed to create the npf service for Win7, Win8 and Win10.
Please try installing Npcap again, or use the latest official Npcap
installer from https://nmap.org/npcap/"
Call: 1094
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf_wifi"
"Start"="0x00000004"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi"
"Start"="0x00000004"
Call: 1036
detailprint: Starting the npf driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Starting the npcap driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 1189
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayName"="Npcap 0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayVersion"="0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"Publisher"="Nmap Project"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLInfoAbout"="http://www.npcap.org"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLUpdateInfo"="http://www.npcap.org"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMajor"="0"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMinor"="1"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoModify"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoRepair"="0x00000001"
detailprint: Finish setting system restore point: Before installation of
Npcap 0.97
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmE206.tmp\SysRestore.dll"
File: skipped:
"C:\Users\user\AppData\Local\Temp\nsmE206.tmp\SysRestore.dll"
(overwriteflag=1)
Aborting: ""
Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\final.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\InstallOptions.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\modern-header.bmp")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\nsExec.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\options.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\SysRestore.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\user\AppData\Local\Temp\nsmE206.tmp\")
Call: 722
Jump: 751
Jump: 754
detailprint: Windows CurrentVersion: 6.1 (Win7)
Call: 85
Call: 999
Jump: 1012
Jump: 1024
Jump: 1036
IfFileExists: file "C:\npcap_install_options.txt" does not exist, jumping
221
Call: 222
Jump: 239
Jump: 256
Call: 260
Jump: 350
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
MessageBox: 292,"Npcap 0.97 is already installed. Reinstall (possibly with
different options)?"
Jump: 489
settings logging to 0
logging set to 1
Call: 1209
File: overwriteflag=0, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\modern-header.bmp"
File: wrote 70976 to
"C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=1 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 529
WriteINIStr: wrote [Field 2] State=1 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 542
WriteINIStr: wrote [Field 3] State=1 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
WriteINIStr: wrote [Field 3] Flags=DISABLED in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 559
WriteINIStr: wrote [Field 4] State=0 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 572
WriteINIStr: wrote [Field 5] State=1 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 585
WriteINIStr: wrote [Field 6] State=0 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 598
WriteINIStr: wrote [Field 7] State=1 in
C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini
Jump: 615
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\InstallOptions.dll"
File: wrote 14848 to
"C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\InstallOptions.dll"
Jump: 660
Jump: 670
New install of "Npcap 0.97" to "C:\Program Files\Npcap"
Section: "WinPcap"
Call: 1075
detailprint: Stopping the npf driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: wrote 6656 to
"C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
detailprint: Stopping the npcap driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Start setting system restore point: Before installation of
Npcap 0.97
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll"
File: wrote 5632 to
"C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll"
Jump: 1152
Call: 766
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 8870 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1034 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 8892 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall2.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall2.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 840
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npf.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npf.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.cat"
File: wrote 10303 to "C:\Program Files\Npcap\npf.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.inf"
File: wrote 8632 to "C:\Program Files\Npcap\npf.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npf_wfp.inf"
File: wrote 2390 to "C:\Program Files\Npcap\npf_wfp.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10323 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8657 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2404 to "C:\Program Files\Npcap\npcap_wfp.inf"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 176664 to "C:\Program Files\Npcap\Uninstall.exe"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 778
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 163024 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 165584 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll"
(overwriteflag=1)
Call: 795
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 188112 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 192208 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 940
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap"
"WinPcapCompatible"="0x00000001"
Jump: 951
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll"
(overwriteflag=1)
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallPath"="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Writting service options to registry
Call: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackAdapter"="\Device\{E381E2DC-37D8-4F56-9BFB-92CB70821F22}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackAdapter"="\Device\{E381E2DC-37D8-4F56-9BFB-92CB70821F22}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
detailprint: Identify the wireless adapters and write them into the registry
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 690
Call: 868
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-SHA1.cer"
File: wrote 1320 to "C:\Users\user\AppData\Local\Temp\Insecure-SHA1.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1526 to "C:\Users\user\AppData\Local\Temp\Insecure-EV.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: The cache in driver store was cleared
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 906
detailprint: The npcap service for Win7, Win8 and Win10 was successfully
created
Jump: 914
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 932
detailprint: Failed to create the npf service for Win7, Win8 and Win10
MessageBox: 0,"Failed to create the npf service for Win7, Win8 and Win10.
Please try installing Npcap again, or use the latest official Npcap
installer from https://nmap.org/npcap/"
Call: 1094
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf_wifi"
"Start"="0x00000004"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi"
"Start"="0x00000004"
Call: 1036
detailprint: Starting the npf driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Starting the npcap driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 1189
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayName"="Npcap 0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayVersion"="0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"Publisher"="Nmap Project"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLInfoAbout"="http://www.npcap.org"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLUpdateInfo"="http://www.npcap.org"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMajor"="0"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMinor"="1"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoModify"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoRepair"="0x00000001"
detailprint: Finish setting system restore point: Before installation of
Npcap 0.97
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll"
File: skipped:
"C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll"
(overwriteflag=1)
Aborting: ""
Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\final.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\InstallOptions.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\modern-header.bmp")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\nsExec.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\options.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\SysRestore.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\user\AppData\Local\Temp\nsmBE70.tmp\")
Call: 722
Jump: 751
Jump: 754
detailprint: Windows CurrentVersion: 6.1 (Win7)
Call: 85
Call: 999
Jump: 1012
Jump: 1024
Jump: 1036
IfFileExists: file "C:\npcap_install_options.txt" does not exist, jumping
221
Call: 222
Jump: 239
Jump: 256
Call: 260
Jump: 350
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 260
Call: 1209
File: overwriteflag=0, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\modern-header.bmp"
File: wrote 70976 to
"C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=1 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 529
WriteINIStr: wrote [Field 2] State=1 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 542
WriteINIStr: wrote [Field 3] State=1 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
WriteINIStr: wrote [Field 3] Flags=DISABLED in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 559
WriteINIStr: wrote [Field 4] State=0 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 572
WriteINIStr: wrote [Field 5] State=1 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 585
WriteINIStr: wrote [Field 6] State=0 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 598
WriteINIStr: wrote [Field 7] State=1 in
C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini
Jump: 615
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\InstallOptions.dll"
File: wrote 14848 to
"C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\InstallOptions.dll"
Jump: 660
Jump: 670
New install of "Npcap 0.97" to "C:\Program Files\Npcap"
Section: "WinPcap"
Call: 1075
detailprint: Stopping the npf driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: wrote 6656 to
"C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
detailprint: Stopping the npcap driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Start setting system restore point: Before installation of
Npcap 0.97
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll"
File: wrote 5632 to
"C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll"
Jump: 1152
Call: 766
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 8870 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1034 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 8892 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall2.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall2.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 273616 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 840
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npf.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npf.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.cat"
File: wrote 10303 to "C:\Program Files\Npcap\npf.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npf.inf"
File: wrote 8632 to "C:\Program Files\Npcap\npf.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npf_wfp.inf"
File: wrote 2390 to "C:\Program Files\Npcap\npf_wfp.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 72400 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10323 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8657 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2404 to "C:\Program Files\Npcap\npcap_wfp.inf"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 176664 to "C:\Program Files\Npcap\Uninstall.exe"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 778
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 163024 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 330960 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 165584 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 98000 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 64208 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll"
(overwriteflag=1)
Call: 795
CreateDirectory: "C:\Windows\system32" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 188112 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 376016 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 192208 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 110800 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 74448 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 940
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap"
"WinPcapCompatible"="0x00000001"
Jump: 951
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll"
(overwriteflag=1)
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"UninstallPath"="C:\Program Files\Npcap"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Writting service options to registry
Call: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackAdapter"="\Device\{DE207534-4265-4C88-B23D-9729F12AE973}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
Call: 951
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegStr:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackAdapter"="\Device\{DE207534-4265-4C88-B23D-9729F12AE973}"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"LoopbackSupport"="0x00000001"
Jump: 959
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"DltNull"="0x00000001"
Jump: 963
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"AdminOnly"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"Dot11Support"="0x00000001"
Jump: 971
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"VlanSupport"="0x00000000"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters"
"WinPcapCompatible"="0x00000001"
Jump: 981
detailprint: Identify the wireless adapters and write them into the registry
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 690
Call: 868
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-SHA1.cer"
File: wrote 1320 to "C:\Users\user\AppData\Local\Temp\Insecure-SHA1.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
CreateDirectory: "C:\Users\user\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1526 to "C:\Users\user\AppData\Local\Temp\Insecure-EV.cer"
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: The cache in driver store was cleared
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 906
detailprint: The npcap service for Win7, Win8 and Win10 was successfully
created
Jump: 914
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 932
detailprint: Failed to create the npf service for Win7, Win8 and Win10
MessageBox: 0,"Failed to create the npf service for Win7, Win8 and Win10.
Please try installing Npcap again, or use the latest official Npcap
installer from https://nmap.org/npcap/"
Call: 1094
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npf_wifi"
"Start"="0x00000004"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap"
"Start"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi"
"Start"="0x00000004"
Call: 1036
detailprint: Starting the npf driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
detailprint: Starting the npcap driver
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Call: 1209
File: overwriteflag=1, allowskipfilesflag=0,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
File: skipped: "C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll"
(overwriteflag=1)
Jump: 1189
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayName"="Npcap 0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"DisplayVersion"="0.97"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"Publisher"="Nmap Project"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLInfoAbout"="http://www.npcap.org"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"URLUpdateInfo"="http://www.npcap.org"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMajor"="0"
WriteRegStr:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"VersionMinor"="1"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoModify"="0x00000001"
WriteRegDWORD:
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
"NoRepair"="0x00000001"
detailprint: Finish setting system restore point: Before installation of
Npcap 0.97
Call: 1209
File: overwriteflag=1, allowskipfilesflag=2,
name="C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll"
File: skipped:
"C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll"
(overwriteflag=1)
Aborting: ""
Delete: DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\final.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\InstallOptions.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\modern-header.bmp")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\nsExec.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\options.ini")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\SysRestore.dll")
Delete:
DeleteFile("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\user\AppData\Local\Temp\nsq33DE.tmp\")


On 11 January 2018 at 03:37, Leonidas Platonas <[email protected]>
wrote:

> hello there
>
> i cant install npcap on windows 7
>
> "Failed to create the npf service for win7, win8 and win10"     how do i
> solve this on windows 7?      I found this but it didnt solve my issue :
> https://osqa-ask.wireshark.org/questions/45894/driver-
> signing-error-trying-to-install-npcap#fmanswer
>
> p.s.1  i need it to run in winpcap compatible mode.
>
> i added this in https://ask.wireshark.org/  also
>
>
> thanks
>

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.