On Fri, May 18, 2012 at 4:12 PM, Jay Kay <[email protected]> wrote: > Michael, > > Thanks for the quick reply. > > I downloaded the suite, started the install and ran procmon.exe as you > instructed. It was going a little slow at first, but soon after clicking > "Filter" it hit a BSoD. After my system restarted I tried running procmon > again (forgetting to start the installation first though) and it almost > immediately hit the BSoD again. I then tested it in safe mode out of > curiosity but apparently a necessary driver is missing when in that mode, > but it didn't crash it. > > Any other suggestions or reasons why procmon could have crashed the system? > That is the first time this has happened to it. It was such a good idea, > too. I should probably also note that I'm running 64-bit Windows and 2GB of > RAM. > > Thanks, > - Jay > > > On Fri, May 18, 2012 at 12:15 AM, Michael Lehr <[email protected]> > wrote: >> >> Jay, >> >> I don't really know the answer specifically for winpcap, but generally I >> would use the sysinternals suite, start the install, run procmon (filter on >> the install application), do the install, and see what files & registry keys >> it is accessing to make its decision. Maybe there is still something >> lingering. >> >> http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx >> >> Michael Lehr >> >> >> On Fri, May 18, 2012 at 12:35 AM, Jay Kay <[email protected]> wrote: >>> >>> Hi again, >>> >>> I sent this (below) into the mailing list about a month ago. I still >>> haven't figured out the problem. Any help would be vastly appreciated. >>> >>> Oh, I'm also running Windows 7 if that helps. >>> >>> Thanks again, >>> - Jay >>> >>> ___ >>> >>>> Hi, >>>> >>>> I've had WinPcap installed on my computer before but uninstalled it at >>>> some point, or so I thought. I recently tried reinstalling WinPcap 4.1.2, >>>> but whenever I do, I get the message: >>>> >>>> "A previous version of WinPCap has been detected on the system and >>>> cannot be removed because in use by another application. Please close all >>>> the WinPcap-based applications and run the installer again." >>>> >>>> One problem: I can't seem to find any traces of WinPcap on my computer. >>>> No uninstallation executables, no DLLs, no registry keys. What's even >>>> more >>>> interesting is the fact that Wireshark denies its existence, SmartSniff >>>> seems to recognise its presence but can't seem to use it and Cain can use >>>> it >>>> with absolutely no problems. >>>> >>>> I've tried everything I could dig up but to no avail, and I was hoping >>>> that someone here could help me. Any suggestions? >>>> >>>> Thanks! >>>> - Jay >>> >>> >>> >>> _______________________________________________ >>> Winpcap-users mailing list >>> [email protected] >>> https://www.winpcap.org/mailman/listinfo/winpcap-users >>> >> >> >> _______________________________________________ >> Winpcap-users mailing list >> [email protected] >> https://www.winpcap.org/mailman/listinfo/winpcap-users >> > > > _______________________________________________ > Winpcap-users mailing list > [email protected] > https://www.winpcap.org/mailman/listinfo/winpcap-users >
Jay, Firstly, reboot your computer. Then, run Device Manager, enable "Show Hidden Devices" by click on View -> Show Hidden Devices, Then, in "Non-Plug and Play Drivers", look for "NetGroup Packet Filter Driver", see whether it is there or not. Regards, Just call me Mr. Chin _______________________________________________ Winpcap-users mailing list [email protected] https://www.winpcap.org/mailman/listinfo/winpcap-users
