Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

winpcap error


  • Please log in to reply

#1
nordvark

nordvark

    Member

  • Member
  • PipPipPip
  • 558 posts

Hi, I'm currently in Geek uni and looking at a FRST log file from a win7 pro 64 pc and under system errors is listed

 

The WinPcap Packet Driver (NPF) service failed to start due to the following error:
%%2

 

I do not believe this is a malware issue, but guessing it might be yet another lingering relic from my trial of "Private Internet Access" a vpn service which has left mess everywhere.

 

A little research has revealed there is 3 entries for winpcap in the registry under services/npf, and the path shown is Windows/sys32/drivers/npf.sys. That file does not exist on 3 of my win7 pc's. Im now assuming when I uninstalled (haha) private internet access it took the file out without taking the corresponding regfiles. 

 

Does my theory stand up? and thanks

 

PS: this is not a practice log question of any sort.


Edited by nordvark, 21 June 2015 - 12:40 AM.

  • 0

Advertisements


#2
azarl

azarl

    GeekU Admin

  • Administrator
  • 25,310 posts

Winpcap is not part of WIndows. It's used by network applications that require packet capture, filtering and injection (Wireshark uses it I think). If you have no apps that use it, you can uninstall


  • 0

#3
Ztruker

Ztruker

    Member 5k

  • Technician
  • 7,090 posts

Web page for it is here: http://www.winpcap.org/


  • 0

#4
nordvark

nordvark

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 558 posts

Winpcap is not part of WIndows. It's used by network applications that require packet capture, filtering and injection (Wireshark uses it I think). If you have no apps that use it, you can uninstall

Theres nothing to uninstall, never had wireshark. Im thinking it was part of Private internet access, but then I dont know for sure. I have since backed up and removed the registry references to it. Will watch for a while before deleting the reg backups.

 

I see youre involved in the malware side of things here even though im yet to inflict myself upon you. Can I ask what maybe a stupid question? Even though Im currently working with otl and hjt logs, I have however been playing with frst logs to look at the differences. I notice with frst logs there are the latest 10 errors listed in a logfile. Is there a way to clear those errors from the pc to start fresh. With regard to the winpcap error, there is no reference i can find of it in my event viewer logs.

 

Thank you.


  • 0

#5
nordvark

nordvark

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 558 posts


Web page for it is here: http://www.winpcap.org/

Thank you for the link, although I did look at the site before deciding to backup and remove the registry entries for winpcap.

 

I also found this link supposedly listing all applications that use it WinPcap · Links Dont know how accurate that list is but Ive never used any of the listed software. The only network scanning tool I ever use is a portable app called netscan because I have an extensive wired home network and sometimes I need to remind myself of an IP.

 

Thanks again


  • 0

#6
azarl

azarl

    GeekU Admin

  • Administrator
  • 25,310 posts

Theres nothing to uninstall, never had wireshark. Im thinking it was part of Private internet access, but then I dont know for sure. I have since backed up and removed the registry references to it. Will watch for a while before deleting the reg backups.

 

Winpcap  usually has it's own uninstaller
 

I see youre involved in the malware side of things here even though im yet to inflict myself upon you. Can I ask what maybe a stupid question? Even though Im currently working with otl and hjt logs, I have however been playing with frst logs to look at the differences. I notice with frst logs there are the latest 10 errors listed in a logfile. Is there a way to clear those errors from the pc to start fresh. With regard to the winpcap error, there is no reference i can find of it in my event viewer logs.
 
Thank you.

 

Take a look at http://www.sevenforu...all-events.html


  • 0

#7
Ztruker

Ztruker

    Member 5k

  • Technician
  • 7,090 posts

Post #7 in that thread provides a little batch file that clears all event viewer areas. Works great.


  • 0

#8
nordvark

nordvark

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 558 posts

 

Post #7 in that thread provides a little batch file that clears all event viewer areas. Works great.

 

Thank you both, even though I couldn't see a relationship in any event logs clearing them also removed removed them from a fresh FRST scan.

 

Thank you both, slowly learning. :spoton:


  • 0

#9
azarl

azarl

    GeekU Admin

  • Administrator
  • 25,310 posts

Me too :lol:


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP