Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
[npcap] Wireshark + Avast Anti-Virus = BSOD (IRQL_NOT_LESS_OR_EQUAL) #1681
Its been a full day of debugging and testing. I have gotten over 20 BSOD with the same error msg.
I have installed Wireshark + npcap. Whenever I restart/shutdown/go to adapter properties/shift+restart/uninstall driver/update driver/uninstall VMware/ ...anything related to network adapters I will BSOD. I have also tried safe mode to remove the adapters but they also give me the same BSOD.
Went to my 20 minidumps found the same error with "ndis.sys". In event viewer there was an error
The following boot-start or system driver did not load:
After 6 hours, I found this https://www.bleepingcomputer.com/forums/t/701547/bsod-when-shutting-down-or-restarting/
I uninstalled Avast, tried restarting, BSOD, installed Wireshark + npcap again, restarted, no BSOD this time, uninstalled wireshark + npcap (properly this time, without BSOD), restarted computer again without BSOD.
I believe the many BSOD (IRQL_NOT_LESS_OR_EQUAL BSOD) issues users are having is with Avast anti-virus.
I was just wondering are there any adapters that don't get cleaned out by the uninstaller? or any extra files/services npcap is running even after uninstall?
I installed npcap when I installed wireshark. I found that wireshark wouldn't work the way I wanted it to so I uninstalled it. After that I found that everytime I reboot my computer I get the BSOD with the following message: IRQL NOT LESS OR EQUAL. Nothing followed, just that. I found what I believe to be the problem: Device Manager > Network adapters > Npcap Loopback Adapter. My every attempt to uninstall, disable, or others remove it results in the same BSOD. I can't even go into Safe Mode. I am just short of using Windows Recovery. Please help me get rid of this. Until it's gone, I can't run diagnostics, create an image, etc.
I'm not the dev but can you upload your minidump and also remove avast. If you can I recommend re-installing Wireshark with npcap. Then restarting computer. Then uninstalling it.