Good morning all, I'm currently trying to update my 2008 R2 server to the latest stable Wireshark release (2.0.4 64 bit), however I keep getting the error "Wireshark or one of its associated programs is running". I've also tried uninstalling the current version 2.0.3 using the uninstall.exe and the registry uninstall string, but it says that rawshark.exe is in use. The Wireshark folder had rawshark.exe, but the uninstall.exe removed it and then states that it's in use and won't complete the uninstall process. I've done all of the above using administrative rights on the server, and I don't see rawshark, tshark, or dumpcap running in task manager under any user on this server. What could be causing this uninstall to fail? asked 08 Jul '16, 05:14  Woody87 edited 08 Jul '16, 06:55 |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
Somewhat similar to this question. Can you try the suggestion in my answer there?
I've downloaded and tried the Process Explorer fix listed in the link you posted, but couldn't find anything running under "wireshark-is-running" or any other wireshark-based processes.
It's not a process, but a mutex, hence the need to search for a "Handle or DLL ...".
Did you run Process Explorer as an admin, i.e. under the Process Explorer File menu there should not be an item "Show Details for All Processes"?