This is just a minor thing - if npcap is reinstalled it de-installs the previous version. This fails if wlanhelper.exe is still running in interactive mode, for obvious reasons. Maybe a check could be added to see if wlanhelper is still running and prompting for a close, just like it does for wireshark.exe?