;;; ;;; ;;; ;;; ;;; ;;; [Version] Signature = "$Windows NT$" Class = "ActivityMonitor" ;This is determined by the work this filter driver does ClassGuid = {b86dff51-a31e-4bac-b3cf-e8cfe75c9fc2} Provider = %KasperskyLab% DriverVer= 04/17/2014,8.15.0.202 ;mm/dd/yy CatalogFile = klifsm.cat DriverPackageType=FileSystemFilter [DestinationDirs] DefaultDestDir = 12 klifsm.DriverFiles = 12 ;%windir%\system32\drivers [SourceDisksNames] 1 = %Disk1% [SourceDisksFiles] klifsm.sys = 1 klfltsm.sys = 1 ;; ;; Default install sections ;; [DefaultInstall] OptionDesc = %KlifSmServiceDesc% CopyFiles = KlifSm.DriverFiles [DefaultInstall.ntamd64] OptionDesc = %KlifSmServiceDesc% CopyFiles = KlifSm.DriverFiles [DefaultInstall.Services] AddService = %KlifSmServiceName%,,KlifSm.Service AddService = %KlfltSmServiceName%,,KlfltSm.Service [DefaultInstall.ntamd64.Services] AddService = %KlifSmServiceName%,,KlifSm.Service AddService = %KlfltSmServiceName%,,KlfltSm.Service ;; ;; Default uninstall sections ;; [DefaultUninstall] DelFiles = KlifSm.DriverFiles [DefaultUninstall.ntamd64] DelFiles = KlifSm.DriverFiles [DefaultUninstall.Services] DelService = %KlifSmServiceName%,0x200 ;Ensure service is stopped before deleting DelService = %KlfltSmServiceName%,0x200 [DefaultUninstall.ntamd64.Services] DelService = %KlifSmServiceName%,0x200 ;Ensure service is stopped before deleting DelService = %KlfltSmServiceName%,0x200 ; ; Services Section ; [KlifSm.Service] DisplayName = %KlifSmDisplayName% Description = %KlifSmServiceDesc% ServiceBinary = %12%\klifsm.sys ;%windir%\system32\drivers\klifsm.sys Dependencies = %FltmgrServiceName% ;FltMgr ServiceType = 2 ;SERVICE_FILE_SYSTEM_DRIVER StartType = 1 ;SERVICE_SYSTEM_START ErrorControl = 1 ;SERVICE_ERROR_NORMAL LoadOrderGroup = "FSFilter Activity Monitor" AddReg = KlifSm.AddRegistry [KlfltSm.Service] DisplayName = %KlfltSmDisplayName% Description = %KlfltSmServiceDesc% ServiceBinary = %12%\klfltsm.sys ;%windir%\system32\drivers\klfltsm.sys ServiceType = 1 ;SERVICE_KERNEL_DRIVER StartType = 3 ;SERVICE_DEMAND_START ErrorControl = 1 ;SERVICE_ERROR_NORMAL AddReg = KlfltSm.AddRegistry ; ; Registry Modifications ; [KlifSm.AddRegistry] HKR,%RegInstancesSubkeyName%,%RegDefaultInstanceValueName%,0x00000000,%DefaultInstance% HKR,%RegInstancesSubkeyName%"\"%Instance1.Name%,%RegAltitudeValueName%,0x00000000,%Instance1.Altitude% HKR,%RegInstancesSubkeyName%"\"%Instance1.Name%,%RegFlagsValueName%,0x00010001,%Instance1.Flags% HKR,"Parameters","NoUniHooks",0x00010001,0x00000001 HKR,"Parameters","AttachToNpfsDisabled",0x00010001,0x00000001 HKR,"Parameters","OASPermanentCacheDisabled",0x00010001,0x00000001 HKR,"Parameters","SysPatch",0x00010001,0x00000001 [KlfltSm.AddRegistry] HKLM,"SYSTEM\CurrentControlSet\Services\klfltsm\Parameters\ClientData" HKLM,"SYSTEM\CurrentControlSet\Services\klfltsm\Parameters\CollectionData" ; ; Copy Files ; [KlifSm.DriverFiles] klifsm.sys,,,2 klfltsm.sys,,,2 ;; ;; String Section ;; [Strings] KasperskyLab = "Kaspersky Lab" KlifSmDisplayName = "Kaspersky Lab SafeMoney Driver" KlifSmServiceDesc = "Kaspersky Lab SafeMoney Interceptor and Filter" KlifSmServiceName = "KLIFSM" KlfltSmDisplayName = "Kaspersky Lab SafeMoney Kernel DLL" KlfltSmServiceDesc = "Kaspersky Lab SafeMoney Filter Core" KlfltSmServiceName = "klfltsm" FltmgrServiceName = "FltMgr" RegInstancesSubkeyName = "Instances" RegDefaultInstanceValueName = "DefaultInstance" RegAltitudeValueName = "Altitude" RegFlagsValueName = "Flags" Disk1 = "KlifSm Source" ;Instances specific information. DefaultInstance = "KLIFSM" Instance1.Name = "KLIFSM" Instance1.Altitude = "362900" Instance1.Flags = 0x0