;;;
;;; 
;;;
;;;
;;; 
;;;

[Version]
Signature   = "$Windows NT$"
Class       = "ActivityMonitor"                         ;This is determined by the work this filter driver does
ClassGuid   = {b86dff51-a31e-4bac-b3cf-e8cfe75c9fc2}
Provider    = %KasperskyLab%
DriverVer   = 02/20/2016,10.0.0.1547            ;mm/dd/yy
CatalogFile = klif.cat
DriverPackageType=FileSystemFilter

[DestinationDirs]
DefaultDestDir = 12
klif.DriverFiles = 12                        ;%windir%\system32\drivers

[SourceDisksNames]
1 = %Disk1%

[SourceDisksFiles]
klif.sys = 1
klflt.sys = 1

;;
;; Default install sections
;;

[DefaultInstall]
OptionDesc          = %KlifServiceDesc%
CopyFiles           = Klif.DriverFiles

[DefaultInstall.ntamd64]
OptionDesc          = %KlifServiceDesc%
CopyFiles           = Klif.DriverFiles

[DefaultInstall.Services]
AddService          = %KlifServiceName%,,Klif.Service
AddService          = %KlfltServiceName%,,Klflt.Service

[DefaultInstall.ntamd64.Services]
AddService          = %KlifServiceName%,,Klif.Service
AddService          = %KlfltServiceName%,,Klflt.Service

;;
;; Default uninstall sections
;;

[DefaultUninstall]
DelFiles   = Klif.DriverFiles

[DefaultUninstall.ntamd64]
DelFiles   = Klif.DriverFiles

[DefaultUninstall.Services]
DelService = %KlifServiceName%,0x200    ;Ensure service is stopped before deleting
DelService = %KlfltServiceName%,0x200

[DefaultUninstall.ntamd64.Services]
DelService = %KlifServiceName%,0x200    ;Ensure service is stopped before deleting
DelService = %KlfltServiceName%,0x200

;
; Services Section
;

[Klif.Service]
DisplayName      = %KlifDisplayName%
Description      = %KlifServiceDesc%
ServiceBinary    = %12%\klif.sys                ;%windir%\system32\drivers\klif.sys
Dependencies     = %FltmgrServiceName%,klhk     ;FltMgr
ServiceType      = 2                            ;SERVICE_FILE_SYSTEM_DRIVER
StartType        = 1                            ;SERVICE_SYSTEM_START
ErrorControl     = 1                            ;SERVICE_ERROR_NORMAL
LoadOrderGroup   = "FSFilter Activity Monitor"
AddReg           = Klif.AddRegistry

[Klflt.Service]
DisplayName      = %KlfltDisplayName%
Description      = %KlfltServiceDesc%
ServiceBinary    = %12%\klflt.sys               ;%windir%\system32\drivers\klflt.sys
ServiceType      = 1                            ;SERVICE_KERNEL_DRIVER
StartType        = 3                            ;SERVICE_DEMAND_START
ErrorControl     = 1                            ;SERVICE_ERROR_NORMAL
AddReg           = Klflt.AddRegistry

;
; Registry Modifications
;

[Klif.AddRegistry]
HKR,%RegInstancesSubkeyName%,%RegDefaultInstanceValueName%,0x00000000,%DefaultInstance%
HKR,%RegInstancesSubkeyName%"\"%Instance1.Name%,%RegAltitudeValueName%,0x00000000,%Instance1.Altitude%
HKR,%RegInstancesSubkeyName%"\"%Instance1.Name%,%RegFlagsValueName%,0x00010001,%Instance1.Flags%

[Klflt.AddRegistry]
HKLM,"SYSTEM\CurrentControlSet\Services\klflt\Parameters"
HKLM,"SYSTEM\CurrentControlSet\Services\klflt\Parameters\ClientData"
HKLM,"SYSTEM\CurrentControlSet\Services\klflt\Parameters\CollectionData"

;
; Copy Files
;

[Klif.DriverFiles]
klif.sys,,,0x00016002   ; (DELFLG_IN_USE1 | COPYFLG_IN_USE_RENAME | COPYFLG_NOPRUNE | COPYFLG_NOSKIP)
klflt.sys,,,0x00016002  ; (DELFLG_IN_USE1 | COPYFLG_IN_USE_RENAME | COPYFLG_NOPRUNE | COPYFLG_NOSKIP)

;;
;; String Section
;;

[Strings]
KasperskyLab       = "Kaspersky Lab"
KlifDisplayName    = "Kaspersky Lab Driver"
KlifServiceDesc    = "Kaspersky Lab Interceptor and Filter"
KlifServiceName    = "KLIF"
KlfltDisplayName   = "Kaspersky Lab Kernel DLL"
KlfltServiceDesc   = "Kaspersky Lab Filter Core"
KlfltServiceName   = "klflt"
FltmgrServiceName                   = "FltMgr"
RegInstancesSubkeyName              = "Instances"
RegDefaultInstanceValueName         = "DefaultInstance"
RegAltitudeValueName                = "Altitude"
RegFlagsValueName                   = "Flags"
Disk1                               = "Klif Source"

;Instances specific information.
DefaultInstance      = "KLIF"
Instance1.Name       = "KLIF"
Instance1.Altitude   = "320400"
Instance1.Flags      = 0x0