;;; ;;; ;;; ;;; ;;; ;;; [Version] Signature = "$Windows NT$" Class = "ActivityMonitor" ;This is determined by the work this filter driver does ClassGuid = {b86dff51-a31e-4bac-b3cf-e8cfe75c9fc2} Provider = %KasperskyLab% DriverVer = 12/16/2020,30.568.0.420 CatalogFile = klifks.cat DriverPackageType=FileSystemFilter [DestinationDirs] DefaultDestDir = 12 klifks.DriverFiles = 12 ;%windir%\system32\drivers [SourceDisksNames] 1 = %Disk1% [SourceDisksFiles] klifks.sys = 1 klfltks.sys = 1 ;; ;; Default install sections ;; [DefaultInstall] OptionDesc = %klifksServiceDesc% CopyFiles = klifks.DriverFiles [DefaultInstall.ntamd64] OptionDesc = %klifksServiceDesc% CopyFiles = klifks.DriverFiles [DefaultInstall.Services] AddService = %klifksServiceName%,,klifks.Service AddService = %KlfltKsServiceName%,,KlfltKs.Service [DefaultInstall.ntamd64.Services] AddService = %klifksServiceName%,,klifks.Service AddService = %KlfltKsServiceName%,,KlfltKs.Service ;; ;; Default uninstall sections ;; [DefaultUninstall] DelFiles = klifks.DriverFiles [DefaultUninstall.ntamd64] DelFiles = klifks.DriverFiles [DefaultUninstall.Services] DelService = %klifksServiceName%,0x200 ;Ensure service is stopped before deleting DelService = %KlfltKsServiceName%,0x200 [DefaultUninstall.ntamd64.Services] DelService = %klifksServiceName%,0x200 ;Ensure service is stopped before deleting DelService = %KlfltKsServiceName%,0x200 ; ; Services Section ; [klifks.Service] DisplayName = %klifksDisplayName% Description = %klifksServiceDesc% ServiceBinary = %12%\klifks.sys ;%windir%\system32\drivers\klifks.sys Dependencies = %FltmgrServiceName%, %KlfltksServiceName% ServiceType = 2 ;SERVICE_FILE_SYSTEM_DRIVER StartType = 1 ;SERVICE_SYSTEM_START ErrorControl = 1 ;SERVICE_ERROR_NORMAL LoadOrderGroup = "FSFilter Anti-Virus" AddReg = klifks.AddRegistry [KlfltKs.Service] DisplayName = %KlfltKsDisplayName% Description = %KlfltKsServiceDesc% ServiceBinary = %12%\klfltks.sys ;%windir%\system32\drivers\klfltks.sys ServiceType = 1 ;SERVICE_KERNEL_DRIVER StartType = 1 ;SERVICE_SYSTEM_START ErrorControl = 1 ;SERVICE_ERROR_NORMAL LoadOrderGroup = FSFilter Bottom AddReg = KlfltKs.AddRegistry ; ; Registry Modifications ; [klifks.AddRegistry] HKR,%RegInstancesSubkeyName%,%RegDefaultInstanceValueName%,0x00000000,%DefaultInstance% HKR,%RegInstancesSubkeyName%"\"%Instance1.Name%,%RegAltitudeValueName%,0x00000000,%Instance1.Altitude% HKR,%RegInstancesSubkeyName%"\"%Instance1.Name%,%RegFlagsValueName%,0x00010001,%Instance1.Flags% HKR,"Parameters","NoUniHooks",0x00010001,0x00000001 HKR,"Parameters","AttachToNpfsDisabled",0x00010001,0x00000001 HKR,"Parameters","SysPatch",0x00010001,0x00000001 [KlfltKs.AddRegistry] HKLM,"SYSTEM\CurrentControlSet\Services\klfltks\Parameters" HKLM,"SYSTEM\CurrentControlSet\Services\klfltks\Parameters\ClientData" HKLM,"SYSTEM\CurrentControlSet\Services\klfltks\Parameters\CollectionData" ; ; Copy Files ; [klifks.DriverFiles] klifks.sys,,,0x00016002 ; (DELFLG_IN_USE1 | COPYFLG_IN_USE_RENAME | COPYFLG_NOPRUNE | COPYFLG_NOSKIP) klfltks.sys,,,0x00016002 ; (DELFLG_IN_USE1 | COPYFLG_IN_USE_RENAME | COPYFLG_NOPRUNE | COPYFLG_NOSKIP) ;; ;; String Section ;; [Strings] KasperskyLab = "Kaspersky Lab" klifksDisplayName = "Kaspersky Lab KidSafe Driver" klifksServiceDesc = "Kaspersky Lab KidSafe Interceptor and Filter" klifksServiceName = "klifks" KlfltKsDisplayName = "Kaspersky Lab KidSafe Kernel DLL" KlfltKsServiceDesc = "Kaspersky Lab KidSafe Filter Core" KlfltKsServiceName = "klfltks" FltmgrServiceName = "FltMgr" RegInstancesSubkeyName = "Instances" RegDefaultInstanceValueName = "DefaultInstance" RegAltitudeValueName = "Altitude" RegFlagsValueName = "Flags" Disk1 = "klifks Source" ;Instances specific information. DefaultInstance = "klifks" Instance1.Name = "klifks" Instance1.Altitude = "362902" Instance1.Flags = 0x0