;Copyright (c) 1996-2024 Kaspersky Lab, CHSC. All rights Reserved

[Version]
Signature   = "$Windows NT$"
Class       = "ActivityMonitor"                         ;This is determined by the work this filter driver does
ClassGuid   = {b86dff51-a31e-4bac-b3cf-e8cfe75c9fc2}    ;Class = ActivityMonitor
Provider    = %MfgName%
CatalogFile = %ImageName%.cat ; Catalog files are supplied by the Microsoft Windows Hardware Quality Lab (WHQL)
DriverVer = 10/23/2024,18.0.147.0

;; Default install sections
[DefaultInstall.NTx86]
OptionDesc  = %ServiceDesc%
CopyFiles   = DriverFiles

[DefaultInstall.NTamd64]
OptionDesc  = %ServiceDesc%
CopyFiles   = DriverFiles

[DefaultInstall.NTx86.Services]
AddService  = %ServiceName%,,Service

[DefaultInstall.NTamd64.Services]
AddService  = %ServiceName%,,Service

;; Default uninstall sections
[DefaultUninstall.NTx86]
DelFiles    = DriverFiles

[DefaultUninstall.NTamd64]
DelFiles    = DriverFiles

[DefaultUninstall.NTx86.Services]
DelService  = %ServiceName%,0x200    ;Stop the service before deleting it

[DefaultUninstall.NTamd64.Services]
DelService  = %ServiceName%,0x200    ;Stop the service before deleting it

[DestinationDirs]
DriverFiles    = 12 ;%windir%\system32\drivers
DefaultDestDir = 12

[SourceDisksNames]
1 = %Disk1%

[SourceDisksFiles]
klelam.sys = 1

;; Services Section
[Service]
DisplayName = %ServiceName%
Description = %ServiceDesc%
ServiceBinary = %12%\%ImageName%.sys ;%windir%\system32\drivers\klelam.sys
ServiceType = 1                   ; SERVICE_KERNEL_DRIVER
StartType   = 0                   ; SERVICE_BOOT_START
ErrorControl= 3                   ; SERVICE_ERROR_CRITICAL
LoadOrderGroup = "Early-Launch"
AddReg      = AddRegistry

[AddRegistry]
HKLM,"SYSTEM\CurrentControlSet\Services\klelam\Parameters"
HKR,"Parameters\Journal",,0x00000010,

;; Copy Files
[DriverFiles]
%ImageName%.sys,,,0x00016002   ; (DELFLG_IN_USE1 | COPYFLG_IN_USE_RENAME | COPYFLG_NOPRUNE | COPYFLG_NOSKIP)

[SignatureAttributes] 
klelam.sys = SignatureAttributes.Elam  

[SignatureAttributes.Elam] 
Elam=true

;; String Section
[Strings]
MfgName     = "Kaspersky Lab, CHSC."
ServiceName = "klelam"
ServiceDesc = "Kaspersky Lab Real Time Protection Component"
ImageName   = "klelam"
Disk1       = "klelam Source Media"