[Version]
Signature   = "$Windows NT$"
Class       = "ActivityMonitor"                         ;This is determined by the work this filter driver does
ClassGuid   = {b86dff51-a31e-4bac-b3cf-e8cfe75c9fc2}
Provider    = %ProviderName%
DriverVer   = 04/22/2014,8.17.0.0
CatalogFile = klif_sxs_sha1.cat
DriverPackageType=FileSystemFilter

[DestinationDirs]
DefaultDestDir = 12, %InstanceId%
klif.DriverFiles = 12, %InstanceId%                        ;%windir%\system32\drivers

[SourceDisksNames]
1 = %Disk1%

[SourceDisksFiles]
klif_sha1.sys = 1
klflt_sha1.sys = 1

;;
;; Default install sections
;;

[DefaultInstall]
OptionDesc          = %KlifServiceDesc%.%InstanceId%
CopyFiles           = Klif.DriverFiles

[DefaultInstall.ntamd64]
OptionDesc          = %KlifServiceDesc%.%InstanceId%
CopyFiles           = Klif.DriverFiles

[DefaultInstall.Services]
AddService          = %KlifServiceName%.%InstanceId%,,Klif.Service
AddService          = %KlfltServiceName%.%InstanceId%,,Klflt.Service

[DefaultInstall.ntamd64.Services]
AddService          = %KlifServiceName%.%InstanceId%,,Klif.Service
AddService          = %KlfltServiceName%.%InstanceId%,,Klflt.Service

;;
;; Default uninstall sections
;;

[DefaultUninstall]
DelFiles   = Klif.DriverFiles

[DefaultUninstall.ntamd64]
DelFiles   = Klif.DriverFiles

[DefaultUninstall.Services]
DelService = %KlifServiceName%.%InstanceId%,0x200    ;Ensure service is stopped before deleting
DelService = %KlfltServiceName%.%InstanceId%,0x200

[DefaultUninstall.ntamd64.Services]
DelService = %KlifServiceName%.%InstanceId%,0x200    ;Ensure service is stopped before deleting
DelService = %KlfltServiceName%.%InstanceId%,0x200

;
; Services Section
;

[Klif.Service]
DisplayName      = %KlifDisplayName%.%InstanceId%
Description      = %KlifServiceDesc%.%InstanceId%
ServiceBinary    = %12%\%InstanceId%\klif.sys                ;%windir%\system32\drivers\klif.sys
Dependencies     = %FltmgrServiceName%, %KlfltServiceName%.%InstanceId%
ServiceType      = 2                            ;SERVICE_FILE_SYSTEM_DRIVER
StartType        = 1                            ;SERVICE_SYSTEM_START
ErrorControl     = 1                            ;SERVICE_ERROR_NORMAL
LoadOrderGroup   = "FSFilter Anti-Virus"
AddReg           = Klif.AddRegistry

[Klflt.Service]
DisplayName      = %KlfltDisplayName%.%InstanceId%
Description      = %KlfltServiceDesc%.%InstanceId%
ServiceBinary    = %12%\%InstanceId%\klflt.sys               ;%windir%\system32\drivers\klflt.sys
ServiceType      = 1                            ;SERVICE_KERNEL_DRIVER
StartType        = 1                            ;SERVICE_SYSTEM_START
ErrorControl     = 1                            ;SERVICE_ERROR_NORMAL
LoadOrderGroup   = FSFilter Bottom
AddReg           = Klflt.AddRegistry

;
; Registry Modifications
;

[Klif.AddRegistry]
HKR,%RegInstancesSubkeyName%,%RegDefaultInstanceValueName%,0x00000000,%DefaultInstance%.%InstanceId%
HKR,%RegInstancesSubkeyName%"\"%Instance1.Name%.%InstanceId%,%RegAltitudeValueName%,0x00000000,%Instance1.Altitude%.%AltitudeSuffix%
HKR,%RegInstancesSubkeyName%"\"%Instance1.Name%.%InstanceId%,%RegFlagsValueName%,0x00010001,%Instance1.Flags%
HKR,,"SupportedFeatures",0x00010001,0x8   ;SUPPORTED_FS_FEATURES_BYPASS_IO
HKLM,"SYSTEM\CurrentControlSet\Services\klif.%InstanceId%\Parameters","InstanceId",0,%InstanceId%   ;FLG_ADDREG_TYPE_SZ

[Klflt.AddRegistry]
HKLM,"SYSTEM\CurrentControlSet\Services\klflt.%InstanceId%\Parameters"
HKLM,"SYSTEM\CurrentControlSet\Services\klflt.%InstanceId%\Parameters\ClientData"
HKLM,"SYSTEM\CurrentControlSet\Services\klflt.%InstanceId%\Parameters\CollectionData"
HKLM,"SYSTEM\CurrentControlSet\Services\klflt.%InstanceId%\Parameters","InstanceId",0,%InstanceId%   ;FLG_ADDREG_TYPE_SZ

;
; Copy Files
;

[Klif.DriverFiles]
klif.sys,klif_sha1.sys,,0x00016002   ; (DELFLG_IN_USE1 | COPYFLG_IN_USE_RENAME | COPYFLG_NOPRUNE | COPYFLG_NOSKIP)
klflt.sys,klflt_sha1.sys,,0x00016002  ; (DELFLG_IN_USE1 | COPYFLG_IN_USE_RENAME | COPYFLG_NOPRUNE | COPYFLG_NOSKIP)

;;
;; String Section
;;

[Strings]
InstanceId         = "K4W-21-26"
AltitudeSuffix     = "17835273241"

ProviderName       = "Kaspersky"
KlifDisplayName    = "Kaspersky Driver"
KlifServiceDesc    = "Kaspersky Interceptor and Filter"
KlifServiceName    = "KLIF"
KlfltDisplayName   = "Kaspersky Kernel DLL"
KlfltServiceDesc   = "Kaspersky Filter Core"
KlfltServiceName   = "klflt"
FltmgrServiceName                   = "FltMgr"
RegInstancesSubkeyName              = "Instances"
RegDefaultInstanceValueName         = "DefaultInstance"
RegAltitudeValueName                = "Altitude"
RegFlagsValueName                   = "Flags"
Disk1                               = "Klif Source"

;Instances specific information.
DefaultInstance      = "KLIF"
Instance1.Name       = "KLIF"
Instance1.Altitude   = "320400"
Instance1.Flags      = 0x0