;Copyright (c) 1996-2011 Kaspersky Lab, CHSC. All rights Reserved [Version] Signature = "$Windows NT$" Class = "ActivityMonitor" ;This is determined by the work this filter driver does ClassGuid = {b86dff51-a31e-4bac-b3cf-e8cfe75c9fc2} ;Class = ActivityMonitor Provider = %MfgName% ;CatalogFile = %ImageName%.cat ; Catalog files are supplied by the Microsoft Windows Hardware Quality Lab (WHQL) DriverVer= 04/01/2013,1.0.0.121 ;mm/dd/yy CatalogFile.ntamd64 = klelam.cat [Manufacturer] %MfgName%=ModelSection,ntamd64 [ModelSection] %ServiceDesc%=DefaultInstall,%ServiceName% [ModelSection.ntamd64] %ServiceDesc%=DefaultInstall,%ServiceName% ;; Default install sections [DefaultInstall] OptionDesc = %ServiceDesc% CopyFiles = DriverFiles [DefaultInstall.ntamd64] OptionDesc = %ServiceDesc% CopyFiles = DriverFiles [DefaultInstall.Services] AddService = %ServiceName%,,Service [DefaultInstall.ntamd64.Services] AddService = %ServiceName%,,Service ;; Default uninstall sections [DefaultUninstall] DelFiles = DriverFiles DelReg = DelRegistry [DefaultUninstall.ntamd64] DelFiles = DriverFiles DelReg = DelRegistry [DefaultUninstall.Services] DelService = %ServiceName% [DefaultUninstall.ntamd64.Services] DelService = %ServiceName% [DestinationDirs] DriverFiles = 12 ;%windir%\system32\drivers DefaultDestDir = 12 [SourceDisksNames] 1 = %Disk1% [SourceDisksFiles] klelam.sys = 1 ;; Services Section [Service] DisplayName = %ServiceName% Description = %ServiceDesc% ServiceBinary = %12%\%ImageName%.sys ;%windir%\system32\drivers\klelam.sys ServiceType = 1 ; SERVICE_KERNEL_DRIVER StartType = 0 ; SERVICE_BOOT_START ErrorControl= 3 ; SERVICE_ERROR_CRITICAL LoadOrderGroup = "Early-Launch" AddReg = AddRegistry [AddRegistry] HKR,"Parameters\Journal",,0x00000010, [DelRegistry] HKR,"Parameters\Journal" ;; Copy Files [DriverFiles] %ImageName%.sys,,,2 ;; String Section [Strings] MfgName = "Kaspersky Lab, CHSC." ServiceName = "klelam" ServiceDesc = "Kaspersky Lab Real Time Protection Component" ImageName = "klelam" Disk1 = "klelam Source Media" [SignatureAttributes] klelam.sys = SignatureAttributes.Elam [SignatureAttributes.Elam] Elam=true