|
|
;;; ;;; FileSpy ;;; ;;; ;;; Copyright (c) 2000, Microsoft Corporation ;;;
[Version] signature = "$Windows NT$" Class = "ActivityMonitor" ;This is determined by the work this filter driver does ClassGuid = {b86dff51-a31e-4bac-b3cf-e8cfe75c9fc2} ;This value is determined by the Class Provider = %Msft% DriverVer = 08/28/2000,1.0.0.1 CatalogFile = filespy.cat ; A CatalogFile entry is required for a WHQL signature. ; The actual catalog file will be provided by WHQL. The ; catalog file for this sample is not provided for use.
[DestinationDirs] DefaultDestDir = 12 FileSpy.DriverFiles = 12 ;%windir%\system32\drivers FileSpy.UserFiles = 10,FileSpy ;%windir%\FileSpy
;; ;; Default install sections ;;
[DefaultInstall] OptionDesc = %FileSpyServiceDesc% CopyFiles = FileSpy.DriverFiles, FileSpy.UserFiles
[SourceDisksNames] 1 = %Disk1%
[SourceDisksFiles] filespy.exe = 1 filespy.sys = 1
[DefaultInstall.Services] AddService = %FileSpyServiceName%,,FileSpy.Service
;; ;; Default uninstall sections ;;
[DefaultUninstall] DelFiles = FileSpy.DriverFiles, FileSpy.UserFiles DelReg = FileSpy.DelRegistry
[DefaultUninstall.Services] DelService = FileSpy,0x200 ; Flags note to stop service first
; ; Services Section ;
[FileSpy.Service] DisplayName = %FileSpyServiceName% Description = %FileSpyServiceDesc% ServiceBinary = %12%\filespy.sys ;%windir%\system32\drivers\filespy.sys ServiceType = 2 ;SERVICE_FILE_SYSTEM_DRIVER StartType = 3 ;SERVICE_DEMAND_START ErrorControl = 1 ;SERVICE_ERROR_NORMAL LoadOrderGroup = "FSFilter Activity Monitor" AddReg = FileSpy.AddRegistry
; ; Registry Modifications ;
[FileSpy.AddRegistry] HKLM,%FileSpyRegistry%,%FileSpyMaxRecords%,0x00010001 ,500 HKLM,%FileSpyRegistry%,%FileSpyMaxNames%,0x00010001 ,500 HKLM,%FileSpyRegistry%,%FileSpyDebugFlags%,0x00010001 ,0 HKLM,%FileSpyRegistry%,%FileSpyAttachMode%,0x00010001 ,2
[FileSpy.DelRegistry] HKLM,%FileSpyRegistry%,%FileSpyMaxRecords% HKLM,%FileSpyRegistry%,%FileSpyMaxNames% HKLM,%FileSpyRegistry%,%FileSpyDebugFlags% HKLM,%FileSpyRegistry%,%FileSpyAttachMode%
; ; Copy Files ;
[FileSpy.DriverFiles] filespy.sys
[FileSpy.UserFiles] filespy.exe
;; ;; String Section ;;
[Strings] Msft = "Microsoft Corporation" FileSpyServiceDesc = "FileSpy Filter Driver" FileSpyServiceName = "FileSpy" FileSpyRegistry = "system\currentcontrolset\services\FileSpy" FileSpyMaxRecords = "MaxRecords" FileSpyMaxNames = "MaxNames" FileSpyDebugFlags = "DebugFlags" FileSpyAttachMode = "AttachMode" Disk1 = "FileSpy Source Media"
|