1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
|
;;;
;;; Change
;;;
;;;
;;; Copyright (c) Microsoft Corporation. All Rights Reserved
;;;
[Version]
Signature = "$Windows NT$"
Class = "ActivityMonitor" ;This is determined by the work this filter driver does
ClassGuid = {b86dff51-a31e-4bac-b3cf-e8cfe75c9fc2} ;This value is determined by the Class
Provider = %ProviderString%
DriverVer = 06/16/2011,1.0.0.1
CatalogFile = change.cat
PnpLockdown = 1
[SourceDisksFiles]
change.sys = 1,,
[SourceDisksNames]
1 = %DiskId1%,,,
[DestinationDirs]
ChangeDownlevel.CopyDriverFiles = 12 ;%windir%\system32\drivers
ChangeDownlevel.DelDriverFiles = 12 ;%windir%\system32\drivers
Change.DriverFiles = 13 ;driver store
;;
;; Default install sections
;;
[DefaultInstall.NT$ARCH$.10.0...25952]
OptionDesc = %ServiceDescription%
CopyFiles = Change.DriverFiles
[DefaultInstall.NT$ARCH$.10.0...25952.Services]
AddService = %ServiceName%,,Change.Service
;
; Support sections
;
[Change.Service]
DisplayName = %ServiceName%
Description = %ServiceDescription%
ServiceBinary = %13%\%DriverName%.sys ;%windir%\system32\drivers\
Dependencies = "FltMgr"
ServiceType = 2 ;SERVICE_FILE_SYSTEM_DRIVER
StartType = 3 ;SERVICE_DEMAND_START
ErrorControl = 1 ;SERVICE_ERROR_NORMAL
LoadOrderGroup = "FSFilter Activity Monitor"
AddReg = Change.AddRegistry
[Change.AddRegistry]
HKR,"Parameters\Instances","DefaultInstance",0x00000000,%DefaultInstance%
HKR,"Parameters\Instances\"%Instance1.Name%,"Altitude",0x00000000,%Instance1.Altitude%
HKR,"Parameters\Instances\"%Instance1.Name%,"Flags",0x00010001,%Instance1.Flags%
[Change.DriverFiles]
%DriverName%.sys
;;
;; Downlevel default install sections
;;
[DefaultInstall.NT$ARCH$]
OptionDesc = %ServiceDescription%
CopyFiles = ChangeDownlevel.CopyDriverFiles
[DefaultInstall.NT$ARCH$.Services]
AddService = %ServiceName%,,ChangeDownlevel.Service
;;
;; Downlevel default uninstall sections
;;
[DefaultUninstall.NT$ARCH$]
DelFiles = ChangeDownlevel.DelDriverFiles
[DefaultUninstall.NT$ARCH$.Services]
LegacyUninstall = 1
DelService = %ServiceName%,0x200 ;Ensure service is stopped before deleting
;
; Downlevel support sections
;
[ChangeDownlevel.Service]
DisplayName = %ServiceName%
Description = %ServiceDescription%
ServiceBinary = %12%\%DriverName%.sys ;%windir%\system32\drivers\
Dependencies = "FltMgr"
ServiceType = 2 ;SERVICE_FILE_SYSTEM_DRIVER
StartType = 3 ;SERVICE_DEMAND_START
ErrorControl = 1 ;SERVICE_ERROR_NORMAL
LoadOrderGroup = "FSFilter Activity Monitor"
AddReg = ChangeDownlevel.AddRegistry
[ChangeDownlevel.AddRegistry]
HKR,"Instances","DefaultInstance",0x00000000,%DefaultInstance%
HKR,"Instances\"%Instance1.Name%,"Altitude",0x00000000,%Instance1.Altitude%
HKR,"Instances\"%Instance1.Name%,"Flags",0x00010001,%Instance1.Flags%
[ChangeDownlevel.CopyDriverFiles]
%DriverName%.sys
[ChangeDownlevel.DelDriverFiles]
%DriverName%.sys
;;
;; String Section
;;
[Strings]
ProviderString = "TODO-Set-Provider"
ServiceDescription = "A File Change Monitoring Mini-Filter Driver"
ServiceName = "change"
DriverName = "change"
DiskId1 = "File Change Monitoring Device Installation Disk"
;Instances specific information.
DefaultInstance = "change Instance"
Instance1.Name = "change Instance"
Instance1.Altitude = "370160"
Instance1.Flags = 0x0 ; Allow all attachments
|
