root/honeyclient/branches/rel/1.0/Capture2/capture-client-xeno-mod/FileMonitorInstallation.inf

Revision 823, 2.3 kB (checked in by xkovah, 1 year ago)

adding the files finally

Line 
1 ;;;
2 ;;; Minispy
3 ;;;
4 ;;;
5 ;;; Copyright (c) 2001, Microsoft Corporation
6 ;;;
7
8 [Version]
9 Signature   = "$Windows NT$"
10 Class       = "ActivityMonitor"                         ;This is determined by the work this filter driver does
11 ClassGuid   = {b86dff51-a31e-4bac-b3cf-e8cfe75c9fc2}    ;This value is determined by the Class
12 Provider    = %Msft%
13 DriverVer   = 10/09/2007,1.0.0.0
14
15
16 [DestinationDirs]
17 DefaultDestDir          = 12
18 Capture.DriverFiles     = 12            ;%windir%\system32\drivers
19
20 ;;
21 ;; Default install sections
22 ;;
23
24 [DefaultInstall]
25 OptionDesc          = %ServiceDescription%
26 CopyFiles           = Capture.DriverFiles
27
28 [DefaultInstall.Services]
29 AddService          = %ServiceName%,,Capture.Service
30
31 ;;
32 ;; Default uninstall sections
33 ;;
34
35 [DefaultUninstall]
36 DelFiles   = Capture.DriverFiles
37 DelReg = Capture.DelRegistry
38
39 [DefaultUninstall.Services]
40 DelService = %ServiceName%,0x200      ;Ensure service is stopped before deleting
41
42 ;
43 ; Services Section
44 ;
45
46 [Capture.Service]
47 DisplayName      = %ServiceName%
48 Description      = %ServiceDescription%
49 ServiceBinary    = %12%\%DriverName%.sys        ;%windir%\system32\drivers\
50 Dependencies     = FltMgr
51 ServiceType      = 2                            ;SERVICE_FILE_SYSTEM_DRIVER
52 StartType        = 3                            ;SERVICE_DEMAND_START
53 ErrorControl     = 1                            ;SERVICE_ERROR_NORMAL
54 LoadOrderGroup   = "FSFilter Activity Monitor"
55 AddReg           = Capture.AddRegistry
56
57 ;
58 ; Registry Modifications
59 ;
60
61 [Capture.AddRegistry]
62 HKR,"Instances","DefaultInstance",0x00000000,%DefaultInstance%
63 HKR,"Instances\"%Instance1.Name%,"Altitude",0x00000000,%Instance1.Altitude%
64 HKR,"Instances\"%Instance1.Name%,"Flags",0x00010001,%Instance1.Flags%
65
66 [Capture.DelRegistry]
67 HKLM,"System\CurrentControlSet\Services\CaptureFileMonitor"
68
69 ;
70 ; Copy Files
71 ;
72
73 [Capture.DriverFiles]
74 %DriverName%.sys
75
76 ;;
77 ;; String Section
78 ;;
79
80 [Strings]
81 Msft                    = "Microsoft Corporation"
82 ServiceDescription      = "Capture Kernel Driver"
83 ServiceName             = "CaptureFileMonitor"
84 DriverName              = "CaptureFileMonitor"
85 UserAppName             = "Capture"
86
87 ;Instances specific information.
88 DefaultInstance         = "Capture - Top Instance"
89 Instance1.Name          = "Capture - Top Instance"
90 Instance1.Altitude      = "385000"
91 Instance1.Flags         = 0x0          ; Suppress automatic attachments
92
Note: See TracBrowser for help on using the browser.