-
Notifications
You must be signed in to change notification settings - Fork 5
/
Copy pathw3wprotect.inf
89 lines (72 loc) · 2.85 KB
/
w3wprotect.inf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
;-------------------------------------------------------------------------
; w3wprotect.INF -- NDIS LightWeight Filter Driver
;
; TODO: Search for comments marked "TODO:", and follow their instructions to
; customize this INF for your driver. Then delete the "TODO:" comments.
;-------------------------------------------------------------------------
[version]
Signature = "$Windows NT$"
Class = "ActivityMonitor"
ClassGUID = {b86dff51-a31e-4bac-b3cf-e8cfe75c9fc2}
Provider = %Manufacturer%
DriverVer = 22/09/2021,1.0.0.0
CatalogFile = w3wprotect.cat
;-------------------------------------------------------------------------
; Installation Section
;-------------------------------------------------------------------------
[DestinationDirs]
DefaultDestDir = 10
w3wprotect.DriverFiles = 10
[DefaultInstall.NTamd64]
OptionDesc = %ServiceDescription%
Copyfiles = w3wprotect.DriverFiles
[DefaultInstall.NTamd64.Services]
AddService = %Name%,,w3wprotect.Service
;-------------------------------------------------------------------------
; Uninstallation Section
;-------------------------------------------------------------------------
[DefaultUninstall.NTamd64]
LegacyUninstall = 1
DelFiles = w3wprotect.DriverFiles
[DefaultUninstall.NTamd64.Services]
DelService = %Name%,0x200 ; Ensure the service is stopped before deleting.
;-------------------------------------------------------------------------
; Service installation
;-------------------------------------------------------------------------
[w3wprotect.Service]
DisplayName = %Name%
Description = &Service
ServiceBinary = %24%\%Name%.sys
ServiceType = 2 ;SERVICE_FILE_SYSTEM_DRIVER
StartType = 3 ;SERVICE_DEMAND_START
ErrorControl = 1 ;SERVICE_ERROR_NORMAL
LoadOrderGroup = "FSFilter Activity Monitor"
AddReg = w3wprotect.AddRegistry
[w3wprotect.AddRegistry]
HKR, , "DebugFlags", 0x00010001, 0x0
HKR, , "SupportedFeatures", 0x00010001, 0x3
HKR, "", "Altitude", 0x00000000, %Altitude%
HKR, "", "Flags", 0x00010001, %Flags%
HKR, "", "WhiteListedDirectories", 0x00000000, %DefaultDirectories%
HKR, "", "WhiteListedProcesses", 0x00000000, %DefaultProcesses%
HKR, "", "WhiteListedRegistry", 0x00000000, %DefaultRegistry%
HKR, "", "Enforced", 0x00010001, %Enforced%
[w3wprotect.DriverFiles]
%Name%.sys
[SourceDisksFiles]
w3wprotect.sys = 1,,
[SourceDisksNames]
1 = %DiskId%,,,
[Strings]
Name = "w3wprotect"
Manufacturer = "DriverSamples"
ServiceDescription = "w3wprotect service"
DiskId = "w3wprotect Device Installation Disk"
ServiceHelpText = "w3wprotect"
DefaultConfig = "DefaultConfig"
Altitude = "384477"
Flags = 0x0
DefaultDirectories = "C:\\Windows\\;C:\\Windows\\System32\\;"
DefaultProcesses = "csc;vbc;conhost;wermgr;Microsoft.NET\Framework64;"
DefaultRegistry = "w3wprotect;Services\ASP.NET;MuiCache;"
Enforced = 0x1