;;;
;;; Sophos Anti-Virus On-Access Filter driver
;;;
;;;
;;; Copyright (c) 2012-2020, Sophos Limited
;;;

[Version]
Signature           = "$Windows NT$"
Class               = "AntiVirus"
ClassGuid           = {b1d1a169-c54f-4379-81db-bee7d88d7454}
Provider            = %Sophos%
DriverVer = 05/07/2020,3.26.0.0
CatalogFile         = SAV.cat
DriverPackageType   = FileSystemMinifilter

[DestinationDirs]
DefaultDestDir                    = 12
SAVOnAccess.DriverFiles           = 12              ;%windir%\system32\drivers

;;
;; Default install sections
;;

[DefaultInstall]
OptionDesc          = %ScannerServiceDesc%
CopyFiles           = SAVOnAccess.DriverFiles

[DefaultInstall.Services]
AddService          = %ScannerServiceName%,,SAVOnAccess.Service

;;
;; Default uninstall sections
;;

[DefaultUninstall]
DelFiles   = SAVOnAccess.DriverFiles



[DefaultUninstall.Services]
DelService = %ScannerServiceName%,0x204             ; Flags to stop service first & delete system log entries

;;
;; Sources
;;

[SourceDisksNames]
1 = %SourceDisk%

[SourceDisksFiles]
savonaccess.sys = 1

;
; Services Section
;

[SAVOnAccess.Service]
DisplayName      = %ScannerServiceName%
Description      = %ScannerServiceDesc%
ServiceBinary    = %12%\savonaccess.sys             ;%windir%\system32\drivers\savonaccess.sys
ServiceType      = 2                                ;SERVICE_FILE_SYSTEM_DRIVER
StartType        = 1                                ;SERVICE_SYSTEM_START
ErrorControl     = 1                                ;SERVICE_ERROR_NORMAL
LoadOrderGroup   = "FSFilter Anti-Virus"
AddReg           = SAVOnAccess.AddRegistry
Dependencies     = FltMgr

;
; Registry Modifications
;

[SAVOnAccess.AddRegistry]
HKR,%RegInstancesSubkeyName%,%RegDefaultInstanceValueName%,0x00000000,%DefaultInstance%
HKR,%RegInstancesSubkeyName%"\"%Instance1.Name%,%RegAltitudeValueName%,0x00000000,%Instance1.Altitude%
HKR,%RegInstancesSubkeyName%"\"%Instance1.Name%,%RegFlagsValueName%,0x00010001,%Instance1.Flags%
HKR,%RegRegistrySubkeyName%,%RegAltitudeValueName%,0x00000000,%RegistryAltitude%

;
; Copy Files
;

[SAVOnAccess.DriverFiles]
savonaccess.sys


;;
;; String Section
;;

[Strings]
Sophos                      = "Sophos Limited"
SourceDisk                  = "Sophos Source Medium"
ScannerServiceDesc          = "SAV on-access mini-filter driver"
ScannerServiceName          = "SAVOnAccess"
RegInstancesSubkeyName      = "Instances"
RegDefaultInstanceValueName = "DefaultInstance"
RegAltitudeValueName        = "Altitude"
RegFlagsValueName           = "Flags"
RegRegistrySubkeyName       = "RegistryFilter"
RegistryAltitude            = "324000"

;Instances specific information.
DefaultInstance             = "SAVOnAccess Instance"
Instance1.Name              = "SAVOnAccess Instance"
Instance1.Altitude          = "324000"
Instance1.Flags             = 0x0                  ; Allow all attachments