[version] Signature="$CHICAGO$" SetupClass=BASE LayoutFile=layout.inf [DefaultInstall] CopyFiles=SRFlt_files,SRSvc_files,SR_files AddReg=SRFlt_addreg,SRSvc_addreg,SR_addreg ProfileItems=SRProfile RegisterDlls=SR_register DelReg=SRSvc_delreg [DefaultInstall.Services] AddService=sr,,SRFlt_service,SRFlt_event AddService=srservice,,SRSvc_service,SRSvc_event [Uninstall] DelFiles=SRFlt_files,SRSvc_files,SR_files,SRWmi_files DelReg=SRFlt_delreg,SRSvc_delreg,SR_delreg UnregisterDlls=SR_register [Uninstall.Services] DelService=sr DelService=srservice [DestinationDirs] SRFlt_files=12 SRSvc_files=11 SR_files=11,Restore [SRFlt_files] sr.sys,,,0x10000 [SRSvc_files] srclient.dll,,,0x10000 srsvc.dll,,,0x10000 srrstr.dll,,,0x10000 [SRSvc_files.Security] "D:P(A;;GRGX;;;BU)(A;;GA;;;BA)(A;;GA;;;SY)(A;;GRGX;;;WD)" [SR_files] filelist.xml,,,0x10000 rstrui.exe,,,0x10000 srframe.mmf,,,0x10000 srdiag.exe,,,0x10000 [SR_files.Security] "D:P(A;;GRGX;;;BU)(A;;GA;;;BA)(A;;GA;;;SY)(A;;GRGX;;;WD)" [SRProfile] Name=%SR_UI_Link_Name% CmdLine=11,restore,rstrui.exe SubDir=%SR_UI_Link_SubDir% InfoTip="@%systemroot%\system32\restore\rstrui.exe,-2078" DisplayResource="%systemroot%\system32\restore\rstrui.exe",2048 [SRFlt_service] DisplayName = %SR_Filter_Name% ServiceType = 2 ;%SERVICE_FILE_SYSTEM_DRIVER% StartType = 0 ;%SERVICE_BOOT_START% ErrorControl = 1 ;%SERVICE_ERROR_NORMAL% ServiceBinary = %12%\sr.sys LoadOrderGroup = "FSFilter System Recovery" [SRSvc_service] DisplayName = %SR_Service_Name% Description = %SR_Service_Desc% ServiceType = 0x20 ;%SERVICE_WIN32_SHARE_PROCESS% StartType = 2 ;%SERVICE_AUTOMATIC_START% ErrorControl = 1 ;%SERVICE_ERROR_NORMAL% ServiceBinary = %11%\svchost.exe -k netsvcs Dependencies = "RpcSs" [SRSvc_event] AddReg=SRSvc_event_addreg DelReg=SRSvc_event_delreg [SRFlt_event] AddReg=SRFlt_event_addreg DelReg=SRFlt_event_delreg [SRFlt_addreg] HKLM,"system\currentcontrolset\services\SR\Parameters","FirstRun",0x10001,1 HKLM,"system\currentcontrolset\services\SR\Parameters","DontBackup",0x10001,0 ; ; safeboot options ; HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys","",0x00000000,"FSFilter System Recovery" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sr.sys","",0x00000000,"FSFilter System Recovery" [SRSvc_addreg] HKLM,"SYSTEM\CurrentControlSet\Services\SRService\Parameters","ServiceDll",0x00020000,"%11%\srsvc.dll" ; ; safeboot options ; HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SRService","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SRService","",0x00000000,"Service" [SR_addreg] HKLM,"Software\Microsoft\Windows NT\CurrentVersion\SystemRestore","DisableSR",0x10001,0 HKLM,"Software\Microsoft\Windows NT\CurrentVersion\SystemRestore","CreateFirstRunRp",0x10001,0 HKLM,"Software\Microsoft\Windows NT\CurrentVersion\SystemRestore\Cfg","DiskPercent",0x10001,12 HKLM,"Software\Microsoft\Windows NT\CurrentVersion\SystemRestore\SnapshotCallbacks" HKLM,"Software\Microsoft\Windows\CurrentVersion\Run","SRFirstRun",,"rundll32 srclient.dll,CreateFirstRunRp" [SRSvc_event_addreg] HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\SRService","EventMessageFile",0x00020000,"%11%\srsvc.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\SRService","TypesSupported",0x00010001,7 [SRFlt_event_addreg] HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\SR","EventMessageFile",0x00020000,"%11%\IoLogMsg.dll;%12%\sr.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\SR","TypesSupported",0x00010001,7 [SRFlt_delreg] HKLM,"system\currentcontrolset\services\SR\Parameters","MachineGuid" HKLM,"system\currentcontrolset\services\SR\Parameters","Disabled" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sr.sys" [SRSvc_delreg] HKLM,"Software\Microsoft\Windows NT\CurrentVersion\SvcHost","SRGroup" ; ; don't need to delete private values under "Services" hive, because entire hive ; will be deleted automatically. ; HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SRService" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SRService" HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore\FilesToSnapshot" [SR_delreg] HKLM,"Software\Microsoft\Windows NT\CurrentVersion\SystemRestore" [SRSvc_event_delreg] HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SRService" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\SRService","EventMessageFile" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\SRService","TypesSupported" [SRFlt_event_delreg] HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\SR","EventMessageFile" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\SR","TypesSupported" [SR_register] 11,,srclient.dll,1