1. VGA_Intel_7.14.10.1227_Vistax86_A.zip Driver
2. vso.inf File Contents

vso.inf Driver File Contents (VGA_Intel_7.14.10.1227_Vistax86_A.zip)

[Installer_Config]
AppID=VSO
Shared=0

[Env-Var]
%VSINSTALL_DIR%=$REG$Key=Software\McAfee\VirusScan\InstallSettings:Name=Install Dir

[DirIds]
;Env-Var Defined ==> Program Files
;33100 ==> All Users\Application Data
;33000 ==> Program Files\Common files
;33200 ==> McIns.exe Module dir
;33300 ==> ExtractCAB location
41000=%VSINSTALL_DIR%
41001=%33100%\McAfee\VirusScan

[Install_NT]
DefaultInstall.NT=Setup
InstallRunCustom=EXE

[UnInstall_NT]
DefaultUninstall.NT=Setup

[InstallRunCustom]
%41000%\MvsVista.exe=/install

[OCXRegister]
%41000%\mcvsps.dll
%41000%\naiannps.dll
%41000%\naiann.dll
%41000%\mcvsqt.dll
%41000%\mvscfg.dll
%41000%\mvsver.dll
%41000%\mvsscan.dll
%41000%\mcavtsub.dll
%41000%\EscnPlug.dll

;///////////////

[Version]
Signature="$Chicago$"
AdvancedINF=2.5
LayoutFile=vso.inf

[DefaultInstall.NT]
CopyFiles=FileList
DelReg=Old_Reg
AddReg=OAS_Reg,Avert_Reg,ScriptScanner_Reg,Sysmon_Reg,ODS_Reg

[DefaultUninstall.NT]
cleanup=1
Delfiles=FileList
DelReg=OAS_Reg,Avert_Reg,ScriptScanner_Reg,Sysmon_Reg,ODS_Reg

[SourceDisksNames]
; This section specifies that all sources are in the "default" location.
1="vso Files","",1

[DestinationDirs]   
; Destination Directories for CopyFiles/Delfiles Sections.
; 10 indicates LDID_WIN - windows directory   
FileList=41000

[FileList]
; ,,,32 - Suppress version conflict dialog and don't overwrite newer DLLs
vso.inf,,,65568
mcvsps.dll,,,65568
naiannps.dll,,,65568
annscrp.dll,,,65568
mcvsqt.dll,,,65568
mcqtlib.dll,,,65568
mvscfg.dll,,,65568
mvsver.dll,,,65568
mvsscan.dll,,,65568
mcavtsub.dll,,,65568
subavt.dll,,,65568
mcinsupd.exe,,,65568
MvsVista.exe,,,65568
naiann.dll,,,65568
EscnPlug.dll,,,65568

[Old_Reg]
HKLM,Software\McAfee\VSCore\IMScanner

[OAS_Reg]
;this might be replaced with Misp Logging.
HKLM,Software\McAfee\VSCore\On Access Scanner\McShield\Configuration\Default,"bLimitSize",65537,1
HKLM,Software\McAfee\VSCore\On Access Scanner\McShield\Configuration\Default,"dwMaxLogSizeMB",65537,2
HKLM,Software\McAfee\VSCore\On Access Scanner\McShield\Configuration\Default,"LogFileFormat",65537,1
HKLM,Software\McAfee\VSCore\On Access Scanner\McShield\Configuration\Default,"szLogFileName",,"%41001%\Logs\OAS.Log"
;OASActions
HKLM,Software\McAfee\VSCore\On Access Scanner\McShield\Configuration\High,"uAction_Cookie_Auto",65537,1
HKLM,Software\McAfee\VSCore\On Access Scanner\McShield\Configuration\High,"uAction_Auto",65537,1

[Avert_Reg]
HKLM,Software\McAfee\VSCore\AvtSub,"DEFAULT_FROM",,"donotrespond@avertlabs.com"
HKLM,Software\McAfee\VSCore\AvtSub,"AVERT_EMAIL",,"virus_sample_isp@avertlabs.com"
HKLM,Software\McAfee\VSCore\AvtSub,"AVERT_SERVER",,"avertlabs.com"
HKLM,Software\McAfee\VSCore\AvtSub,"AVERT_PORT",65537,25

[ScriptScanner_Reg]
HKLM,SOFTWARE\McAfee\VSCore\Script Scanner,"szAnnouncer",,"annscrp.dll"
;Added after Jon's review >>>
HKLM,SOFTWARE\McAfee\VSCore\Script Scanner,"PPContextIDs",0x00000001,00 ,50 ,00 ,00 ,03 ,50 ,00 ,00
;Added after Jon's review <<<

[Sysmon_Reg]
HKLM,SOFTWARE\McAfee\VSCore\SysMon\Settings,"",,""

[ODS_Reg]
HKLM,SOFTWARE\McAfee\VSCore\VirusScanner,"bLogToFile",65537,1
HKLM,SOFTWARE\McAfee\VSCore\VirusScanner,"bLimitSize",65537,1
HKLM,SOFTWARE\McAfee\VSCore\VirusScanner,"dwMaxLogSizeMB",65537,2
HKLM,SOFTWARE\McAfee\VSCore\VirusScanner,"LogFileFormat",65537,1
HKLM,SOFTWARE\McAfee\VSCore\VirusScanner,"szLogFileName",,"%41001%\Logs\%USERNAME%_ODS.Log"