Inoculan/InoculateIT Driver File History
8578
24 May 2019
24 May 2019
Last Updated: May 14, 2007
Severity: Ranges 1 (most) to 5 (least)
- System crash (BSOD)
- Serious problems (such as a system deadlock or crash, a resource leak, or synchronization problems)
- Medium problems (such as a malfunction or bad performance)
- Small problems (such as light performance degradation)
- Minor problems
- Happens on most systems
- Happens in certain conditions
- Only happens on a particular system or high stress situation
Build Number: The first two fields are the same for all builds. They are:
4.00 for Windows NT 4
5.00 for Windows 2000, Windows XP (32 bit), and Windows Server 2003 Server (32 bit)
5.01 for Windows XP (64 bit) and Windows Server 2003 Server (64 bit)
| Platform | AV Product Version | Driver Name | Build Number | File Version |
| Windows Server 2003 (64 bit) | 6.0 | INO_FLTR.SYS | 6000.80 | 5.01.6000.80 |
| Windows 2000 | 6.0 | INO_FLTR.SYS | 6000.80 | 5.00.6000.80 |
| Windows NT (4.0) | 6.0 | INO_FLTR.SYS | 6000.80 | 4.00.6000.80 |
| Windows NT (4.0) | 4.53 | INO_FLTR.SYS | 4522.15 | 4.00.4522.15 |
| Platform | AV Product Version | Driver Name | Build Number | File Version |
| Windows Server 2003 (64 bit) | 6.0 | INO_FLPY.SYS | 6003.8 | 5.01.6003.8 |
| Windows 2000 | 6.0 | INO_FLPY.SYS | 6003.8 | 5.00.6003.8 |
| Windows NT (4.0) | 6.0 | INO_FLPY.SYS | 6003.8 | 4.00.6003.8 |
| Windows NT (4.0) | 4.53 | INO_FLPY.SYS | 6003.8 | 4.00.6003.8 |
INO_FLTR.SYS for Antivirus Product Version 6.x , 7.x
Supports Windows NT 4, Windows 2000, Windows XP (32 bit and 64 bit), and Windows Server 2003 Server (32 bit and 64 bit)
| Build Number | Build Date | Fixes and Enhancements | Severity | Pervasiveness |
| 6100.169 | 10/18/2007 | Fix a problem of skipping file detections in very rare situation. | 3 | 3 |
| 6100.168 | 9/12/2007 | Fix the crash problem caused by an error of handling next IRP stack. | 1 | 3 |
| Cache result for files with multiple hardlinks by default in Vista to improve cache efficience. | 4 | 3 | ||
| Check file existence for files on removable media. | 5 | 3 | ||
| Fix the sharing violation problem caused by incorrectly clear of the CTL_IGNORE_PENDING flag. | 2 | 3 | ||
| Separate outgoing scan with incoming scan for modified files. | 4 | 3 | ||
| 6100.164 | 4/25/2007 | Fix a system crash issue caused by very long mount name. | 1 | 3 |
| Fix an IOCTL vulnerability. | 1 | 3 | ||
| Fix a system crash issue caused by corrupt SID list. | 1 | 3 | ||
| Enable the treatment of opLock interop problem with SRV.SYS by default. | 2 | 3 | ||
| Add detection of SWSOFT's VM thread. | 5 | 3 | ||
| Fix the cache problem in Vista. | 5 | 1 | ||
| 6100.162 | 2/14/2007 | Fix the system crash issue caused by SID buffer synchronization problem. | 1 | 3 |
| Improve heap usage for storing virus names, SID and security tokens. | 5 | 2 | ||
| Improve overall performance for accessing internal lists. | 3 | 3 | ||
| 6100.159 | 1/16/2007 | Fix several IOCTL vulnerabilities. | 2 | 3 |
| 6100.157 | 10/16/2006 | Add support to exempt remote folder for block extension list. | 1 | 3 |
| Do incoming scan on modified files only. | 5 | 2 | ||
| Fix unrecognized mount point issue. | 3 | 3 | ||
| Improve performance for directory rename and volume dismount operations. | 5 | 3 | ||
| 6100.156 | 7/7/2006 | Drivers are signed with the new Microsoft cross certificate. | 2 | 3 |
| 6100.155 | 3/16/2006 | Fix the performance problem caused by leaked lock object. | 3 | 2 |
| Disable hard error report in driver entry. | 5 | 3 | ||
| Skip attach RDR if TopLevelIrp is set. | 5 | 3 | ||
| Correct the over-dereference problem for user security token. | 2 | 3 | ||
| Use IoCreateFileSpecifyDeviceObjectHint to reduce kernel stack usage in accessing files inside driver code. | 5 | 3 | ||
| Add Controls for ignoring STATUS_PENDING to avoid sharing violation. | 3 | 3 | ||
| Notify Ino_flpy.sys before unload to avoid system crash. | 1 | 3 | ||
| 6100.149 | 8/11/2005 | Fix the performance problem happened in systems with certain volume mount configuration. | 3 | 3 |
| Fix a rare non-paged pool consumption problem. | 4 | 3 | ||
| 6100.143 | 7/14/2005 | Fixed Impersonate and SecContext crash. | 1 | 3 |
| 6100.142 | 1/18/2005 | Add more workaround to the OpLock interop problem with SRV.SYS. | 3 | 3 |
| Fix the file access delay problem caused by mismatched directory name . | 3 | 3 | ||
| Fix the token leaking problem for certain servers with multiple user access. | 3 | 2 | ||
| 6100.139 | 11/16/2004 | Add workaround to the OpLock interop problem with SRV.SYS. | 3 | 3 |
| Fix the file access delay problem caused by directory rename . | 3 | 3 | ||
| Improve performance by removing incoming file existence check for remote and removable medias. | 3 | 3 | ||
| 6100.137 | 8/28/2004 | Fix the problem of kernel memory corruption caused by certain long file name accesses. | 2 | 3 |
| 6100.136 | 8/8/2004 | Improve performance by not scanning remote incoming file by default. | 4 | 2 |
| Fix the system crash problem in new X64 Windows builds (starting from August 2004) . | 1 | 2 | ||
| Fix the performance problem caused by legacy IOCTL calls to the driver. | 3 | 3 | ||
| 6100.135 | 6/25/2004 | Fix the problem of excluding directory not working for some incoming file access. | 5 | 3 |
| Fix the problem of interfering backup software's open file agent when filter driver checks the file existence. | 3 | 2 | ||
| 6100.134 | 6/6/2004 | Fix the system hang problem caused by one of Ino_fltr's debug check routine. | 2 | 3 |
| 6100.133 | 5/6/2004 | Fix the system hang problem caused by Ino_fltr CleanUp(). | 2 | 3 |
| Fix the thread trap left over problem. | 4 | 3 | ||
| 6100.131 | 4/10/2004 | Fix the problem of renamed/dismounted file leftover in cache. | 5 | 2 |
| Get correct user SID for virus file access notification to InoRT. | 5 | 3 | ||
| Further reduce stack usage (from 780 to 160 bytes) to solve stack overflow problem. | 2 | 3 | ||
| Fix the file/folder access hang problem caused by a mismatch of scan result. | 2 | 3 | ||
| Check file existence before sending incoming scan requests. | 5 | 3 | ||
| 6100.129 | 3/10/2004 | Optimize the incoming scan algorithm to improve real-time scanning performance. | N/A | 2 |
| Monitor file open for FILE_DELETE_ON_CLOSE to reduce share violation. | 3 | 2 | ||
| Reduce stack usage to reduce stack overflow possibility. | 2 | 3 | ||
| Cache outgoing scan result for files being modified. | N/A | 3 | ||
| Fix the problem of file access slowness. | 2 | 3 | ||
| 6100.126 | 1/28/2004 | Improved cache design for better realtime scanning performance. | N/A | 2 |
| Fix the system crash problem introduced by build 125 in 64 bit OS after a directory rename. | 1 | 3 | ||
| Use correct user information in realtime file scanning. | N/A | 3 | ||
| Enhanced incoming file monitoring and optimized incoming file scanning. | N/A | 3 | ||
| Enhancement. Added Block Creation file list. | N/A | 2 | ||
| 6000.86 | 7/18/2003 | Added support for long filenames. | N/A | 2 |
| 6000.83 | 4/29/2003 | Doing RefreshConfigureFilter in disable/enable/set_config. | 5 | 3 |
| Delete terminated PID from exclude PID list. | 5 | 3 | ||
| Fix system crash problem caused by trying wait on terminated threads. | 1 | 3 | ||
| Fix iostress timeout problem caused by GrapContextControl. | 5 | 3 | ||
| 6000.82 | 1/3/2003 | Fix no detection problem for some files with localized character name. | 3 | 3 |
| Fix repeating scan problem for certain applications (like Excel 97). | 3 | 3 | ||
| Fix a bug of not getting correct user name when detects an infection. | 4 | 2 | ||
| Support device detach on file system change notification. | 3 | 3 | ||
| Improve the detection ability on concurrent file access. | 3 | 3 | ||
| Fix the offline file detection problem when no network connection available. | 3 | 3 | ||
| Use SeImpersonateClientEx for Windows 2000 and later. | 5 | 3 | ||
| Fix various IOCTL valnurabilities, primarily for DC test. | 3 | 3 | ||
| 6000.80 | 9/1/2002 | Fix no detection problem of encrypted files when incremental scan is enabled. | 4 | 3 |
| Fix NT4 no detection problem for some network file accesses. | 3 | 3 | ||
| Fix NT4 no detection problem when 9X explorer copy files to mapped NT4 drive. | 3 | 2 | ||
| Fix no detection problem for files with MAX_PATH length name. | 3 | 1 | ||
| Fix access violation caused by accessing FileObject's FileName field not in MJ_CREATE. | 1 | 3 | ||
| 6000.79 | 6/3/2002 | Fix the performance problem on systems with offline file access. | 3 | 2 |
| Fix the incorrect user information in some situations when viruswall is used. | 3 | 2 | ||
| 6000.78 | 4/4/2002 | Fixed IN2 file left over problem on certain remote files accessed by MS office. | 4 | 2 |
| Fixed outgoing no detection problem for modified files. | 4 | 3 | ||
| Fixed no detection problem on remote drive. | 4 | 3 | ||
| Fixed a rare deadlock problem on some volume mount cases. | 2 | 3 | ||
| Fixed a rare system crash problem caused by invalid fastIO request. | 1 | 3 | ||
| Fixed more problems about stream detection. | 4 | 2 | ||
| 6000.77 | 2/21/2002 | Fixed the problem of incorrect user name showed in real-time detection. | 4 | 2 |
| Fixed the no detection problem of files that SYSTEM account cannot access. | 3 | 2 | ||
| Eliminate the delay of protection after system boot. | 4 | 2 | ||
| 6000.74 | 12/13/2001 | Fixed the named pipe time-out problem. | 3 | 2 |
| Fixed the Start menu flashing problem. | 4 | 2 | ||
| Fixed the slow protection after system boot problem. | 4 | 2 | ||
| 6000.73 | 11/12/2001 | Fixed the reference IRP after IoCompleteRequest problem. | 1 | 3 |
| Fixed the virus wall IN2 file leftover problem. | 4 | 2 | ||
| Fixed the access violation problem, caused by the open handle without correct attribute. | 1 | 3 | ||
| Enhanced the registry settings query at refresh (disable/enable cycle). Eliminate reboot request. | N/A | 1 | ||
| 6000.70 | 8/17/2001 | Fixed the problem of Incoming List file name overflow. | 1 | 3 |
| Fixed the problem of index underflow in 64 bit driver. | 1 | 3 | ||
| Fixed the problem of page fault in mount point check code. | 1 | 2 | ||
| 6000.66 | 6/15/2001 | Fixed the problem of checking network files when some incorrect file names are passed into the driver. | 3 | 3 |
| 6000.64 | 5/18/2001 | Fixed the problem of no detection on dynamic volume and volumes use mount point only. | 3 | 2 |
| Temporarily raise the real time threads priority to fix the time-out issue on heavily stressed machine. | 2 | 3 | ||
| 6000.63 | 5/1/2001 | Enhancement. Added Block Modify files list. | N/A | 2 |
| Fixed one bug by removing process reference on close. | 1 | 3 | ||
| Enhancement. Port code to IA64 Windows XP platform. | N/A | N/A |
INO_FLTR.SYS for Inoculan/InoculateIT 4.x
Supports Windows NT 4, Windows 2000
| Build Number | Build Date | Fixes and Enhancements | Severity | Pervasiveness |
| 4522.18 | 4/29/2003 | Doing RefreshConfigureFilter in disable/enable/set_config. | 5 | 3 |
| Delete terminated PID from exclude PID list. | 5 | 3 | ||
| Fix system crash problem caused by trying wait on terminated threads. | 1 | 3 | ||
| Fix iostress timeout problem caused by GrapContextControl. | 5 | 3 | ||
| 4522.17 | 1/3/2003 | Fix no detection problem for some files with localized character name. | 3 | 3 |
| Fix repeating scan problem for certain applications (like Excel 97). | 3 | 3 | ||
| Fix a bug of not getting correct user name when detects an infection. | 4 | 2 | ||
| Support device detach on file system change notification. | 3 | 3 | ||
| Improve the detection ability on concurrent file access. | 3 | 3 | ||
| Fix the offline file detection problem when no network connection available. | 3 | 3 | ||
| Use SeImpersonateClientEx for Windows 2000 and later. | 5 | 3 | ||
| Fix various IOCTL valnurabilities, primarily for DC test. | 3 | 3 | ||
| 4522.15 | 9/1/2002 | Fix NT4 no detection problem for some network file accesses. | 3 | 3 |
| Fix NT4 no detection problem when 9X explorer copy files to mapped NT4 drive. | 3 | 2 | ||
| Fix no detection problem for files with MAX_PATH length name. | 3 | 1 | ||
| Fix no detection problem caused by check FILE_SYNCHRONOUS_IO_NONALERT. | 3 | 3 | ||
| 4522.14 | 6/3/2002 | Fix the performance problem on systems with offline file access. | 3 | 2 |
| Fix the incorrect user information in some situations when viruswall is used. | 3 | 2 | ||
| 4522.13 | 4/17/2002 | Fixed the no detection problem of files that SYSTEM account cannot access. | 3 | 2 |
| 4522.12 | 4/4/2002 | Fixed IN2 file left over problem on certain remote files accessed by MS office. | 4 | 2 |
| Fixed outgoing no detection problem for modified files. | 4 | 3 | ||
| Fixed no detection problem on remote drive. | 4 | 3 | ||
| Fixed a rare deadlock problem on some volume mount cases. | 2 | 3 | ||
| Fixed a rare system crash problem caused by invalid fastIO request. | 1 | 3 | ||
| Fixed more problems about stream detection. | 4 | 2 | ||
| 4522.11 | 2/21/2002 | Fixed the problem of incorrect user name showed in real-time detection. | 4 | 2 |
| 4522.10 | 12/13/2001 | Fixed the named pipe time-out problem. | 3 | 2 |
| Fixed the Start menu flashing problem. | 4 | 2 | ||
| 4522.9 | 11/12/2001 | Fixed the reference IRP after IoCompleteRequest problem. | 1 | 3 |
| Fixed the virus wall IN2 file leftover problem. | 4 | 2 | ||
| Fixed the access violation problem, caused by the open handle without correct attribute. | 1 | 3 | ||
| Enhanced the registry settings query at refresh (disable/enable cycle). Eliminate reboot request. | N/A | 1 | ||
| 4522.6 | 8/13/2001 | Fixed the problem of Incoming List file name overflow. | 1 | 3 |
| Fixed the problem of page fault in mount point check code. | 1 | 2 | ||
| 4522.3 | 6/15/2001 | Fixed the problem of checking network files when some incorrect file names are passed into the driver. | 3 | 3 |
| 4522.2 | 6/6/2001 | Fixed the problem of not catching some file renames. | 3 | 2 |
| 4522.1 | 5/18/2001 | Fixed the problem of no detection on dynamic volume and volumes use mount point only. | 3 | 2 |
| Temporarily raise the real time threads priority to fix the time-out issue on heavily stressed machine. | 2 | 3 | ||
| 4522.0 | 5/1/2001 | Fixed one bug by removing process reference on close. | 1 | 3 |
| Enhancement. Port code to IA64 Windows XP platform. | N/A | N/A | ||
| 4521.4 | 4/16/2001 | Enhancement. Added Block Modify files list. The updated InocXBlk.EXE is provided to help users set up the list. | N/A | 2 |
| 4521.3 | 3/28/2001 | Fixed the access violation problem on multi-CPU, high speed machines. | 1 | 2 |
| 4521.2 | 12/22/2000 | Fixed the high CPU usage problem when multiple processes read or write the same file simultaneously. | 3 | 3 |
| 4521.1 | 12/5/2000 | Enhancement. Refined the incoming file monitor policy to get higher security with better real-time performance. | N/A | 2 |
| 4520.3 | 9/5/2000 | Fixed the problem of incorrect multiple RDR attach requests when several RDR accesses happened simultaneously. | 2 | 3 |
| 4520.2 | 8/30/2000 | Fixed the problem of no detection when existing mounted volume remounts to another driver letter. | 3 | 2 |
INO_FLPY.SYS for all Antivirus Products 4.x, 6. x, 7.x
Supports Windows NT 4, Windows 2000, Windows XP (32 bit and 64 bit), and Windows Server 2003 Server (32 bit and 64 bit)
| Build Number | Build Date | Fixes and Enhancements | Severity | Pervasiveness |
| 6100.114 | 6/5/2007 | Fix the problem of not clearing control field of next IRP location. | 3 | 2 |
| 6100.113 | 12/22/2006 | Add support for monitoring more file systems, including Vista's. | 3 | 2 |
| 6100.112 | 10/20/2006 | Fix a very rare BSOD issue happened during early boot time. | 1 | 3 |
| 6100.111 | 7/7/2006 | Drivers are signed with the new Microsoft cross certificate. | 2 | 3 |
| 6100.110 | 11/3/2005 | Fixed the system crash problem caused by early unload of ino_fltr.sys. | 1 | 3 |
| 6100.109 | 1/5/2005 | Fixed the device object leaking problem for some failed mount operations. | 2 | 2 |
| Fixed the system crash problem caused by certain failed mount operations. | 1 | 3 | ||
| 6100.106 | 6/19/2003 | Fix floppy disk boot sector no detection problem. | 2 | 2 |
| 6100.105 | 6/3/2003 | Enhancement. Add AMD64 support | N/A | N/A |
| 6100.104 | 4/29/2003 | Fix the problem of inserting multi instances of the same exclude PID. | 5 | 3 |
| 6100.102 | 1/3/2003 | Fixed tarious IOCTL valnurabilities, primarily for DC test. | 3 | 3 |
| Support Ino_fltr device detach on file system change notification.. | 3 | 3 | ||
| Change version information as product advances. | 5 | 3 | ||
| 6003.8 | 11/7/2001 | Fixed the device object leftover problem. | 2 | 2 |
| Fixed the problem of referencing IRP after IoCompleteRequest. | 1 | 2 | ||
| 6003.6 | 8/31/2001 | Fixed the problem of incorrectly handling the invalid device request. | 3 | 3 |
| Fixed the incorrect driver letter problem when 'A' is 'devicefloppy1' or 'B' is 'devicefloppy0'. | 3 | 2 | ||
| Fixed the hot swap floppy problem. | 3 | 2 | ||
| 6003.3 | 5/18/2001 | Fixed the problem of no detection on dynamic volume and volumes use mount point only. | 3 | 2 |
| 6003.2 | 4/27/2001 | Enhancement. Port code to IA64 Windows XP platform. | N/A | N/A |
| 6003.1 | 8/17/2000 | Added critical area protection on some important code. | 2 | 3 |
| 6002.1 | 5/1/2000 | Fixed no detection problem on boot sector in unrecognized file system (invalid boot record) for better security. | 3 | 2 |
WIMMUN32.VXD for all Antivirus Products 4.x, 6.x , 7.x
Supports Windows 95, Windows 98, and Windows ME.
| Build Number | Build Date | Fixes and Enhancements | Severity | Pervasiveness |
| 7.00.1015 | 10/20/2003 | Fix the problem of detecting network files even this is not selected in realtime option (with Novell network installed only). | 4 | 3 |
| 6.01.1040 | 09/29/2003 | Block files even if they are in a directory excluded from realtime scanning. | 5 | 2 |
| Fix EXE getting scanned in excluded directory when set to scan compressed files. | 5 | 2 | ||
| 6.01.1039 | 07/30/2003 | Fix MinSPs blue screens. | 1 | 3 |
| Fix system hang when certain character devices are used (printers, smart cards, etc). | 2 | 3 | ||
| Fix system cure problem in 7.0. | 3 | 2 | ||
| Fix infected files with avb extension not being moved. | 3 | 2 | ||
| Fix machine freeze on boot. | 2 | 3 | ||
| Fix incoming files in excluded directory getting scanned. | 3 | 2 | ||
| Fix system hang when Scandisk is run. | 2 | 2 | ||
| 6.01.1034 | 04/29/2003 | Fix the problem of alternating NW logon script with protecting network drive option. | 4 | 3 |
| 6.01.1033 | 03/05/2003 | Fix no detection problem for some files with localized character name. | 3 | 3 |
| 6.01.1032 | 02/11/2003 | Fix MinSPs blue screen. | 3 | 3 |
| 6.01.1031 | 02/03/2003 | Fix system hang on shutdown. | 3 | 1 |
| 6.01.1029 | 12/28/2002 | Fix the problem of not blocking infected CD-resident files accessed by edit. | 3 | 3 |
| Fix the problem of not blocking repeated (>148 times) infected files access. | 3 | 3 | ||
| Improve kernel stack usage to eliminate possible kernel stack overflow. | 1 | 2 | ||
| Fix caching network file problem. | 3 | 3 | ||
| Fix the no detection problem for infected AVB files with action "Move". | 3 | 3 | ||
| 6.01.1018 | 9/23/2002 | Enhancement. Limit local stack usage to prevent kernel stack overflows. | 3 | 3 |
| Enhancement. Postpone find file operation to improve real-time performance. | 3 | 3 | ||
| 6.01.1014 | 4/16/2002 | Fixed a problem where the contents of some compressed files would not be scanned. | 2 | 2 |
INOCFDD.VXD for Antivirus Product Version 6.x , 7.x
Supports Windows 95, Windows 98, and Windows ME.
| Build Number | Build Date | Fixes and Enhancements | Severity | Pervasiveness |
| 6.00.0002 | 11/7/2000 | Add boot sector cure function for raw disk formats. | 3 | 3 |