Technical Information
To ensure autorun and distribution
Sets the following service settings
- [<HKLM>\System\CurrentControlSet\Services\SBT Log] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\SBT Log] 'ImagePath' = '%CommonProgramFiles(x86)%\Silver Bullet Technology\Logging\Logging Service\SBTLogService.exe'
Creates the following services
- 'SBT Log' %CommonProgramFiles(x86)%\Silver Bullet Technology\Logging\Logging Service\SBTLogService.exe
Modifies file system
Creates the following files
- %TEMP%\nsc30d.tmp\system.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\segment.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\scancrnet.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\rmslant.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\recogone.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ocrmodule.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ocrbnals.jpd
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ocranas.jpd
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\numrecog.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\mocr_eagle.ini
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\mocr.ini
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\micrdefault.myd
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\micr.myd
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\micr.jpd
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\logviewer_sourcesetting.xml
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\logviewer_logscolordefault.xml
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\logviewer_categorysetting.xml
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\logviewer.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ippan_nals.jpd
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\imgrotate.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\eagle.myd
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\csdscan.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\csdloc.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\cmc7.jpd
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\check_writer.jpd
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceitraceexe.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceiocr.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceitracedll.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\utility.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\wlm.dll
- %TEMP%\{792a1008-5218-2cc9-8240-5f6789a98d54}\set980d.tmp
- %TEMP%\{792a1008-5218-2cc9-8240-5f6789a98d54}\set96a5.tmp
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
- %TEMP%\{548da989-eea5-2818-c349-1277a0806e19}\set59d3.tmp
- %TEMP%\{548da989-eea5-2818-c349-1277a0806e19}\set582d.tmp
- %WINDIR%\dpinst.log
- %TEMP%\nscaab.tmp\accesscontrol.dll
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\silver bullet technology\ranger for cr-50_cr-80\uninstall - cr-50_cr-80.lnk
- %ProgramFiles(x86)%\silver bullet technology\ranger\uninst_cr-50_cr-80.exe
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\silver bullet technology\silver bullet website.lnk
- %ProgramFiles(x86)%\silver bullet technology\ranger\ranger.url
- %WINDIR%\installer\$patchcache$\managed\3e43b73803c7c394f8a6b2f0402e19c2\cachesize.txt
- %TEMP%\ixp000.tmp\vcredist.msi
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceiowview.dll
- %ALLUSERSPROFILE%\canon electronics\ixp18be.tmp\vcredi~3.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\vcredist_org.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\vcredist_x86.exe
- %WINDIR%\syswow64\drivers\usbscan.sys
- <SYSTEM32>\cr80cpl64.dll
- <SYSTEM32>\ceiusb64.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\canocr80.cat
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\canocr80.inf
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\canocr50.cat
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\canocr50.inf
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\dpinst.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\wlm.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceimocr.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceimicrex.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceimicr.dll
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\silver bullet technology\ranger for cr-50_cr-80\rangerflex for cr-50_cr-80.lnk
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\flexapp\canonflex.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\softlockresource.dll
- %ALLUSERSPROFILE%\silver bullet technology\sysrng.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\exception.msg
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\releasenotice.txt
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ranger.ocx
- %ALLUSERSPROFILE%\silver bullet technology\ranger\cr-50_cr-80\api files\cr50cr80options.ini
- %ALLUSERSPROFILE%\silver bullet technology\ranger\cr-50_cr-80\api files\genericoptions.ini
- %CommonProgramFiles(x86)%\silver bullet technology\logging\logging service\microsoft.vc80.mfc.manifest
- %CommonProgramFiles(x86)%\silver bullet technology\logging\logging service\mfcm80u.dll
- %CommonProgramFiles(x86)%\silver bullet technology\logging\logging service\mfcm80.dll
- %CommonProgramFiles(x86)%\silver bullet technology\logging\logging service\mfc80u.dll
- %CommonProgramFiles(x86)%\silver bullet technology\logging\logging service\mfc80.dll
- %CommonProgramFiles(x86)%\silver bullet technology\logging\logging service\msvcr80.dll
- %CommonProgramFiles(x86)%\silver bullet technology\logging\logging service\msvcp80.dll
- %CommonProgramFiles(x86)%\silver bullet technology\logging\logging service\msvcm80.dll
- %CommonProgramFiles(x86)%\silver bullet technology\logging\logging service\microsoft.vc80.crt.manifest
- %WINDIR%\syswow64\mfc71u.dll
- %WINDIR%\syswow64\mfc71.dll
- %WINDIR%\syswow64\msflxgrd.ocx
- %TEMP%\nscaab.tmp\system.dll
- %ProgramFiles(x86)%\4_drivercanoncr-80_winxp.exe
- %TEMP%\nsc30d.tmp\modern-header.bmp
- %ALLUSERSPROFILE%\silver bullet technology\iqa\iqaoptions.ini
- %ALLUSERSPROFILE%\silver bullet technology\iqa\iqareleasenotice.txt
- %WINDIR%\syswow64\cximage.dll
- %CommonProgramFiles(x86)%\silver bullet technology\iqa\silverbulletiqa.ocx
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceilock.dll
- %CommonProgramFiles(x86)%\silver bullet technology\logging\logging service\sbtlogservice.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceilang.lst
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceijpeg.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceiiqa.ini
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceiiqa.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceiip.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceihelp.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceidlg.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\aocr.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\csdtrace.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\cr80.mot.ini
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\cr80.mot
- %TEMP%\ixp000.tmp\vcredis1.cab
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceiowtiff.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceiowjpeg.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceiowifile.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\canoeagle.lib
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\canoeagle.loc
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\canoeagle.ini
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\canoeagle.dll
- %ALLUSERSPROFILE%\silver bullet technology\logging\rangerlog.ini
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\silver bullet technology\tools\sbt log options.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\silver bullet technology\tools\sbt log viewer.lnk
- %ProgramFiles(x86)%\silver bullet technology\sbt tools\bloodhound\bloodhound.exe
- %ProgramFiles(x86)%\silver bullet technology\sbt tools\log options editor\logprefeditor.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\api files\ceivseagle.dll
- %ProgramFiles%\log\packageinst-unisnt.txt
Sets the 'hidden' attribute to the following files
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat
Deletes the following files
- %TEMP%\ixp000.tmp\vcredis1.cab
- %ProgramFiles(x86)%\4_drivercanoncr-80_winxp.exe
- %TEMP%\nscaab.tmp\system.dll
- %TEMP%\nscaab.tmp\accesscontrol.dll
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\vcredist_x86.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\vcredist_org.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\dpinst.exe
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\canocr80.inf
- %TEMP%\nsc30d.tmp\modern-header.bmp
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\canocr80.cat
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\canocr50.cat
- %TEMP%\{792a1008-5218-2cc9-8240-5f6789a98d54}\canocr80.inf
- %TEMP%\{792a1008-5218-2cc9-8240-5f6789a98d54}\canocr80.cat
- %TEMP%\{548da989-eea5-2818-c349-1277a0806e19}\canocr50.inf
- %TEMP%\{548da989-eea5-2818-c349-1277a0806e19}\canocr50.cat
- %ALLUSERSPROFILE%\canon electronics\ixp18be.tmp\vcredi~3.exe
- %TEMP%\ixp000.tmp\vcredist.msi
- %ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\canocr50.inf
- %TEMP%\nsc30d.tmp\system.dll
Moves the following system files
- from %WINDIR%\installer\$patchcache$\managed\3e43b73803c7c394f8a6b2f0402e19c2\8.0.59193\ul_catalog.63e949f6_03bc_5c40_ff1f_c8b3b9a1e18e to C:\config.msi\1223e8.rbf
- from %WINDIR%\installer\$patchcache$\managed\3e43b73803c7c394f8a6b2f0402e19c2\8.0.59193\ul_manifest.63e949f6_03bc_5c40_ff1f_c8b3b9a1e18e to C:\config.msi\1223e9.rbf
Moves the following files
- from %WINDIR%\installer\$patchcache$\managed\3e43b73803c7c394f8a6b2f0402e19c2\cachesize.txt to C:\config.msi\1223ea.rbf
- from %TEMP%\{548da989-eea5-2818-c349-1277a0806e19}\set582d.tmp to %TEMP%\{548da989-eea5-2818-c349-1277a0806e19}\canocr50.cat
- from %TEMP%\{548da989-eea5-2818-c349-1277a0806e19}\set59d3.tmp to %TEMP%\{548da989-eea5-2818-c349-1277a0806e19}\canocr50.inf
- from %TEMP%\{792a1008-5218-2cc9-8240-5f6789a98d54}\set96a5.tmp to %TEMP%\{792a1008-5218-2cc9-8240-5f6789a98d54}\canocr80.cat
- from %TEMP%\{792a1008-5218-2cc9-8240-5f6789a98d54}\set980d.tmp to %TEMP%\{792a1008-5218-2cc9-8240-5f6789a98d54}\canocr80.inf
Miscellaneous
Creates and executes the following
- '%ProgramFiles(x86)%\4_drivercanoncr-80_winxp.exe' /S /D=%ProgramFiles(x86)%\Silver Bullet Technology
- '%ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\vcredist_x86.exe' /q /r:n
- '%ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\vcredist_org.exe' /T:"%ALLUSERSPROFILE%\Canon Electronics\IXP18BE.tmp" /q /r:n
- '%ALLUSERSPROFILE%\canon electronics\ixp18be.tmp\vcredi~3.exe'
- '%CommonProgramFiles(x86)%\silver bullet technology\logging\logging service\sbtlogservice.exe'
- '%ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\dpinst.exe' /Q /SA /A
- '%ProgramFiles(x86)%\silver bullet technology\ranger\cr-50_cr-80\temp\vcredist_org.exe' /T:"%ALLUSERSPROFILE%\Canon Electronics\IXP18BE.tmp" /q /r:n' (with hidden window)
Executes the following
- '%WINDIR%\syswow64\msiexec.exe' /i vcredist.msi
