Hi Barb,
I've already disabled the start screen in case the issue was caused by either the recent items or the templates. And I always either create a brand new sandbox or delete contents to make sure any setting changes are picked up.
I'm not aware of having any setting that would affect anything other than how projects are calculated. No external dependency or plugin or anything, really.
I can think of a few possible external factors that might be at play:
1. Recent projects include ones on network drives (though I don't think this should break it). In fact this is why I would like to use SBIE to not affect any dependent network projects.
2. My office account has three connected services, OneDrive personal, OneDrive business and SharePoint. The reason why I fail to see how this would affect anything is that Word opens, and it is associated with the same account, and it has the same connected services.
3. I just recalled (and searched back the records) that Project does not have a C2R installer by default. I had some C2R Office products on my computer (e.g.SfB), so I had to download the Office 2016 deployment tool and create an xml configuration to install Project 2016 Std Retail. Then I had to activate it with a key (rather than my account). Maybe the project you tested wasn't the C2R version then, and maybe the key activation check is causing issues.
I realise that my config is unusual and as you have managed to install and run the vanilla version of Project, I'm not expecting you to try and troubleshoot obscure scenarios. If you have any potential things I could try, I would wellcome that, but otherwise I'll just trudge along trying to fix on my own and will post the solution here if I find it.
Thanks,
Gergely
Update:
I have tried running ProcessMonitor to see if I can isolate where it goes wrong. What I see is that it loads all the settings as expected, then goes to DWM (I assuming bringing up the UI), then gets bogged down on some cryptsvc. After this point, winproj only queries cryptsvc and DigitalPersona.
When it seems to finish normal operation:
Code: Select all
12:12:32.0645481 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Office\16.0\MS Project BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.0646547 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Office\16.0\MS Project\Settings BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.0647924 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Office\16.0\MS Project\Settings BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.0648556 WINPROJ.EXE 99928 RegQueryKey HKCU\Software\Microsoft\Office\16.0\MS Project\Settings BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.0649211 WINPROJ.EXE 99928 RegEnumValue HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Office\16.0\MS Project\Settings NO MORE ENTRIES Index: 0, Length: 128
12:12:32.0734246 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.0736366 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.0736903 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.0739552 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.0740061 WINPROJ.EXE 99928 RegOpenKey HKLM\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc NAME NOT FOUND Desired Access: Read
12:12:32.0743878 WINPROJ.EXE 99928 RegEnumValue HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc NO MORE ENTRIES Index: 7, Length: 128
12:12:32.0745055 WINPROJ.EXE 99928 RegOpenKey HKLM\SYSTEM\CurrentControlSet\Services\cryptsvc REPARSE Desired Access: Read
12:12:32.0748592 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.0750443 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.0751363 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.0753755 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.0754201 WINPROJ.EXE 99928 RegOpenKey HKLM\System\CurrentControlSet\Services\CryptSvc REPARSE Desired Access: Read
12:12:32.0755966 WINPROJ.EXE 99928 RegQueryKey HKLM\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.0772080 WINPROJ.EXE 99928 RegEnumValue HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc NO MORE ENTRIES Index: 8, Length: 128
12:12:32.0775293 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.0778518 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.0780899 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.0781846 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.1357695 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Windows\CurrentVersion\Explorer BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.1359101 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:12:32.1363340 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced NAME NOT FOUND Desired Access: Read
12:12:32.1371918 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Windows\CurrentVersion\Explorer BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.1372925 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:12:32.1375795 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced NAME NOT FOUND Desired Access: Read
12:12:32.1859555 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Policies\Microsoft\Office\16.0\common BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.1861718 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Policies\Microsoft\Office\16.0\common\general BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.1865058 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Policies\Microsoft\Office\16.0\common\general BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.1866957 WINPROJ.EXE 99928 RegQueryKey HKCU\Software\Policies\Microsoft\Office\16.0\common\general BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.1867916 WINPROJ.EXE 99928 RegEnumValue HKU\Sandbox_gb_ProjectTest\user\current\software\Policies\Microsoft\Office\16.0\common\general NO MORE ENTRIES Index: 0, Length: 128
12:12:32.1873581 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Office\16.0\Common BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.1875377 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Office\16.0\Common\General BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.1877848 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Office\16.0\Common\General BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.1879135 WINPROJ.EXE 99928 RegQueryKey HKCU\Software\Microsoft\Office\16.0\Common\General BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.1880130 WINPROJ.EXE 99928 RegEnumValue HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Office\16.0\Common\General NO MORE ENTRIES Index: 0, Length: 128
12:12:32.2207041 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.2211328 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Windows\CurrentVersion BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.2212267 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:12:32.2215098 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell NAME NOT FOUND Desired Access: Read
12:12:32.2220387 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Windows BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.2221430 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\DWM NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:12:32.2224130 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\DWM NAME NOT FOUND Desired Access: Read
12:12:32.2229822 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.2233793 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Windows\CurrentVersion BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.2234899 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:12:32.2237551 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell NAME NOT FOUND Desired Access: Read
12:12:32.2243453 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\user\current\software\Microsoft\Windows BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.2244472 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\DWM NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:12:32.2248277 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\user\current\Software\Microsoft\Windows\DWM NAME NOT FOUND Desired Access: Read
12:12:32.2558201 SbieCtrl.exe 99640 CreateFileMapping C:\Program Files (x86)\Microsoft Office\root\Office16\WINPROJ.EXE FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: |PAGE_NOCACHE
12:12:32.5794198 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.5799164 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.5800660 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.5806009 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.5806921 WINPROJ.EXE 99928 RegOpenKey HKLM\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc NAME NOT FOUND Desired Access: Read
12:12:32.5815073 WINPROJ.EXE 99928 RegEnumValue HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc NO MORE ENTRIES Index: 7, Length: 128
12:12:32.5818685 WINPROJ.EXE 99928 RegOpenKey HKLM\SYSTEM\CurrentControlSet\Services\cryptsvc REPARSE Desired Access: Read
12:12:32.5825190 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.5827208 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.5827962 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.5830263 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.5830745 WINPROJ.EXE 99928 RegOpenKey HKLM\System\CurrentControlSet\Services\CryptSvc REPARSE Desired Access: Read
12:12:32.5831941 WINPROJ.EXE 99928 RegQueryKey HKLM\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.5836666 WINPROJ.EXE 99928 RegEnumValue HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc NO MORE ENTRIES Index: 8, Length: 128
12:12:32.5837779 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.5838770 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.5839690 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.5840594 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:32.8118742 SandboxieCrypto.exe 102044 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.8122397 SandboxieCrypto.exe 102044 RegOpenKey HKLM\System\CurrentControlSet\Services\CryptSvc REPARSE Desired Access: Read
12:12:32.8129625 SandboxieCrypto.exe 102044 RegQueryKey HKLM\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:32.8143438 SandboxieCrypto.exe 102044 RegEnumValue HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc NO MORE ENTRIES Index: 8, Length: 128
12:12:32.9655910 tcsd_win32.exe 2068 RegQueryValue HKLM\SOFTWARE\WOW6432Node\Security Innovation\TSS\socketSelectTimeoutSecs NAME NOT FOUND Length: 144
12:12:32.9889535 Sophos UI.exe 15348 RegOpenKey HKLM\SOFTWARE\Sophos\Sophos UI\AdapterNotifications\APPSPROXY NAME NOT FOUND Desired Access: Notify
12:12:32.9896969 Sophos UI.exe 15348 RegOpenKey HKLM\SOFTWARE\Sophos\Sophos UI\AdapterNotifications\HMPA NAME NOT FOUND Desired Access: Notify
12:12:32.9897103 Sophos UI.exe 15348 RegOpenKey HKLM\SOFTWARE\WOW6432Node\Sophos\DataProtection NAME NOT FOUND Desired Access: Notify
12:12:33.0853941 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services BUFFER OVERFLOW Query: Basic, Length: 24
12:12:33.0855895 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:33.0856258 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:33.0857995 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:33.0858425 WINPROJ.EXE 99928 RegOpenKey HKLM\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc NAME NOT FOUND Desired Access: Read
12:12:33.0861820 WINPROJ.EXE 99928 RegEnumValue HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc NO MORE ENTRIES Index: 7, Length: 128
12:12:33.0862874 WINPROJ.EXE 99928 RegOpenKey HKLM\SYSTEM\CurrentControlSet\Services\cryptsvc REPARSE Desired Access: Read
12:12:33.0865653 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services BUFFER OVERFLOW Query: Basic, Length: 24
12:12:33.0867189 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:33.0867868 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\cryptsvc BUFFER OVERFLOW Query: Name, Length: 256
12:12:33.0870047 WINPROJ.EXE 99928 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:12:33.0870473 WINPROJ.EXE 99928 RegOpenKey HKLM\System\CurrentControlSet\Services\CryptSvc REPARSE Desired Access: Read
12:12:33.0871606 WINPROJ.EXE 99928 RegQueryKey HKLM\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
Later on only these DigitalPersona queries:
Code: Select all
12:13:06.2461130 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona NAME NOT FOUND Desired Access: Read
12:13:06.2462694 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:13:06.2463610 WINPROJ.EXE 99928 RegOpenKey HKLM\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read
12:13:06.2477793 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\MACHINE\SOFTWARE\WOW6432Node\DigitalPersona NAME NOT FOUND Desired Access: Read
12:13:06.2479629 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\MACHINE\SOFTWARE\WOW6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:13:06.2502695 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona NAME NOT FOUND Desired Access: Read
12:13:06.2504041 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:13:06.2504759 WINPROJ.EXE 99928 RegOpenKey HKLM\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read
12:13:06.2507830 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\MACHINE\SOFTWARE\WOW6432Node\DigitalPersona NAME NOT FOUND Desired Access: Read
12:13:06.2508533 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\MACHINE\SOFTWARE\WOW6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:13:06.2515931 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona NAME NOT FOUND Desired Access: Read
12:13:06.2516535 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:13:06.2517024 WINPROJ.EXE 99928 RegOpenKey HKLM\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read
12:13:06.2519934 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\MACHINE\SOFTWARE\WOW6432Node\DigitalPersona NAME NOT FOUND Desired Access: Read
12:13:06.2520526 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\MACHINE\SOFTWARE\WOW6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:13:06.3104977 SandboxieCrypto.exe 102044 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:13:06.3106698 SandboxieCrypto.exe 102044 RegOpenKey HKLM\System\CurrentControlSet\Services\CryptSvc REPARSE Desired Access: Read
12:13:06.3108340 SandboxieCrypto.exe 102044 RegQueryKey HKLM\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:13:06.3236052 SandboxieCrypto.exe 102044 RegEnumValue HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc NO MORE ENTRIES Index: 8, Length: 128
12:13:06.4557339 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona NAME NOT FOUND Desired Access: Read
12:13:06.4558116 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\machine\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:13:06.4558894 WINPROJ.EXE 99928 RegOpenKey HKLM\software\microsoft\Office\ClickToRun\registry\machine\SOFTWARE\Wow6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read
12:13:06.4561862 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\MACHINE\SOFTWARE\WOW6432Node\DigitalPersona NAME NOT FOUND Desired Access: Read
12:13:06.4562451 WINPROJ.EXE 99928 RegOpenKey HKU\Sandbox_gb_ProjectTest\MACHINE\SOFTWARE\WOW6432Node\DigitalPersona\Tracing NAME NOT FOUND Desired Access: Read, Maximum Allowed
12:13:06.6688668 CCFManager.exe 35944 RegQueryValue HKLM\SOFTWARE\DigitalPersona\Tracing\hookscope NAME NOT FOUND Length: 144
12:13:06.6689008 CCFManager.exe 35944 RegQueryValue HKLM\SOFTWARE\DigitalPersona\Tracing\hookfirst NAME NOT FOUND Length: 144
12:13:06.9739140 tcsd_win32.exe 2068 RegQueryValue HKLM\SOFTWARE\WOW6432Node\Security Innovation\TSS\socketSelectTimeoutSecs NAME NOT FOUND Length: 144
12:13:07.3245909 SandboxieCrypto.exe 102044 RegQueryKey HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:13:07.3246561 SandboxieCrypto.exe 102044 RegOpenKey HKLM\System\CurrentControlSet\Services\CryptSvc REPARSE Desired Access: Read
12:13:07.3249675 SandboxieCrypto.exe 102044 RegQueryKey HKLM\System\CurrentControlSet\Services\CryptSvc BUFFER OVERFLOW Query: Basic, Length: 24
12:13:07.3257211 SandboxieCrypto.exe 102044 RegEnumValue HKU\Sandbox_gb_ProjectTest\machine\System\CurrentControlSet\Services\CryptSvc NO MORE ENTRIES Index: 8, Length: 128
SandboxieCrypto runs along with these entries.
I think some of these might not be initiated by Project as it seems like it's iterating through some hooks. Programs that respond then are Roboform, Dell Data Protection (I don't use this to encrypt my drive, only to be able to use the fingerprint scanner to log on to windows 10 without pin), AdGuard. I have disabled AdGuard and Roboform just in case, but no change.
I can also see Office's UcMapi.exe looking up some certificates, I think this is related to my office account, and maybe lync. Note that Lync does not attempt to start, so this is probably not problematic.