I’m new to this product. For some reason the only way I can get the product to launch after the initial install is to go to Add/Remove programs and repair the install. I’ve tried uninstalling and reinstalling a few times already … no luck.
This has been an issue with both the demo and registered versions.
Workstation is WinXP wSP2. Have installed the demo on a Vista machine (which is not the one I want this installed on … and have not had this problem.)
I really don’t understand what’s happening. You mention you can’t start FontCreator the way you start other software. Does it crash?
I double click on the icon and nothing happens. I’ve tried launching the EXE directly … same result … nothing.
The ONLY way I can get into the app is by following the steps described below.
I’ve checked the event logs, nothing seems to be wrong.
“Sequence”,“Time of Day”,“Process Name”,“PID”,“Operation”,“Path”,“Result”,“Detail”
“77105”,“5:30:02.8343674 PM”,“FontCreator.exe”,“3952”,“Process Start”,“”,“SUCCESS”,“Parent PID: 956”
“77106”,“5:30:02.8343704 PM”,“FontCreator.exe”,“3952”,“Thread Create”,“”,“SUCCESS”,“Thread ID: 3296”
“77285”,“5:30:02.8634781 PM”,“FontCreator.exe”,“3952”,“QueryNameInformationFile”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“SUCCESS”,“Name: \Program Files\High-Logic\FontCreator\FontCreator.exe”
“77289”,“5:30:02.8641100 PM”,“FontCreator.exe”,“3952”,“Load Image”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“SUCCESS”,“Image Base: 0x400000, Image Size: 0x8bb000”
“77292”,“5:30:02.8642798 PM”,“FontCreator.exe”,“3952”,“Load Image”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“Image Base: 0x7c900000, Image Size: 0xb0000”
“77293”,“5:30:02.8642969 PM”,“FontCreator.exe”,“3952”,“QueryNameInformationFile”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“SUCCESS”,“Name: \Program Files\High-Logic\FontCreator\FontCreator.exe”
“77312”,“5:30:02.8660010 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\Prefetch\FONTCREATOR.EXE-1E6ED0C1.pf”,“SUCCESS”,“Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: , AllocationSize: n/a, OpenResult: Opened”
“77318”,“5:30:02.8666162 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\Prefetch\FONTCREATOR.EXE-1E6ED0C1.pf”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77323”,“5:30:02.8677998 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\Prefetch\FONTCREATOR.EXE-1E6ED0C1.pf”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77329”,“5:30:02.8689796 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\Prefetch\FONTCREATOR.EXE-1E6ED0C1.pf”,“SUCCESS”,“IndexNumber: 0x7700000005fda3”
“77332”,“5:30:02.8697856 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\Prefetch\FONTCREATOR.EXE-1E6ED0C1.pf”,“SUCCESS”,“AllocationSize: 4,096, EndOfFile: 4,972, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77335”,“5:30:02.8700102 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\Prefetch\FONTCREATOR.EXE-1E6ED0C1.pf”,“SUCCESS”,“”
“77337”,“5:30:02.8704242 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\Prefetch\FONTCREATOR.EXE-1E6ED0C1.pf”,“SUCCESS”,“AllocationSize: 4,096, EndOfFile: 4,972, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77339”,“5:30:02.8707022 PM”,“FontCreator.exe”,“3952”,“ReadFile”,“C:\WINDOWS\Prefetch\FONTCREATOR.EXE-1E6ED0C1.pf”,“SUCCESS”,“Offset: 0, Length: 4,972”
“77340”,“5:30:02.8709938 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\Prefetch\FONTCREATOR.EXE-1E6ED0C1.pf”,“SUCCESS”,“”
“77343”,“5:30:02.8710712 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:”,“SUCCESS”,“Desired Access: Read Attributes, Write Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77348”,“5:30:02.8711282 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77349”,“5:30:02.8711469 PM”,“FontCreator.exe”,“3952”,“FileSystemControl”,“C:”,“SUCCESS”,“Control: FSCTL_FILE_PREFETCH”
“77350”,“5:30:02.8711902 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:",“SUCCESS”,“Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77351”,“5:30:02.8712581 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:",“SUCCESS”,“0: .rnd, 1: AdobeDebug.txt, 2: ASLog.txt, 3: AUTOEXEC.BAT, 4: bar.emf, 5: Binaries, 6: boot.ini, 7: BOOT_SAV.BOT, 8: Config.Msi, 9: CONFIG.SYS, 10: cpsweb.log, 11: CTMeasureTiming.ini, 12: Data, 13: Dell, 14: Diskeeper, 15: Documents and Settings, 16: Drivers, 17: EY Select Client Setup_4622.EXE, 18: Eyconn, 19: EYSDIAG.LOG, 20: fragreport.ini, 21: hiberfil.sys, 22: i386, 23: Inetpub, 24: Intel, 25: IO.SYS, 26: lj1150_1300prnsys, 27: Lotus, 28: MSDOS.SYS, 29: MSOCache, 30: NTDETECT.COM, 31: ntldr, 32: Oracle, 33: pagefile.sys, 34: PrePointsec - System Volume Information, 35: Program Files, 36: PROT_INS.SYS, 37: RECYCLER, 38: Reinstate EYPB.exe, 39: System Volume Information, 40: sys_error.log, 41: temp, 42: VOL_CHAR.DAT, 43: WINDOWS, 44: WmpPpcItnSync.log, 45: WMProDesktop.log”
“77352”,“5:30:02.8713467 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:",“NO MORE FILES”,””
“77353”,“5:30:02.8713777 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:",“SUCCESS”,””
“77355”,“5:30:02.8714785 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\PROGRAM FILES”,“SUCCESS”,“Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77356”,“5:30:02.8715509 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\Program Files”,“SUCCESS”,“0: ., 1: .., 2: 396_Fiberlink, 3: Adobe, 4: AdorageI-GfxDatas, 5: AdorageI-SAL, 6: Altova, 7: Apoint, 8: Aventail Connect, 9: Beyond Compare 2, 10: BIAS, 11: Boris FX, Inc, 12: Cassetica, 13: CE Remote Tools, 14: CMAK, 15: Common Files, 16: ComPlus Applications, 17: Compustat ExcelLink, 18: CONEXANT, 19: Configuresoft, 20: ConnWiz, 21: Creative, 22: Creative Installation Information, 23: CyberArmor, 24: DIFX, 25: Diskeeper Corporation, 26: DivX, 27: eclipse Enterprise SDK 3.2.1, 28: eMusic Download Manager, 29: Ernst & Young, 30: Executive Software, 31: EY PCU, 32: EY Technology Reference, 33: EYHelp3 Fast Path Menu, 34: EYMarimba, 35: EYPCHC, 36: eyutils, 37: faxview, 38: FlowView, 39: Funk Software, 40: Google, 41: Hewlett-Packard, 42: High-Logic, 43: HTML Help Workshop, 44: IBM, 45: Ilium Software, 46: InCtrl5, 47: Infragistics, 48: Innovasys, 49: InstallShield Installation Information, 50: Intellinex, 51: InterActual, 52: Internet Explorer, 53: InterVideo, 54: Ipswitch, 55: Iron Mountain, 56: Java, 57: Je???A?K???P”
“77359”,“5:30:02.8717221 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\Program Files”,“NO MORE FILES”,“”
“77360”,“5:30:02.8717523 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\Program Files”,“SUCCESS”,“”
“77362”,“5:30:02.8718640 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\Program Files\HIGH-LOGIC”,“SUCCESS”,“Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77363”,“5:30:02.8719386 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\Program Files\High-Logic”,“SUCCESS”,“0: ., 1: .., 2: FontCreator, 3: MainType”
“77364”,“5:30:02.8720057 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\Program Files\High-Logic”,“NO MORE FILES”,“”
“77365”,“5:30:02.8720440 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\Program Files\High-Logic”,“SUCCESS”,“”
“77367”,“5:30:02.8721521 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\Program Files\High-Logic\FONTCREATOR”,“SUCCESS”,“Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77369”,“5:30:02.8723566 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\Program Files\High-Logic\FontCreator”,“SUCCESS”,“0: ., 1: .., 2: Composites, 3: FontCreator.chm, 4: FontCreator.exe, 5: FontCreator.tip, 6: FontCreatorExt.dll, 7: FontCreatorManual.pdf, 8: FontInstaller.dll, 9: Kerning, 10: SubFamily.dat, 11: TableOffsetOrder.txt, 12: Transform, 13: Unicode, 14: unins000.dat, 15: unins000.exe”
“77370”,“5:30:02.8724261 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\Program Files\High-Logic\FontCreator”,“NO MORE FILES”,“”
“77371”,“5:30:02.8724571 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\Program Files\High-Logic\FontCreator”,“SUCCESS”,“”
“77373”,“5:30:02.8726496 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS”,“SUCCESS”,“Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77375”,“5:30:02.8728438 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\WINDOWS”,“SUCCESS”,“0: ., 1: .., 2: $hf_mig$, 3: $MSI31Uninstall_KB893803v2$, 4: $NtServicePackUninstall$, 5: $NtUninstallKB810217$, 6: $NtUninstallKB817778$, 7: $NtUninstallKB820291$, 8: $NtUninstallKB821253$, 9: $NtUninstallKB822603$, 10: $NtUninstallKB824105$, 11: $NtUninstallKB826942$, 12: $NtUninstallKB828028$, 13: $NtUninstallKB828741$, 14: $NtUninstallKB829558$, 15: $NtUninstallKB835732$, 16: $NtUninstallKB837001$, 17: $NtUninstallKB867282$, 18: $NtUninstallKB873333$, 19: $NtUninstallKB873339$, 20: $NtUninstallKB883667$, 21: $NtUninstallKB885250$, 22: $NtUninstallKB885835$, 23: $NtUninstallKB885836$, 24: $NtUninstallKB885855$, 25: $NtUninstallKB887816$, 26: $NtUninstallKB888111WXPSP2$, 27: $NtUninstallKB888113$, 28: $NtUninstallKB888302$, 29: $NtUninstallKB889320$, 30: $NtUninstallKB890047$, 31: $NtUninstallKB890175$, 32: $NtUninstallKB890859$, 33: $NtUninstallKB890923$, 34: $NtUninstallKB891781$, 35: $NtUninstallKB893066$, 36: $NtUninstallKB893086$, 37: $NtUninstallKB893756$, 38: $NtUninstallKB894476$, 39: $NtUninstallKB???A?K???P”
“77381”,“5:30:02.8736573 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\WINDOWS”,“SUCCESS”,“0: mozver.dat, 1: ms, 2: msagent, 3: msapps, 4: MSCompPackV1.log, 5: msdfmap.ini, 6: msdownld.tmp, 7: msgsocm.log, 8: msmqinst.log, 9: MSPuzzle.dat, 10: msxml4-KB936181-enu.LOG, 11: msxml6-KB933579-enu-x86.LOG, 12: mui, 13: NCUNINST.EXE, 14: netfxocm.log, 15: NetopiaRC, 16: NetWare.INI, 17: ngevent.dll, 18: ngmsgs.dll, 19: ngmsi.dll, 20: ngutil.exe, 21: ngwinx.dll, 22: notepad.exe, 23: notesnsd.ini, 24: nsreg.dat, 25: ntdtcsetup.log, 26: ocgen.log, 27: ocmsn.log, 28: ODBC.INI, 29: ODBCINST.INI, 30: oeuninst.exe, 31: OEWABLog.txt, 32: Offline Web Pages, 33: oobeact.log, 34: PatchInstall1Debug.log, 35: PCHealth, 36: PeerNet, 37: playgame.wav, 38: PMTSEC.DIR, 39: Prairie Wind.bmp, 40: Prefetch, 41: PROTOCOL.INI, 42: provisioning, 43: Q282784.log, 44: Q330994.exe, 45: Q814995.log, 46: Q818043.log, 47: Q828026.log, 48: QTFont.for, 49: QTFont.qfn, 50: qvphook.dll, 51: regedit.exe, 52: RegisteredPackages, 53: Registration, 54: REGLOCS.OLD, 55: regopt.log, 56: remeypb.exe, 57: RemFF.EXE, 58: RemGlobalSelfHelp.EXE, 59???A?K???P”
“77387”,“5:30:02.8739389 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\WINDOWS”,“NO MORE FILES”,“”
“77390”,“5:30:02.8741635 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS”,“SUCCESS”,“”
“77397”,“5:30:02.8749443 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32”,“SUCCESS”,“Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77400”,“5:30:02.8754421 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\WINDOWS\system32”,“SUCCESS”,“0: ., 1: .., 2: $winnt$.inf, 3: 1025, 4: 1028, 5: 1031, 6: 1033, 7: 1037, 8: 1041, 9: 1042, 10: 1054, 11: 12520437.cpx, 12: 12520850.cpx, 13: 2052, 14: 3076, 15: 3com_dmi, 16: 6to4svc.dll, 17: aaaamon.dll, 18: aaclient.dll, 19: access.cpl, 20: acctres.dll, 21: accwiz.exe, 22: acelpdec.ax, 23: acledit.dll, 24: aclui.dll, 25: activeds.dll, 26: activeds.tlb, 27: actmovie.exe, 28: actxprxy.dll, 29: AddPort.ini, 30: admgmt.msc, 31: admparse.dll, 32: admwprox.dll, 33: admxprox.dll, 34: adprop.dll, 35: adptif.dll, 36: adsiis.dll, 37: adsiisex.dll, 38: adsldp.dll, 39: adsldpc.dll, 40: adsmsext.dll, 41: adsnds.dll, 42: adsnt.dll, 43: adsnw.dll, 44: advapi32.dll, 45: advpack.dll, 46: AgentService_Trace.log, 47: ahui.exe, 48: alg.exe, 49: alrsvc.dll, 50: amcompat.tlb, 51: amstream.dll, 52: ansi.sys, 53: apcups.dll, 54: append.exe, 55: apphelp.dll, 56: appmgmt, 57: appmgmts.dll, 58: appmgr.dll, 59: appwiz.cpl, 60: arp.exe, 61: asctrls.ocx, 62: asferror.dll, 63: aspperf.dll, 64: asr_fmt.exe, 65: asr_ldm.exe, 66: asr_pfu.e???A?K???P”
“77405”,“5:30:02.8762001 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\WINDOWS\system32”,“SUCCESS”,“0: dbmsrpcn.dll, 1: dbmsvinn.dll, 2: dbnetlib.dll, 3: dbnmpntw.dll, 4: dcache.bin, 5: dciman32.dll, 6: dcomcnfg.exe, 7: ddeml.dll, 8: ddeshare.exe, 9: ddraw.dll, 10: ddrawex.dll, 11: debug.exe, 12: defrag.exe, 13: desk.cpl, 14: deskadp.dll, 15: deskmon.dll, 16: deskperf.dll, 17: desktop.ini, 18: devenum.dll, 19: devmgmt.msc, 20: devmgr.dll, 21: dfraginfo.txt, 22: dfrg.msc, 23: dfrgfat.exe, 24: dfrgntfs.exe, 25: dfrgres.dll, 26: dfrgsnap.dll, 27: dfrgui.dll, 28: dfscmd.exe, 29: dfscore.dll, 30: dfsgui.dll, 31: dfsgui.msc, 32: dfshim.dll, 33: dfsshlex.dll, 34: dgnet.dll, 35: dgrpsetu.dll, 36: dgsetup.dll, 37: dhcp, 38: dhcpcsvc.dll, 39: dhcpmgmt.msc, 40: dhcpmon.dll, 41: dhcpsapi.dll, 42: dhcpsnap.dll, 43: diactfrm.dll, 44: dialogsu.dll, 45: diantz.exe, 46: difx32.dll, 47: difxapi.dll, 48: digest.dll, 49: dimap.dll, 50: dinput.dll, 51: dinput8.dll, 52: DirectX, 53: diskcomp.com, 54: diskcopy.com, 55: diskcopy.dll, 56: DiskIO.dll, 57: diskmgmt.msc, 58: diskpart.exe, 59: diskperf.exe, 60: dispex.dll, 61: DivX.dll???A?K???P”
“77414”,“5:30:02.8769761 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\WINDOWS\system32”,“SUCCESS”,“0: igfxCoIn_v4704.dll, 1: igfxCoIn_v4814.dll, 2: igfxcpl.cpl, 3: igfxdev.dll, 4: igfxdo.dll, 5: igfxexps.dll, 6: igfxext.exe, 7: igfxpers.exe, 8: igfxpph.dll, 9: igfxrara.lrc, 10: igfxrchs.lrc, 11: igfxrcht.lrc, 12: igfxrcsy.lrc, 13: igfxrdan.lrc, 14: igfxrdeu.lrc, 15: igfxrell.lrc, 16: igfxrenu.lrc, 17: igfxres.dll, 18: igfxresp.lrc, 19: igfxress.dll, 20: igfxrfin.lrc, 21: igfxrfra.lrc, 22: igfxrheb.lrc, 23: igfxrhun.lrc, 24: igfxrita.lrc, 25: igfxrjpn.lrc, 26: igfxrkor.lrc, 27: igfxrnld.lrc, 28: igfxrnor.lrc, 29: igfxrplk.lrc, 30: igfxrptb.lrc, 31: igfxrptg.lrc, 32: igfxrrus.lrc, 33: igfxrsve.lrc, 34: igfxrtha.lrc, 35: igfxrtrk.lrc, 36: igfxsrvc.dll, 37: igfxsrvc.exe, 38: igfxtray.exe, 39: igfxzoom.exe, 40: igldev32.dll, 41: iglicd32.dll, 42: igmpagnt.dll, 43: igxpdv32.dll, 44: igxpdx32.dll, 45: igxpgd32.dll, 46: igxprd32.dll, 47: igxpun.exe, 48: igxpxa32.cpa, 49: igxpxa32.vp, 50: igxpxk32.vp, 51: igxpxs32.vp, 52: iisapp.vbs, 53: iisback.vbs, 54: iiscnfg.vbs, 55: iisext.dll, 56: iisext.vbs, 57: iisftp.vbs, ???A?K???P”
“77420”,“5:30:02.8775829 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\WINDOWS\system32”,“SUCCESS”,“0: midimap.dll, 1: miglibnt.dll, 2: migpwd.exe, 3: milcore.dll, 4: MIME40.OCX, 5: mimefilt.dll, 6: mindex.dll, 7: mlang.dat, 8: mlang.dll, 9: mlfcache.dat, 10: mll_hp.dll, 11: mll_mtf.dll, 12: mll_qic.dll, 13: MLPagAx.dll, 14: MMAviAx.dll, 15: mmc.exe, 16: mmcbase.dll, 17: mmcndmgr.dll, 18: mmcshext.dll, 19: mmdriver.inf, 20: mmdrv.dll, 21: mmfutil.dll, 22: mmsys.cpl, 23: mmsystem.dll, 24: mmtask.tsk, 25: mmutilse.dll, 26: mnmdd.dll, 27: mnmsrvc.exe, 28: mobsync.dll, 29: mobsync.exe, 30: mode.com, 31: modemui.dll, 32: modex.dll, 33: more.com, 34: moricons.dll, 35: mountvol.exe, 36: mouse.drv, 37: MP43DECD.dll, 38: MP43DMOD.dll, 39: MP4FileLib.dll, 40: MP4SDECD.dll, 41: MP4SDMOD.dll, 42: mpeg2data.ax, 43: mpg2splt.ax, 44: MPG4DECD.dll, 45: MPG4DMOD.dll, 46: mpg4ds32.ax, 47: mplay32.exe, 48: mpnotify.exe, 49: mpr.dll, 50: mprapi.dll, 51: mprddm.dll, 52: mprdim.dll, 53: mprmsg.dll, 54: mprsnap.dll, 55: mprui.dll, 56: mqad.dll, 57: mqbkup.exe, 58: mqcertui.dll, 59: mqdscli.dll, 60: mqgentr.dll, 61: mqise.dll, 62:???A?K???P”
“77424”,“5:30:02.8782950 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\WINDOWS\system32”,“SUCCESS”,“0: odbcji32.dll, 1: odbcjt32.dll, 2: odbcp32r.dll, 3: odbctrac.dll, 4: odc.dll, 5: Odcpl.cpl, 6: oddbse32.dll, 7: odexl32.dll, 8: odfox32.dll, 9: odGinaLibrary.dll, 10: odpdx32.dll, 11: odtext32.dll, 12: odyEvent.dll, 13: odyGina.dll, 14: oembios.bin, 15: oembios.dat, 16: oembios.sig, 17: OEMINFO.INI, 18: OEMLOGO.BMP, 19: offfilt.dll, 20: ole2.dll, 21: ole2disp.dll, 22: ole2nls.dll, 23: ole32.dll, 24: oleacc.dll, 25: oleaccrc.dll, 26: oleaut32.dll, 27: olecli.dll, 28: olecli32.dll, 29: olecnv32.dll, 30: oledlg.dll, 31: oleprn.dll, 32: olepro32.dll, 33: olesvr.dll, 34: olesvr32.dll, 35: olethk32.dll, 36: oobe, 37: openfiles.exe, 38: opengl32.dll, 39: osk.exe, 40: osuninst.dll, 41: osuninst.exe, 42: P11lm.dll, 43: p2p.dll, 44: p2pgasvc.dll, 45: p2pgraph.dll, 46: p2pnetsh.dll, 47: p2psvc.dll, 48: packager.exe, 49: pagefileconfig.vbs, 50: pagents.exe, 51: panmap.dll, 52: paqsp.dll, 53: pathping.exe, 54: pautoenr.dll, 55: Pbaen70.tlb, 56: Pbdwe70.dll, 57: Pbodb70.dll, 58: pbodb70.ini, 59: Pbrtc70.dll, 60: Pbvm70.d???A?K???P”
“77427”,“5:30:02.8787627 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\WINDOWS\system32”,“SUCCESS”,“0: SoftwareDistribution, 1: sol.exe, 2: SONYHCY.DLL, 3: sort.exe, 4: sortkey.nls, 5: sorttbls.nls, 6: sound.drv, 7: spdwnwxp.exe, 8: Spell8.ocx, 9: spider.exe, 10: spiisupd.exe, 11: spmsg.dll, 12: spmsg2.dll, 13: spnike.dll, 14: spnpinst.exe, 15: spool, 16: spoolss.dll, 17: spoolsv.exe, 18: sprestrt.exe, 19: sprio600.dll, 20: sprio800.dll, 21: spupdsvc.exe, 22: spupdwxp.exe, 23: spupdwxp.log, 24: spxcoins.dll, 25: SQLAGENTCTR90.DLL, 26: sqlclnt.rsp, 27: sqlctr90.dll, 28: sqlncli.chm, 29: sqlncli.dll, 30: sqlnclir.rll, 31: SQLServerManager.msc, 32: sqlsodbc.chm, 33: sqlsrv32.dll, 34: sqlsrv32.rll, 35: SQLSTR.DLL, 36: sqlunirl.dll, 37: sqlwid.dll, 38: sqlwoa.dll, 39: srclient.dll, 40: srrstr.dll, 41: srsvc.dll, 42: srvsvc.dll, 43: ss3dfo.scr, 44: ssbezier.scr, 45: ssdpapi.dll, 46: ssdpsrv.dll, 47: ssflwbox.scr, 48: ssldivx.dll, 49: ssleay32.dll, 50: ssmarque.scr, 51: ssmypics.scr, 52: ssmyst.scr, 53: sspipes.scr, 54: ssstars.scr, 55: sstext3d.scr, 56: stacapi.dll, 57: stacgui.cpl, 58: staco.dll, 59: stas651FP1.???A?K???P”
“77442”,“5:30:02.8836105 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\WINDOWS\system32”,“SUCCESS”,“0: wow32.dll, 1: wowdeb.exe, 2: wowexec.exe, 3: wowfax.dll, 4: wowfaxui.dll, 5: wpa.dbl, 6: wpabaln.exe, 7: wpdconns.dll, 8: wpdmtp.dll, 9: wpdmtpdr.dll, 10: wpdmtpus.dll, 11: WpdShext.dll, 12: wpdshextautoplay.exe, 13: wpdshextres.dll, 14: WPDShServiceObj.dll, 15: wpdsp.dll, 16: wpdtrace.dll, 17: wpd_ci.dll, 18: wpnpinst.exe, 19: write.exe, 20: ws03res.dll, 21: ws2help.dll, 22: ws2_32.dll, 23: WSATRACE.dll, 24: wscntfy.exe, 25: wscript.exe, 26: wscsvc.dll, 27: wscui.cpl, 28: wsecedit.dll, 29: wshatm.dll, 30: wshbth.dll, 31: wshcon.dll, 32: wshext.dll, 33: wship6.dll, 34: wshirda.dll, 35: wshisn.dll, 36: wshnetbs.dll, 37: wshom.ocx, 38: wshrm.dll, 39: wshtcpip.dll, 40: wsnmp32.dll, 41: wsock32.dll, 42: wstdecod.dll, 43: wstpager.ax, 44: wstrenderer.ax, 45: wtsapi32.dll, 46: wuapi.dll, 47: wuauclt.exe, 48: wuauclt1.exe, 49: wuaucpl.cpl, 50: wuaucpl.cpl.manifest, 51: wuaueng.dll, 52: wuaueng1.dll, 53: wuauserv.dll, 54: wucltui.dll, 55: WUDFCoinstaller.dll, 56: WudfHost.exe, 57: WudfPlatform.dll, 58: WudfSvc.dll???A?K???P”
“77444”,“5:30:02.8840052 PM”,“FontCreator.exe”,“3952”,“QueryDirectory”,“C:\WINDOWS\system32”,“NO MORE FILES”,“”
“77446”,“5:30:02.8843595 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32”,“SUCCESS”,“”
“77451”,“5:30:02.8854415 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77458”,“5:30:02.8869771 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77466”,“5:30:02.8879731 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\ntdll.dll”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77468”,“5:30:02.8884938 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“IndexNumber: 0x4000000002ced”
“77472”,“5:30:02.8892562 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“AllocationSize: 708,608, EndOfFile: 708,096, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77497”,“5:30:02.8959146 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“”
“77503”,“5:30:02.8971544 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“AllocationSize: 708,608, EndOfFile: 708,096, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77508”,“5:30:02.8978570 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77514”,“5:30:02.8985778 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77524”,“5:30:02.9000732 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\kernel32.dll”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77532”,“5:30:02.9009119 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“IndexNumber: 0x6000000056753”
“77538”,“5:30:02.9019925 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“AllocationSize: 602,112, EndOfFile: 984,576, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77541”,“5:30:02.9026040 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“”
“77546”,“5:30:02.9036343 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“AllocationSize: 602,112, EndOfFile: 984,576, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77567”,“5:30:02.9055490 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\unicode.nls”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77570”,“5:30:02.9063187 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\unicode.nls”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77572”,“5:30:02.9070249 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\unicode.nls”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77576”,“5:30:02.9080086 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\unicode.nls”,“SUCCESS”,“IndexNumber: 0x2000000001cc3”
“77579”,“5:30:02.9089065 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\unicode.nls”,“SUCCESS”,“AllocationSize: 36,864, EndOfFile: 89,588, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77583”,“5:30:02.9097493 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\unicode.nls”,“SUCCESS”,“”
“77592”,“5:30:02.9110154 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\unicode.nls”,“SUCCESS”,“AllocationSize: 36,864, EndOfFile: 89,588, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77596”,“5:30:02.9115733 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\locale.nls”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77597”,“5:30:02.9120499 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\locale.nls”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77599”,“5:30:02.9126480 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\locale.nls”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77605”,“5:30:02.9130489 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\locale.nls”,“SUCCESS”,“IndexNumber: 0x4000000002d5d”
“77606”,“5:30:02.9134629 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\locale.nls”,“SUCCESS”,“AllocationSize: 131,072, EndOfFile: 249,270, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77609”,“5:30:02.9139040 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\locale.nls”,“SUCCESS”,“”
“77613”,“5:30:02.9145887 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\locale.nls”,“SUCCESS”,“AllocationSize: 131,072, EndOfFile: 249,270, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77617”,“5:30:02.9151343 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\sorttbls.nls”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77619”,“5:30:02.9156372 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\sorttbls.nls”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77621”,“5:30:02.9162688 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\sorttbls.nls”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77622”,“5:30:02.9167097 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\sorttbls.nls”,“SUCCESS”,“IndexNumber: 0x6000000002bb3”
“77624”,“5:30:02.9171259 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\sorttbls.nls”,“SUCCESS”,“AllocationSize: 16,384, EndOfFile: 22,040, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77625”,“5:30:02.9175495 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\sorttbls.nls”,“SUCCESS”,“”
“77629”,“5:30:02.9182205 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\sorttbls.nls”,“SUCCESS”,“AllocationSize: 16,384, EndOfFile: 22,040, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77633”,“5:30:02.9183303 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\Program Files\High-Logic\FontCreator\FONTCREATOR.EXE”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77635”,“5:30:02.9184163 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\Program Files\High-Logic\FontCreator\FONTCREATOR.EXE”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77637”,“5:30:02.9184853 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77638”,“5:30:02.9185116 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“SUCCESS”,“IndexNumber: 0xa00000006fe0d”
“77639”,“5:30:02.9185367 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“SUCCESS”,“AllocationSize: 2,736,128, EndOfFile: 2,763,416, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77640”,“5:30:02.9185661 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“SUCCESS”,“”
“77643”,“5:30:02.9186731 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“SUCCESS”,“AllocationSize: 2,736,128, EndOfFile: 2,763,416, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77647”,“5:30:02.9192139 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77649”,“5:30:02.9197425 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77655”,“5:30:02.9205526 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\user32.dll”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77658”,“5:30:02.9209817 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“IndexNumber: 0xc00000004c00a”
“77659”,“5:30:02.9213913 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“AllocationSize: 434,176, EndOfFile: 577,536, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77661”,“5:30:02.9219916 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“”
“77666”,“5:30:02.9227001 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“AllocationSize: 434,176, EndOfFile: 577,536, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77672”,“5:30:02.9232580 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77674”,“5:30:02.9237245 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77677”,“5:30:02.9243598 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\gdi32.dll”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys”
“77678”,“5:30:02.9247635 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“IndexNumber: 0x800000005bd30”
“77680”,“5:30:02.9251985 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“AllocationSize: 221,184, EndOfFile: 282,112, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77686”,“5:30:02.9255946 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“”
“77692”,“5:30:02.9262757 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“AllocationSize: 221,184, EndOfFile: 282,112, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77699”,“5:30:02.9267836 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\cahooknt.dll”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77704”,“5:30:02.9272451 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\cahooknt.dll”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77712”,“5:30:02.9278245 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\cahooknt.dll”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77714”,“5:30:02.9282561 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\cahooknt.dll”,“SUCCESS”,“IndexNumber: 0x4000000009328”
“77715”,“5:30:02.9287190 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\cahooknt.dll”,“SUCCESS”,“AllocationSize: 131,072, EndOfFile: 131,072, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77717”,“5:30:02.9291484 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\cahooknt.dll”,“SUCCESS”,“”
“77722”,“5:30:02.9299337 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\cahooknt.dll”,“SUCCESS”,“AllocationSize: 131,072, EndOfFile: 131,072, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77727”,“5:30:02.9304494 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\advapi32.dll”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77730”,“5:30:02.9309285 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\advapi32.dll”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77732”,“5:30:02.9315806 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\advapi32.dll”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77737”,“5:30:02.9319949 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\advapi32.dll”,“SUCCESS”,“IndexNumber: 0x3000000001ada”
“77739”,“5:30:02.9324608 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\advapi32.dll”,“SUCCESS”,“AllocationSize: 618,496, EndOfFile: 616,960, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77744”,“5:30:02.9343806 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\advapi32.dll”,“SUCCESS”,“”
“77749”,“5:30:02.9352961 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\advapi32.dll”,“SUCCESS”,“AllocationSize: 618,496, EndOfFile: 616,960, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77758”,“5:30:02.9366879 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\rpcrt4.dll”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77764”,“5:30:02.9371603 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\rpcrt4.dll”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77770”,“5:30:02.9391676 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\rpcrt4.dll”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77772”,“5:30:02.9397014 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\rpcrt4.dll”,“SUCCESS”,“IndexNumber: 0x7000000003fc1”
“77774”,“5:30:02.9401694 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\rpcrt4.dll”,“SUCCESS”,“AllocationSize: 581,632, EndOfFile: 581,120, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77779”,“5:30:02.9408653 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\rpcrt4.dll”,“SUCCESS”,“”
“77784”,“5:30:02.9415693 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\rpcrt4.dll”,“SUCCESS”,“AllocationSize: 581,632, EndOfFile: 581,120, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77795”,“5:30:02.9421688 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\ctype.nls”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77796”,“5:30:02.9428451 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\ctype.nls”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77799”,“5:30:02.9434801 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\ctype.nls”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys”
“77800”,“5:30:02.9438886 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\ctype.nls”,“SUCCESS”,“IndexNumber: 0x20000000029d9”
“77802”,“5:30:02.9443272 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\ctype.nls”,“SUCCESS”,“AllocationSize: 8,192, EndOfFile: 8,386, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77804”,“5:30:02.9447387 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\ctype.nls”,“SUCCESS”,“”
“77810”,“5:30:02.9454184 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\ctype.nls”,“SUCCESS”,“AllocationSize: 8,192, EndOfFile: 8,386, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77815”,“5:30:02.9459131 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\sortkey.nls”,“SUCCESS”,“Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77821”,“5:30:02.9464149 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\sortkey.nls”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77824”,“5:30:02.9470035 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\sortkey.nls”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77825”,“5:30:02.9473650 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\sortkey.nls”,“SUCCESS”,“IndexNumber: 0x2000000001cc7”
“77827”,“5:30:02.9477868 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\sortkey.nls”,“SUCCESS”,“AllocationSize: 180,224, EndOfFile: 262,148, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77828”,“5:30:02.9482285 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\sortkey.nls”,“SUCCESS”,“”
“77846”,“5:30:02.9499170 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\sortkey.nls”,“SUCCESS”,“AllocationSize: 180,224, EndOfFile: 262,148, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77852”,“5:30:02.9504064 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“”
“77855”,“5:30:02.9508632 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“”
“77862”,“5:30:02.9512954 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\unicode.nls”,“SUCCESS”,“”
“77866”,“5:30:02.9517172 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\locale.nls”,“SUCCESS”,“”
“77868”,“5:30:02.9520678 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\sorttbls.nls”,“SUCCESS”,“”
“77870”,“5:30:02.9521396 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“SUCCESS”,“”
“77872”,“5:30:02.9524941 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“”
“77874”,“5:30:02.9528606 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“”
“77877”,“5:30:02.9532995 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\cahooknt.dll”,“SUCCESS”,“”
“77880”,“5:30:02.9537717 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\advapi32.dll”,“SUCCESS”,“”
“77882”,“5:30:02.9542245 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\rpcrt4.dll”,“SUCCESS”,“”
“77885”,“5:30:02.9546910 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\ctype.nls”,“SUCCESS”,“”
“77888”,“5:30:02.9551520 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\sortkey.nls”,“SUCCESS”,“”
“77893”,“5:30:02.9557853 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77895”,“5:30:02.9563234 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77901”,“5:30:02.9571889 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\ntdll.dll”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77904”,“5:30:02.9575453 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“IndexNumber: 0x4000000002ced”
“77905”,“5:30:02.9578839 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“AllocationSize: 708,608, EndOfFile: 708,096, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77907”,“5:30:02.9583552 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\ntdll.dll”,“SUCCESS”,“”
“77917”,“5:30:02.9596146 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77919”,“5:30:02.9601146 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77923”,“5:30:02.9608086 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\kernel32.dll”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys”
“77925”,“5:30:02.9614260 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“IndexNumber: 0x6000000056753”
“77931”,“5:30:02.9618579 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“AllocationSize: 602,112, EndOfFile: 984,576, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77932”,“5:30:02.9622713 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\kernel32.dll”,“SUCCESS”,“”
“77942”,“5:30:02.9629717 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\Program Files\High-Logic\FontCreator\FONTCREATOR.EXE”,“SUCCESS”,“Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77943”,“5:30:02.9630849 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\Program Files\High-Logic\FontCreator\FONTCREATOR.EXE”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77945”,“5:30:02.9631661 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77946”,“5:30:02.9631907 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“SUCCESS”,“IndexNumber: 0xa00000006fe0d”
“77947”,“5:30:02.9632173 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“SUCCESS”,“AllocationSize: 2,736,128, EndOfFile: 2,763,416, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77948”,“5:30:02.9632497 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\Program Files\High-Logic\FontCreator\FontCreator.exe”,“SUCCESS”,“”
“77980”,“5:30:02.9656218 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77982”,“5:30:02.9661014 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“77991”,“5:30:02.9677516 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\user32.dll”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“77993”,“5:30:02.9681766 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“IndexNumber: 0xc00000004c00a”
“77996”,“5:30:02.9688364 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“AllocationSize: 434,176, EndOfFile: 577,536, NumberOfLinks: 1, DeletePending: False, Directory: False”
“77998”,“5:30:02.9692703 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\user32.dll”,“SUCCESS”,“”
“78010”,“5:30:02.9705928 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“78016”,“5:30:02.9710730 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Random Access, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“78019”,“5:30:02.9716748 PM”,“FontCreator.exe”,“3952”,“QueryInformationVolume”,“C:\WINDOWS\system32\gdi32.dll”,“BUFFER OVERFLOW”,“VolumeCreationTime: 5/16/2005 4:22:47 AM, VolumeSerialNumber: E873-F8C5, SupportsObjects: True, VolumeLabel: Sys?”
“78021”,“5:30:02.9720963 PM”,“FontCreator.exe”,“3952”,“QueryFileInternalInformationFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“IndexNumber: 0x800000005bd30”
“78023”,“5:30:02.9725637 PM”,“FontCreator.exe”,“3952”,“QueryStandardInformationFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“AllocationSize: 221,184, EndOfFile: 282,112, NumberOfLinks: 1, DeletePending: False, Directory: False”
“78024”,“5:30:02.9729780 PM”,“FontCreator.exe”,“3952”,“CloseFile”,“C:\WINDOWS\system32\gdi32.dll”,“SUCCESS”,“”
“78035”,“5:30:02.9741821 PM”,“FontCreator.exe”,“3952”,“CreateFile”,“C:\WINDOWS\system32\cahooknt.dll”,“SUCCESS”,“Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened”
“78038”,“5:30:02.9747159 PM”,“FontCreator.exe”,“3952”,“CreateFile”,"C
I’ve noticed several buffer overflows, that I’m not able to reproduce. I suggest your delete the prefetch of FontCreator. So in your case delete this file:
C:\WINDOWS\Prefetch\FONTCREATOR.EXE-1E6ED0C1.pf
Then try to start FontCreator.
deleting the file did not help. sending you the full log file separately.
I’ve received the log file, but unfortunately I can’t locate the problem.
I have just send you a special build, that should either work, or give valuable feedback. I’m looking forward to your results.
The build you sent is working out fine. Thanks for your quick response to this issue! Looking forward to what you have in store for the next release.
Hey There … it looks as though I’m having the exact same issue with MainType. I’ve sent you the process trace separately.
I suspect your system doesn’t like our protection mechanism. I’ve sent you a custom release with a more recent version of our protection algorithm. Maybe that solves the issue. Do let me know your results.
Tried the EXE you sent, still nothing … the MainType icon is not showing up in the system tray, nor do I see the process running.
I’ll try something else. You’ll receive a new build within a few minutes.
Not sure why this is an issue … but the new build is working.
That’s because I left out the protection mechanism…
One more thing I forgot to ask, do you have Data Execution Prevention (DEP) enabled? It seems protected software might fail to start when DEP is turned on.