Prev: InCtrl5
Next: DPC Latency Checker
From: The Elder on 11 Jul 2010 01:27
Raymond.CC Blog - Daily updated news of useful advanced computer ...
Daily updated news of useful advanced computer tips and tricks.
www.raymond.cc/ - Cached - Similar

Search for: "How To Monitor for Registry and File Changes in Windows"

Scroll down to my arrows

Author: Raymond
15
NOV


Usually when you install or run a software, it will write settings and
information to the registry and to files. The location of where it
writes in registry and files are unknown because it is done invisibly
in background. Most of the time I troubleshoot software problems by
manually checking the registry and files that are associated with the
software.
So how I know which file and registry location is associated with the
software? You can run the installer or program with Sandboxie to
investigate the contents or you can also do it with registry and drive
snapshot program. Other than snapshot program, you can also use
registry and file system monitoring software.

This is also a method used by crackers to extend software trial
period. For example, they’ve used until the trial period has expired
and then they find and remove the entry that records the day they had
been using the software. Once removed correctly, the trial period will
reset and allow them to use the software for another 30 days.


Regshot is a registry compare utility that allows you to quickly take
a snapshot of your registry and then compare it with a second one –
done after doing system changes or installing a new software product.

The changes report can be produced in text or HTML format and contains
a list of all modifications that have taken place between snapshot1
and snapshot2. In addition, you can also specify folders (with sub
folders) to be scanned for changes as well. What I really like about
Regshot is FAST. It took only 6 seconds to take the first snapshot of
my registry, then another 6 seconds for the second snapshot. Regshot
is only 72KB in size. Small, free and open source.
[ Download Regshot ]

There is another similar program that does the same thing called
InCtrl5. It is very old and slow compared to Regshot.

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

If you want to download InCtrl5, you can get it here.

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

A very useful tool that works with RegShot and InCtrl5 is UNDOReg.
UNDOReg analyzes the report generated by RegShot, InCtrl and System
Mechanic, and deletes referenced registry keys.

Just click on the Open Report button and load the TEXT REPORT FILE
generated by either RegShot, InCtrl or System Mechanic.
[ Download UNDOReg ]

Finally, there’s also Process Monitor which is an advanced monitoring
tool for Windows that shows real-time file system, Registry and
process/thread activity. It combines the features of two legacy
Sysinternals utilities, Filemon and Regmon.

This can be a bit tough to use because once you start monitoring, the
screen will be flooded with events. You might want to use Filter (Ctrl
+L) to filter out unwanted captured events.

[ Download Sysinternals Process Monitor ]

There you have it. 3 types of free program to help you monitor for
registry and files changes in Windows.



Technorati Tags: regshot, registry, compare, regmon


: Copying this article to your website is strictly NOT allowed.
However, if you like this article, you can use the HTML code below to
directly link to this article.

« Fix AutoPlay Dialog Box Not Appearing When Plug in External
DeviceSearch Multiple Search Engine At The Same Time »


Related Articles
Monitor Folders For EXE or DLL being Added, Renamed or Modified
How to Extend the Trial period of a software
Tracking Registry and Files Changes When Installing Software in
Windows
RegDefrag: Does It Really Defrag Windows Registry Entries?
An On-Demand Windows System Folder Changes Monitoring Tool
Monitor Processes That You Want With Kiwi Application Monitor
One Click Windows Registry Optimizer

Have computer technical problems? Get FREE help from Raymond.CC FORUM

6 Responses for "How To Monitor for Registry and File Changes in
Windows"
kaseh
 | 
Pages: 1
Prev: InCtrl5
Next: DPC Latency Checker