DelphiFAQ Home Search:

Monitor changes in the registry

 

commentsThis article has not been rated yet. After reading, feel free to leave comments and rate it.

Question:

I am about to install some advertising financed software (Ad-Ware) and I want to make sure that an uninstall at a later time will really remove all traces. Therefore I'm curious what kind of traces this software leaves in the registry. What's the best thing to do?

Answer:

You should export your registry to a text file (extension typically .reg). Run the registry editor (RegEdit.exe) and select 'Export' in the file menu. Export from the root, so that you get everything.

Then install your software.

Then export a second time, to a different file name.

Then run your software a bit.

Then export a third time, to a different file name.

Now you should have 3 snapshots of your registry - each as text files. You can use a text comparison tool to find out where the files are different.
BeyondCompare from scootersoftware is great for that. You can download a free trial of BeyondCompare here.

Compare the 3 files, probably most interesting will be version 1 against version 3 and draw your conclusions.
Later, when you uninstall, you can do a 4th export and do another compare.

If you just want to monitor any access in real time, you could try Systernals' freeware registry monitor. Get it here. You will be surprised how often the registry gets hit with every mouse or keyboard event.


Comments:

 

 

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.
 

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture: