Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Windows 7, 64bit.

I have an application which I don't trust but still need to run.

I would like to run the installer of this application and later on the installed executable under some kind of "strace" for windows which will record what this application did to the system.


  • What files have been created / edited?
  • What registery changed have been made?
  • To what network hosts did the application tried to communicate?

Ideally I would also be able to generate a "UNDO" action to undo all the changes.

Please don't suggest full Virtualization solutions such as Virtualbox, VMWare and co. because the application should run in the host system (A "sandbox" approach will OTHO be accepted, IMHO).

Do you any such utility I can use?

Thank you, Maxim.

share|improve this question
Can I ask what the untrusted app is? – Hugh Allen Apr 21 '10 at 9:15
It's not really relevant, It might as well be some application that I have developed myself and would like to trace it's behavior. As for your question: Babylon translator, it's a great application but tends to install lots of "toolbars", "addons" and other not so useful "plugins" which I would really rather it would not do. I want to make sure that when I deselected them all the actually really do not get installed. – Maxim Veksler Apr 21 '10 at 10:29
up vote 1 down vote accepted

Think I found it

share|improve this answer

The other alternative is to create a restore point just before you install the application and then roll back to that after you've finished.

However, it does mean that any other changes you make to the system will be lost - so it might not be an ideal solution.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .