Is there a way of determining which files and registry values were added\deleted\modified during a Windows 7 system restore? Maybe a log file?

link|improve this question
You might try this software to browse the shadow copies, no log file I know of. shadowexplorer.com – Moab Aug 18 '10 at 0:19
1  
Might want to check out the 'Event Viewer' I searched through it but since I haven't done a restore ever on this laptop I couldn't spot anything that stuck out. – MrStatic Aug 18 '10 at 1:39
feedback

1 Answer

Have you tried Windows Event Viewer?

Win key + R -> Write " EVENTVWR.MSC "

link|improve this answer
Event viewer doesn't detail the registry keys changed during a restore. It shows the time, eventID, user, machine - but not the actual changes committed. – Uninspired Jan 23 '11 at 19:53
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.