Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there an application out there that can record what file and registry changes are made when you install a program?

share|improve this question

closed as off-topic by nc4pk, Tog, Mokubai, mpy, Dave M Oct 23 '13 at 18:53

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they tend to become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve. Here are a few suggestions on how to properly ask this type of question." – nc4pk, Tog, Mokubai, mpy, Dave M
If this question can be reworded to fit the rules in the help center, please edit the question.

Check out Sandboxie, which I don't think can record/list changes made by a program, but can definitely make it easier to roll them back. – Code Bling May 24 '11 at 18:59
up vote 4 down vote accepted

ProcMon by Microsoft Sysinternals will allow you to record, filter, and view all registry and file changes. Run it prior to starting the installer to see an exhaustive list.

It's probably not the easiest thing around, but it is thorough.

share|improve this answer
True; it is quite thorough. Of course you’d need to set up sufficient filters to weed out all of the cruft (and then worry that you filtered out something you need). :-( (Personally, I don’t like ProcMon at all, I much prefer FileMon and RegMon, but unfortunately those won’t work on 7.) – Synetech May 24 '11 at 19:55
Filemon and Regmon were rolled into Procmon, I believe. And in the case of an installer you should be able to run ProcExp, find any processes spawned by the installer, remove the software with RevoUninstaller, and then set your filters in ProcMon based on the desired processes you want to watch, and run the installer again. – music2myear May 24 '11 at 20:11
Yes, they were, but I find Reg/FileMon to be much easier to use (and even more configurable, would you believe it). Yes, ProcMon is a superset, but that’s exactly what makes it so much more work. I use File/Reg/ProcMon mostly for when I am trying to spy on a normal program to find out what the heck it is doing (especially those I don’t quite trust). I prefer a dedicated install-monitor for installers, especially since they tend to include reports and such. – Synetech May 24 '11 at 20:28

Yes there are several program like this. The best one I I have found is Total Uninstaller, which I use to see what the installer does and how the installed program is organised, so that I can try making it into a portable app, through various means. It's not free, but it is not expensive, and there is a free trial.

Another useful program to just check registry changes is RegShot, which is free and open source,

share|improve this answer

SnoopFS is probably not enough, but I've often used it when installing if I intend to copy off every installed file. You'd probably want to use it with Procmon for the full effects of any install.

There are a bunch of clean uninstallers, such as Revo, but they don't tell you what needs undoing, they just do it.

share|improve this answer

I have always used and prefer PC Magazine’s InCtrl(5). It was specifically designed for this purpose and does it pretty well and is quite configurable to weed out irrelevant stuff. Unfortunately ZDNet started charging for the previously-free PCMag utilities several years ago, but you can probably find a copy that someone got before it went for-pay (and as far as I know, it should be legal since that copy was free).

Another one that I like (I’ve tried well over a dozen), is ZSoft Uninstaller; it (too?) is free.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.