Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top
  1. Is there a way to track what the setup file has installed? Everything - Registry, files.

  2. Is there a way to track down what kind of files software creates? Cookies & all other files it creates on the system.

share|improve this question

migrated from May 29 '11 at 11:12

This question came from our site for professional and enthusiast programmers.

Yes, random installer, not recovering my own. – user775013 May 29 '11 at 9:49

ahem ahem

Process Monitor:

Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit.


share|improve this answer

You could run the installation in a sandbox (like sandboxie) and see what it has changed. Then you can either reinstall in the live OS or break the application out of the sandbox.

share|improve this answer

It's not guaranteed to work, but I have done this before by using a fresh installation of Wine on a Linux machine. Run the installer using Wine and then check out what's happened under ~/.wine/. The registry changes and files installed should mirror exactly what happens on a Windows machine.

share|improve this answer
I do not have any work experience with Linux or Wine. Any other options? – user775013 May 29 '11 at 9:55

What OS?

InCtrl5. You should be able to find it around on various "archive" websites.

Revo Uninstaller (the Pro, shareware version) has "Real-Time monitoring of system changes - during install of programs".

SpyMe Tools

Total Uninstall


(I'm only familiar with InCtrl5.)

share|improve this answer

You must log in to answer this question.