Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

To investigate how a Windows application works, I need a software that will take a snapshot of the whole disk, including the registry and hidden/protected files, take a second snapshot after running the application, and show what changes were made.

I tried the free WhatChanged, but it takes a very long time to compute the changes.

Does someone know of a good application, either open-source or commercial?


Edit: I also tried InCtrl5, but it seems to miss some files.


Edit: For those looking for the same kind of application, RegShot can take snapshots of the Registry and the file system.

share|improve this question

closed as off-topic by Ƭᴇcʜιᴇ007, fixer1234, smc, DavidPostill, Tetsujin Mar 17 at 12:12

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions seeking product, service, or learning material recommendations are off-topic because they become outdated quickly and attract opinion-based answers. Instead, describe your situation and the specific problem you're trying to solve. Share your research. Here are a few suggestions on how to properly ask this type of question." – Ƭᴇcʜιᴇ007, fixer1234, smc, DavidPostill, Tetsujin
If this question can be reworded to fit the rules in the help center, please edit the question.

    
Is this continuing in your quest to circumvent the protection on the software on your other question for which a paid version has been suggested? –  Mokubai Jun 13 '11 at 12:14
    
Yes. I forgot to mention that I need a much older version, which is no longer for sale, hence the need to keep running the time-limited trial. I did offer to buy a license, but got no reply. –  OverTheRainbow Jun 14 '11 at 10:26
    
Many installer apps can detect all these changes. I know Wyse Installer used to do this. –  Keltari Feb 4 '14 at 19:16

2 Answers 2

Try Process Monitor.

Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit.

share|improve this answer

Check DiskPulse: http://www.diskpulse.com

It will show you all file system changes in real-time.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.