I would like to find the changes made in the registry after installing something on my computer. However I would like to also know what can be done with ease as a general procedure.

link|improve this question

38% accept rate
feedback

3 Answers

up vote 10 down vote accepted

Run the installer and watch it with Sysinternals Process Monitor. You can filter the data so that only operations done by the installer are shown. You can even filter down to whatever operations you want to see (RegWrite, RegQueryValue, etc) and save the capture for later viewing.

alt text

Process monitor is freeware.

You could also use WinDiff. You can save exported registry files and then compare them afterwards:

alt text

WinDiff is free and open source.

Another freeware solution for comparing actual registry exported files is RegShot.

RegShot is a small registry compare utility that allows you to quickly take a snapshot of your registry and then compare it with a second one - done after doing system changes or installing a new software product. The changes report can be produced in text or HTML format and contains a list of all modifications that have taken place between snapshot1 and snapshot2.In addition, you can also specify folders (with sub filders) to be scanned for changes as well.

alt text

link|improve this answer
Is RegShot fast (those registries can be quite big) – Notitze Dec 6 '09 at 21:09
About the same speed as exporting the registry, a couple seconds. The comparison feature only takes a few seconds too. It's very fast. – John T Dec 7 '09 at 2:27
feedback

if you happen to have Total Commander, this is pretty easy:

  1. export the registry before the installation and after the installation (save with the same name in different folders)

  2. open both folders in Total Commander, highlight the file on one side, go to Files > Compare By Content... voilá:

enter image description here

Total Commander is shareware, try before you buy.

link|improve this answer
feedback

If you want to compare two registry files (that you have manually exported to text), then there are plenty of comparison apps, such as WinMerge, WinDiff, etc.

If you want to compare the registry before and after an installation, then you may as well use an installation monitor. Again, there are plenty of them, but one of the main ones is PC Magazine’s InCtrl5 (you may have to pay to download it from their site, though the program itself is free, so there are plenty of sites that have it). Total Uninstall is a good commercial one.

Another solution is to analyse the installer itself. That is, look inside the EXE/MSI/BAT/INF/etc. file to see for yourself exactly what it does when it installs, including changes to files, registry entries, services, drivers, and such. That way you can avoid the whole detection process altogether. I find that 7Zip is the best way to look inside most executable installers (such as NSIS), because you can see the files and scripts and such. For MSI installers, I suggest either Microsoft’s own ORCA or InstEd. A good commercial tool for MSIs is AdvancedInstaller

HTH

link|improve this answer
Nice helpful pointers, thank you. – Notitze Dec 7 '09 at 15:29
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.