2

How can I find out which MSI created given registry key?

1 Answer 1

3

The registry does not store information about it's creator. Thus, unless entry is associated with some of MSI's GUIDs there is not way to backtrack it.

All (well, most) MSI installation data is cached in Windows\Installer folder under random names, this is the place there all information required by uninstall stored. If your registry key name value is pretty unique, you can do a raw Unicode (UTF-16LE) string search in MSI files located in that folder, resulting in a MSI. You can further use Orca tool to read information in that MSI.

2
  • Is there a database of all activities carried out by installed MSIs? Windows allows to uninstall apps so it must somehow know what exactly needs to be done during uninstallation. Feb 6, 2013 at 1:23
  • 1
    See updated answer. Feb 6, 2013 at 3:05

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .