I have a problem with a program, or rather said with a bought component of this program because it constantly "stops working".

So i got the task to find out what that subprogram changes in the registry, so that we might replicate it ourselves and for our needs.

The problem is now how do i do that?

I already found RegShot with which i can make RegSnapshot before and after installation and compare. I tried it with a couple more configurations but as it includes ALL registry changes, and not just from the subprogram, the compare txt is HUGE! And i have no clue what changes are traced back to what program-part.

Is there a program (like RegShot or ProcMon) that can help me sort out subprograms or supoperations to only monitor these registry changes?

  • Just apply the filter to ProcMon? – Seth Dec 6 '17 at 11:06
  • You can do that in Process monitor. Just apply a filter with process name and use that program name. – Biswapriyo Dec 6 '17 at 11:08
  • @Biswa I did so but everything seems to run under msiexec, but it at least limted the results because i could choose the program window – MansNotHot Dec 6 '17 at 12:12
  • @Biswa The list ONLY finds msiexec.exe because (the setup, the program i want to monitor) is build on that. If i were to filter it out i would get no results at all sadly. – MansNotHot Dec 6 '17 at 12:27
  • Then monitor the registry changes of msiexec and or extract msi files with lessmsi. – Biswapriyo Dec 6 '17 at 16:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.