FileScan and RegScan software

[CommodoreS]

I am not sure if anyone can help, as I am having brainfreeze and a I can't remember moment.

 

I used to have some software (it might have been two separate programs) which allowed you to view live registry and file changes (files written to the HDD) as they occurred. Very useful in finding what files software is trying to write to when running it and what keys are updated in the registry when software is first run and licenced.

 

The problem is I used the software so long back I can't remember what it was called, and can't find it or any similar software using google searches. Can anyone help please and suggest some software which does this - preferably freeware.

[andy_b]

Process Monitor ?

 

https://docs.microsoft.com/en-us/sysinternals/downloads/procmon

[ADMaster]

Sysinternals procmon, mentioned above is the replacement for filemon and regmon which I suspect is what you were thinking of.

 

Another tool you may find useful is regshot

https://sourceforge.net/projects/regshot/

[Arthur]

Two more you may find useful (both from NirSoft)...

 

• RegFromApp
  

  RegFromApp monitors the Registry changes made by the application that you selected, and creates a standard RegEdit registration file (.reg) that contains all the Registry changes made by the application. You can use the generated .reg file to import these changes with RegEdit when it's needed.

   
  
• RegistryChangesView
  

  RegistryChangesView is a tool for Windows that allows you to take a snapshot of Windows Registry and later compare it with another Registry snapshots, with the current Registry or with Registry files stored in a shadow copy created by Windows. When comparing 2 Registry snapshots, you can see the exact changes made in the Registry between the 2 snapshots, and optionally export the Registry changes into a standard .reg file of RegEdit.

Both programs have a .reg export option which is missing from Process Monitor.