Registry comparison tool?

1
Has anyone used any program (script?) that compares one's registry before and after a software install?

Say you don't have the cash to buy some software, yet the 30 day demo has expired and you need 2 more days to finish your project?

I understand that it's better and more-ethical to just buy the software, I'm just curious if anyone has used something like this.

Thanks.

Registry comparison tool?

4
Thanks for the replies.

I'll take this one step further and ask if anyone knows where Macromedia's Flash demo puts it's "mark as demo" files?

I'm only assuming that they're put on the registry somewhere......I don't know this as a fact.

They might even put more than one in different places. Anyone know anything?

Thanks again.

Registry comparison tool?

6
skinny honkie wrote:Regmon from the sysinternals website - it's an excellent tool, and less than 100K.


You can use FileMon, too. Their tools are top-notch:

http://www.sysinternals.com

If you are hot shit and happen to have some OS symbols, you can attach to their process and put some breakpoints on common functions (opening a file, reading a registry key) to see if you can figure out what's being done with those objects as well. I once did this to a fish screen saver registration thing just to see if it would work and they hit my breakpoint on strcmp with one of the parameters being the bullshit password string I'd entered. How stupid is that??! Wait, I've said too much...

Dan

Registry comparison tool?

7
danmohr wrote:
skinny honkie wrote:Regmon from the sysinternals website - it's an excellent tool, and less than 100K.


You can use FileMon, too. Their tools are top-notch:

http://www.sysinternals.com

If you are hot shit and happen to have some OS symbols, you can attach to their process and put some breakpoints on common functions (opening a file, reading a registry key) to see if you can figure out what's being done with those objects as well. I once did this to a fish screen saver registration thing just to see if it would work and they hit my breakpoint on strcmp with one of the parameters being the bullshit password string I'd entered. How stupid is that??! Wait, I've said too much...

Dan


SysInternals rule. Their tools are just great! The main guy behind them (Mark Russinovich) used the tools to discover the Sony/BMG rootkit.

He wrote up his detective story on how he discovered the rootkit, and it's a geek's dream article.

Who is online

Users browsing this forum: No registered users and 0 guests