What is changing my registry?

[Dale Bradford]

Is it possible with C# to find out which program is changing certain keys in
the registry? I've already searched for "registry watchers" code examples or
downloads, but they seem to only take before & after snapshots of the
registry to show you what keys/values changed, and not "who" changed them.
Any suggestions?

[Sijin Joseph]

Not written in C# but does what you want
http://www.sysinternals.com/ntw2k/source/regmon.shtml

Also check out the other great stuff they have.
Sijin Joseph
http://www.indiangeek.net
http://weblogs.asp.net/sjoseph

Dale Bradford wrote:

Is it possible with C# to find out which program is changing certain keys in
the registry? I've already searched for "registry watchers" code examples or
downloads, but they seem to only take before & after snapshots of the
registry to show you what keys/values changed, and not "who" changed them.
Any suggestions?

[Scott Allen]

Hi Dale:

Download regmon from sysinternals.com.
http://www.sysinternals.com/ntw2k/source/regmon.shtml

I'm sure this will let you track down what you need to know.

--
Scott
http://www.OdeToCode.com

On Sun, 12 Sep 2004 16:37:29 +0200, "Dale Bradford"
<an********@ms.com> wrote:

Is it possible with C# to find out which program is changing certain keys in
the registry? I've already searched for "registry watchers" code examples or
downloads, but they seem to only take before & after snapshots of the
registry to show you what keys/values changed, and not "who" changed them.
Any suggestions?

[Dale Bradford]

Thanks for the tip.

It appears that iexplorer.exe itself is changing the start page when my
browser is opened and again when it is closed. I tried un- & reinstalling
iexplorer but that didn't fix the problem. I know this sounds like typical
browser hijacking, but frankly, I got a bit tired of reading about
hit-and-miss spyware removers and decided to look into the problem myself.
PestPatrol had a good free spyware scanner but I don't know why I should by
their (or anyone else's) product.

If I find out a better way to fix this problem (without having to take 30
steps and install 10 different spyware/antivirus programs), I'll probably
post it in the IE group.

Dale

"Scott Allen" <bitmask@[nospam].fred.net> wrote in message
news:f5********************************@4ax.com...

Hi Dale:

Download regmon from sysinternals.com.
http://www.sysinternals.com/ntw2k/source/regmon.shtml

I'm sure this will let you track down what you need to know.

--
Scott
http://www.OdeToCode.com

On Sun, 12 Sep 2004 16:37:29 +0200, "Dale Bradford"
<an********@ms.com> wrote:

Is it possible with C# to find out which program is changing certain keys
in
the registry? I've already searched for "registry watchers" code examples
or
downloads, but they seem to only take before & after snapshots of the
registry to show you what keys/values changed, and not "who" changed them.
Any suggestions?

[Scott Allen]

I'm waiting for the spyware version that lets me deliver 15 pounds of
dead fish to the spyware author's bathtub.

--
Scott
http://www.OdeToCode.com

On Wed, 15 Sep 2004 22:56:37 +0200, "Dale Bradford"
<an********@ms.com> wrote:

Thanks for the tip.

It appears that iexplorer.exe itself is changing the start page when my
browser is opened and again when it is closed. I tried un- & reinstalling
iexplorer but that didn't fix the problem. I know this sounds like typical
browser hijacking, but frankly, I got a bit tired of reading about
hit-and-miss spyware removers and decided to look into the problem myself.
PestPatrol had a good free spyware scanner but I don't know why I should by
their (or anyone else's) product.

If I find out a better way to fix this problem (without having to take 30
steps and install 10 different spyware/antivirus programs), I'll probably
post it in the IE group.

Dale

[Dale Bradford]

Now, that's the type of product I'd pay for.
Dale

"Scott Allen" <bitmask@[nospam].fred.net> wrote in message
news:ns********************************@4ax.com...

I'm waiting for the spyware version that lets me deliver 15 pounds of
dead fish to the spyware author's bathtub.

--
Scott
http://www.OdeToCode.com

On Wed, 15 Sep 2004 22:56:37 +0200, "Dale Bradford"
<an********@ms.com> wrote:

Thanks for the tip.

It appears that iexplorer.exe itself is changing the start page when my
browser is opened and again when it is closed. I tried un- & reinstalling
iexplorer but that didn't fix the problem. I know this sounds like typicalbrowser hijacking, but frankly, I got a bit tired of reading about
hit-and-miss spyware removers and decided to look into the problem myself.PestPatrol had a good free spyware scanner but I don't know why I should bytheir (or anyone else's) product.

If I find out a better way to fix this problem (without having to take 30
steps and install 10 different spyware/antivirus programs), I'll probably
post it in the IE group.

Dale