How to track what and where is written when installing and using programs?

V

V Melnik2015-01-30 18:44:45

Windows

V Melnik, 2015-01-30 18:44:45

Tell me, how can I track what and where is written when installing and using programs?
During installation, almost all programs create files not only in the installation directory + write keys to the registry.
But when deleting, these same programs often "forget" about some of the files they created and leave them in the system. And if a virus is caught, it is easier to track which application created the file with the virus.
I will clarify, the question concerns Windows, and if exactly 7 / 8.1
Thank you.

Reply

Answer the question

In order to leave comments, you need to log in

4 answer(s)

V

Vladimir Martyanov, 2015-01-30
@vilgeforce

FileMon + Regmon? Only they do not seem to catch the descendants of the process under study. And yes, the volume of logs for a small installer is quite large.

O

oia, 2015-01-30
@oia

most uninstallers can create
ashampoo uninstaller 5 installation logs

V

V Melnik, 2015-01-30
@VMelnik

Installations, yes, the majority, but in the process of running programs?

F

Fedcomp, 2015-02-17
@Fedcomp

Try Sandbox.