Hmmmm.....well I should be able to log what time the registry key was changed. Then if I could determine what programs (or it might be a process) were active at that time it might at least narrow down the choices.
So what I need next is a simple way to list what programs and processes are active on the user's desktop. ( These might be web apps.)
Any ideas, links, appreciated.
Thanks in advance.
Main Topics
Browse All Topics





by: RobSampsonPosted on 2009-08-05 at 20:56:03ID: 25030015
Hi, for something more simple, what about this:
echnet/scr iptcenter/ resources/ qanda/jul0 5/hey0711. mspx
en-us/libr ary/aa3930 42(VS.85). aspx
How Can I Monitor Changes to a Registry Key?
http://www.microsoft.com/t
Although you'll want to use RegistryValueChangeEvent instead of RegistryKeyChangeEvent:
RegistryValueChangeEvent
http://msdn.microsoft.com/
I'm not sure however, exactly sure how you'll be able to know *what* program made the change....that could be difficult....
Regards,
Rob.