Registry Change ???

Hi ,

How I know if the Registry Change,If other runing program change any key of the Registry how i know the key which is Changed  ( Hook Registry Change )

Thanks
LVL 6
hatem72Asked:
Who is Participating?
 
edrwebbConnect With a Mentor Commented:
Take a look at
http://softseek.com/Utilities/Registry_Editors_and_Utilities/Review_19894_index.html

Regmon for Windows 95/98 displays all activity taking place in the Windows System Registry.  

Regmon displays the process, the request, the result, and the
Registry path and key data. You can set "include" and "exclude" filter expressions for the process and path.

There is also a version of Regmon for Windows NT.
0
 
RuchiCommented:
0
 
ArkCommented:
Hi
Ruchi, I'm afraid that hotkeys isn't exactly what hatem72 want.
Hatem72, first question isn't very difficult, but second need a lot of coding and, IMHO, will be very slowly (you need to enum all keys and "hook" every key). Now I'm triing to do this, but it takes some time. BTW, code will work only with W98 or NT (not W95).
Here is Answer to first question:
Const HKEY_CURRENT_USER = &H80000001
Const REG_NOTIFY_CHANGE_NAME = &H1            ' Create or delete (child)
Const REG_NOTIFY_CHANGE_ATTRIBUTES = &H2
Const REG_NOTIFY_CHANGE_LAST_SET = &H4            ' time stamp
Const REG_NOTIFY_CHANGE_SECURITY = &H8
Const REG_LEGAL_CHANGE_FILTER = (REG_NOTIFY_CHANGE_NAME Or REG_NOTIFY_CHANGE_ATTRIBUTES Or REG_NOTIFY_CHANGE_LAST_SET Or REG_NOTIFY_CHANGE_SECURITY)
Private Declare Function RegNotifyChangeKeyValue Lib "advapi32" (ByVal hKey As Long, ByVal bWatchSubtree As Boolean, ByVal dwNotifyFilter As Long, ByVal hEvent As Long, ByVal fAsynchronous As Boolean) As Long

Private Sub Form_Load()
    'Create a temporary registry key
    SaveSetting "Registry Notification", "Hello", "Testing", "123"
End Sub

Private Sub Command1_Click()
  Dim cap As String
  cap = Caption
  Caption = "Monitoring registry..."
  RegNotifyChangeKeyValue HKEY_CURRENT_USER, True, REG_LEGAL_CHANGE_FILTER, 0&, False
  MsgBox "Registry changed"
  Caption = cap
End Sub

'Try to delete or modify registry settings at HKEY_CURRENT_USER
Cheers
0
 
BEVISCommented:
Theres a very nice utility that come with Visual studio 6 called Windiff.
Export the whole reg file before and after and run windiff and select the two files.  Whith this utility you can see anything that change
0
 
hatem72Author Commented:
Thankx to all
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.