Hi! I need to track the Windows Registry changes made by a specific process. No matter if I have to use the .NET Framework or not. Does anybode have an idea how to realize that? Thank you in advance!
From: "Willi" > I need to track the Windows Registry changes made by a > specific process. No matter if I have to use the .NET > Framework or not. > > Does anybode have an idea how to realize that? Why are you asking on a group about multimedia? In any case, you need to inject you code into the process and hook the registry API functions or write a filter driver (I think you will need the IFS Installable FileSystem dev kit for that, which is not publicly available, but only on request). RegMon for NT uses the latter approach but its source code is no longer available (maybe you can find it somewhere). You can also use RegNotifyChangeKeyValue() (which is not as reliable as a hook or a driver). -- // Alessandro Angeli // MVP :: DirectShow / MediaFoundation // mvpnews at riseoftheants dot com // http://www.riseoftheants.com/mmx/faq.htm
