09-12-2012, 09:32 AM
Use a virtual machine software.
Create a virtual machine, install OS, install a tracking software.
Make a copy of the virtual machine.
Something like this:
Run tracking software.
Install software
Run tracking software in comparison mode.
Some software like SeismoSoft programs has protection and it doesn't work when it detects Sysinternals capturing driver.
You could try Sandboxie, install it, create an empty sand box and install in that sandbox your software.
You could see all modified files and you could read the registry changes with a registry hive viewer (can't remember the name).
It would be the best choice to try all this stuff each time in a clean virtual machine.
Create a virtual machine, install OS, install a tracking software.
Make a copy of the virtual machine.
Something like this:
Run tracking software.
Install software
Run tracking software in comparison mode.
Code:
***************************************
Content of this section is hidden, You must be registered and activate your account to see this content. See this link to read how you can remove this limitation:
http://forum.civilea.com/thread-27464.html
***************************************
Some software like SeismoSoft programs has protection and it doesn't work when it detects Sysinternals capturing driver.
You could try Sandboxie, install it, create an empty sand box and install in that sandbox your software.
You could see all modified files and you could read the registry changes with a registry hive viewer (can't remember the name).
It would be the best choice to try all this stuff each time in a clean virtual machine.