Software Installation Logs
Current time: 10-19-2018, 01:33 AM
Users browsing this thread: 1 Guest(s)
Author: ykhackhack
Last Post: LiviuM
Replies 7
Views 2519

[Problem] Software Installation Logs
#1
Dear members
During installation, the softwares create, change alot of files/folders, modifies registry etc.
Is there any sure way of capturing this process, in other words the log file.
Thanks for your time
Reply
#2
You can use sofware that can make portable applications (vmware, spoon studio, etc.). It can show you what are the changes made on your computer after installing a specific program. The idea is to capture your computer before and after the installation.
"If I had eight hours to chop down a tree, I'd spend six sharpening my ax. "- A. Lincoln
[-] The following 1 user says Thank You to Batman07 for this post:
  • ykhackhack
Reply
#3
I was going to try to make some portable application with "Enigma", which works little different than others. You can use this soft, on a software which is already installed. And you have to point the soft to the files/folders you want to virtualise. And if you succeed it make one EXE file which, upon execution it does not write anything on the hard disk if you want. (big difference than other virtualising softs. This way it can work on a machine without upgrading or downgrading the environment.

Regards
Reply
#4
There are some programs like Advanced Uninstaller Pro, which you can find through in this forum in the link below.

***************************************
Content of this section is hidden, You must be registered and activate your account to see this content. See this link to read how you can remove this limitation:

http://forum.civilea.com/thread-27464.html
***************************************


It has a monitoring plugin that monitor all the changes during the installations of programs and gives you a log file about all changes. You can find it in the installation folder named monitor.exe.

I have used it sometimes but it seem to heavy load the computer during the monitoring process.
If you can't run, keep walking.
[-] The following 1 user says Thank You to albani for this post:
  • ykhackhack
Reply
#5
@albani
I have that. I think if there is no alternate or a better one I will try to utilize that.
Thanks
Reply
#6
Actually you could use Process Monitor and Process Explorer from the Sysinternals Suite available from Microsoft Technet.The download and use of the tools is free of charge and they can give full info about all the things that a service,executable or any other thing does to the system registry or the files that are being accesed.They are also pretty easy to use.To get them google Sysinternals and select Process Utilities on the right side of the page.Cheers.
[-] The following 3 users say Thank You to RazvanMelek for this post:
  • malc, ykhackhack, LiviuM
Reply
#7
maybe this helps you
***************************************
Content of this section is hidden, You must be registered and activate your account to see this content. See this link to read how you can remove this limitation:

http://forum.civilea.com/thread-27464.html
***************************************

from there InstallWatch Pro seems to be right for you. maybe the others can help you eiher.

tell me if this is the thing you wanted.
[-] The following 1 user says Thank You to andersen3 for this post:
  • ykhackhack
Reply
#8
Use a virtual machine software.
Create a virtual machine, install OS, install a tracking software.
Make a copy of the virtual machine.

Something like this:
Run tracking software.
Install software
Run tracking software in comparison mode.

***************************************
Content of this section is hidden, You must be registered and activate your account to see this content. See this link to read how you can remove this limitation:

http://forum.civilea.com/thread-27464.html
***************************************


Some software like SeismoSoft programs has protection and it doesn't work when it detects Sysinternals capturing driver.

You could try Sandboxie, install it, create an empty sand box and install in that sandbox your software.
You could see all modified files and you could read the registry changes with a registry hive viewer (can't remember the name).

It would be the best choice to try all this stuff each time in a clean virtual machine.
[-] The following 1 user says Thank You to LiviuM for this post:
  • ykhackhack
Reply




Users browsing this thread: 1 Guest(s)