whether any application has been installed?

  • Thread starter Thread starter SANTANDER
  • Start date Start date
S

SANTANDER

Guest
Is there a way to determine whether any application has been installed on PC
within given time period even if program has not left traces of itself? Or
whether some registry changes has been done within this time frame (as
result of running the executable). (on win xp home).
 
Re: whether any application has been installed?

Maybe in the event viewer. Start, run, eventvwr.msc Now take a look in
there.

SANTANDER wrote:

> Is there a way to determine whether any application has been installed on PC
> within given time period even if program has not left traces of itself? Or
> whether some registry changes has been done within this time frame (as
> result of running the executable). (on win xp home).
>
 
Re: whether any application has been installed?

Event Viewer show:
System -> Source: Windows File Protection

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64002
Date: 2008.09.17.
Time: 9:59:49
User: N/A
Computer: UserName
Description:
File replacement was attempted on the protected system file setup.exe. This
file was restored to the original version to maintain system stability. The
file version of the system file is 5.1.2600.5512.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Has been replaced this system file or not?

Thanks.
===========




"Bob I" <birelan@yahoo.com> wrote in message
news:OmynNQEGJHA.2112@TK2MSFTNGP02.phx.gbl...
> Maybe in the event viewer. Start, run, eventvwr.msc Now take a look in
> there.
>
> SANTANDER wrote:
>
>> Is there a way to determine whether any application has been installed on
>> PC
>> within given time period even if program has not left traces of itself?
>> Or
>> whether some registry changes has been done within this time frame (as
>> result of running the executable). (on win xp home).
>>
>
 
Back
Top