How to track what setup.exe has installed

  1. Is there a way to track what the setup file has installed? Everything - Registry, files.

  2. Is there a way to track down what kind of files software creates? Cookies & all other files it creates on the system.


Solution 1:

ahem ahem

Process Monitor:

Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit.

Screenshot

Solution 2:

You could run the installation in a sandbox (like sandboxie) and see what it has changed. Then you can either reinstall in the live OS or break the application out of the sandbox.