Jump to content

Recommended Posts

Posted

I'm looking for a way of logging PC activity on my family PC.

We have an XP PC with 4 user accounts. I've just rebuilt the machine after it started crashing alot.

I have no way of knowing what application is causing the problem.

What I'd like to do is have a script (exe) that starts when the computer starts and logs any and all Add/Update/Delete actions like

Date - Application.exe created file in c:/here/here/filename.xxx

Date - DifferentApp.exe update file at c:/overthere/filename.xx

Date - AnyantherApp.exe deleted file from c:/here/here/filename.xxx

I'd also like to know if Application changed registry

Has anyone done anything like this?

Example?

Thanks

Steve

Posted

It is possible, However it wouldn't be able to log all of that.

Your best bet, is to check the Event Logs and see if windows left the name of the offending program there.

Also, Logging every registry change that a program makes is not going to be very helpful, The registry is read / Written to rather a fair bit.

Download Regmon and have a look if you must.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...