« Neil Gaiman is raffli… | Home | Cross-platform dronew… »

At last, system change tracking for Windows.

Thursday 29 March 2007 at 1:11 pm
Windows XP, let me be clear. And they won't let you download it unless you're using IE on a known valid (by WGA) copy of Windows, but there are ways around that (thanks, cow-orker!).

Microsoft has released a utility for Windows XP that parses the System Restore data and shows you everything that's changed for a specified period of time to aid in debugging. It can show you what software has recently been installed, what hotfixes and Windows Components have been installed, what BHOs (browser helper objects - read 'call it spyware and be done with it') have infected IE, what drivers have been added or changed, ActiveX controls, and a code structure I've never heard of before called an Auto-Start Extensibility Point, which the KB article says lets a programme start without a user requesting it.

Is anyone laying money on ASEPs being used in next-gen malware?

Anyway, this seems like a useful tool to add to your troubleshooting toolbox.

Used tags: debugging, diagnostics, kb, microsoft, tools, troubleshooting, utilities, windows, xp

Fight Spam! Click Here!

Trackback link:

No comments recorded.

Name:			Remember personal info? Yes No
Email:
URL:
Comment:		/ Textile
(Register your username / Log in)
Notify: Yes, send me email when someone replies. Hide email: Yes, hide my email address.
Small print: All html tags except <b> and <i> will be removed from your comment. You can make links by just typing the url or mail-address.