whether any application has been installed?

[Guest SANTANDER]

Is there a way to determine whether any application has been installed on PC

within given time period even if program has not left traces of itself? Or

whether some registry changes has been done within this time frame (as

result of running the executable). (on win xp home).

[Guest Bob I]

Re: whether any application has been installed?

 

Maybe in the event viewer. Start, run, eventvwr.msc Now take a look in

there.

 

SANTANDER wrote:

> Is there a way to determine whether any application has been installed on PC

> within given time period even if program has not left traces of itself? Or

> whether some registry changes has been done within this time frame (as

> result of running the executable). (on win xp home).

>

[Guest Santander]

Re: whether any application has been installed?

 

Event Viewer show:

System -> Source: Windows File Protection

 

Event Type: Information

Event Source: Windows File Protection

Event Category: None

Event ID: 64002

Date: 2008.09.17.

Time: 9:59:49

User: N/A

Computer: UserName

Description:

File replacement was attempted on the protected system file setup.exe. This

file was restored to the original version to maintain system stability. The

file version of the system file is 5.1.2600.5512.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

 

Has been replaced this system file or not?

 

Thanks.

===========

 

 

 

 

"Bob I" <birelan@yahoo.com> wrote in message

news:OmynNQEGJHA.2112@TK2MSFTNGP02.phx.gbl...

> Maybe in the event viewer. Start, run, eventvwr.msc Now take a look in

> there.

>

> SANTANDER wrote:

>

>> Is there a way to determine whether any application has been installed on

>> PC

>> within given time period even if program has not left traces of itself?

>> Or

>> whether some registry changes has been done within this time frame (as

>> result of running the executable). (on win xp home).

>>

>