| © Elcomsoft Co. Ltd., 1999,2005
|
|
| for Win95/98/ME/NT/2000/XP
|
| Advanced Registry Tracer (ART) is software designed to analyze changes made to the Windows Registry.
|
|
|
| When installing any software, you can create a copy of the Windows Registry (a snapshot) using ART before the installation and another copy after the installation. Then you can compare the copies and see what changes the new software installation made.
|
|
|
| You can also use ART to analyze changes made to the Registry when installing new hardware, to compare similar keys on different machines, as well as to find out which key changes resulted from a modification of specific system or software settings.
|
|
|
| Advanced Registry Tracer is far more advanced than Registry monitoring software (such as RegMon and Win-Expose Registry) and most uninstallers (CleanSweep, Uninstall, etc.), which simply monitor accesses to the Registry and filter them often resulting in errors, since other applications and systems could also modify the Registry at the same time. In contrast ART compares full copies of the Registry made at different moments in time and finds each specific change that occurred.
|
|
|
| ART can be used to search for particular types of data changes within a specified time period. With ART's advanced search option you can find keys that were changed after a certain date or period of time. (Windows 2000, XP)
|
| The advanced search option lets you inspect the Registry to determine if suspected types of data are present.
|
| In the main window, using the Property menu, you can immediately see how many subkeys and values a key contains and what types they are.
|
|
|
| ART now supports not only exporting to REG files, but also importing REG files, in both old and new formats (Windows 2000, XP). You can now use ART to compare REG files and to see the results in a convenient and understandable form. This feature is especially helpful when REG files are large making manual comparison difficult.
|
|
|
| By using previously set or newly created filters one can delete unnecessary information from the results. The option of creating a filter on the basis of a REG file opens numerous opportunities to work with various tweaks, which are normally represented as REG files.
|
|
|
| You can use ART to explore the Registry for the number and types of subkeys in any key.
|
|
|
| ART's main window looks like this:
|
| ART searches for differences on all levels: Keys, Value Names, and Value Data. The results of a comparison are displayed in three trees (see Comparison result window).
|
|
|
| Based on the results of a comparison, ART creates Undo and Redo files in the standard *.reg format. These files can be used to modify the Registry by switching from a newer state to an older one or vice versa. You can also modify the Registry directly from ART without creating *.reg files
|
|
|
| ART deals only with the root keys HKEY_LOCAL_MACHINE and HKEY_USERS, since the key
|
| HKEY_CURRENT_CONFIG is a just a copy of HKEY_LOCAL_MACHINE\Config\0000 (Win95-98) or HKEY_LOCAL_MACHINE\ SYSTEM\CurrentControlSet\ Hardware Profiles\Current (WinNT-XP);
|
| HKEY_CLASSES_ROOT is a copy of HKEY_LOCAL_MACHINE\Software\Classes;
|
| HKEY_CURRENT_USER is a part of HKEY_USERS; and HKEY_DYN_DATA is (normally) used by the system only and is of no interest to a user.
|
|
|
| To view the current state of a key or to modify it, you can use the function Jump to Regedit.
|
|
|
| The contents of any key can be exported to a standard *.reg file.
|
For technical support see our website:http://www.elcomsoft.com/art.html or contact art@elcomsoft.com