whether any application has been installed?

  • Thread starter Thread starter SANTANDER
  • Start date Start date
S

SANTANDER

Is there a way to determine whether any application has been installed on PC
within given time period even if program has not left traces of itself? Or
whether some registry changes has been done within this time frame (as
result of running the executable). (on win xp home).
 
Event Viewer show:
System -> Source: Windows File Protection

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64002
Date: 2008.09.17.
Time: 9:59:49
User: N/A
Computer: UserName
Description:
File replacement was attempted on the protected system file setup.exe. This
file was restored to the original version to maintain system stability. The
file version of the system file is 5.1.2600.5512.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Has been replaced this system file or not?

Thanks.
===========
 
Back
Top