whether any application has been installed?

S

SANTANDER

Is there a way to determine whether any application has been installed on PC
within given time period even if program has not left traces of itself? Or
whether some registry changes has been done within this time frame (as
result of running the executable). (on win xp home).
 
S

Santander

Event Viewer show:
System -> Source: Windows File Protection

Event Type: Information
Event Source: Windows File Protection
Event Category: None
Event ID: 64002
Date: 2008.09.17.
Time: 9:59:49
User: N/A
Computer: UserName
Description:
File replacement was attempted on the protected system file setup.exe. This
file was restored to the original version to maintain system stability. The
file version of the system file is 5.1.2600.5512.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Has been replaced this system file or not?

Thanks.
===========
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top