installationsnapshotwindowswindows-registry
What's a simple way to get a list of all files installed/modified and keys added/removed by a Windows (XP, Vista or 7) program installer?
I'd like to take a before and after snapshot, and see what has changed. Leaving a program running while I perform the install would be okay too.
This is very similar to Clinton Blackmore's question (eg: taking and diff'ing two file systems), but specifically for Windows, and taking into account both files and registry keys.
I've had success with Sysinternals Process Explorer. With this, you can search to find what process(es) have a file open, and you can use it to close the handle(s) if you want. Of course, it is safer to close the whole process. Exercise caution and judgement.
To find a specific file, use the menu option Find->Find Handle or DLL... Type in part of the path to the file. The list of processes will appear below.
If you prefer command line, Sysinternals suite includes command line tool Handle, that lists open handles.
Examples
c:\Program Files\SysinternalsSuite>handle.exe |findstr /i "e:\" (finds all files opened from drive e:\"c:\Program Files\SysinternalsSuite>handle.exe |findstr /i "file-or-path-in-question"
Best Answer
There are lots of tools capable of this, Windows 2000 was even shipped with a version of wininstall if I'm not mistaken - anyway, it's available for free these days.
The trouble is avoiding false positives - ie changes made by the operating system that was not related to the installer - so some care and manual editing is always needed.