Nowadays you can find a lot of portable applications on the web. These application will indeed run from a USB stick but most of them leave (a lot of) traces if they even work at all on PC's without admin rights (like my office PC).
I'm pretty newbish to all this but I am only looking for a way to check if an application is fully stealth or not. I did a search but I'm probably looking with the wrong terms.
Thanx in advance.
Visit the Community page
Join our forums
Subscribe to our email newsletter
Subscribe with RSS
Follow us on Facebook
Follow us on LinkedIn
Follow us on Twitter
Follow us on Mastodon
Follow us on BlueSky
Apps on here are all completely portable or "stealth" as you have said. That is the aim of this site, to enable open source programs to be run portably.
Other sites provide portable apps, though they may not be our idea of portable. Most other sites just have apps that happen to run without being installed. Most will leave stuff in the registry, file associations, etc.
You can use filemon and regmon, available in the net to monitor what files and registry keys are being modified, though it's quite complex to see what's happening in my experience!
This site: Portable. Other sites: probably not.
Other sites: probably not.
Hey, there's a lot of sites with truly portable (stealth) apps!
Other sites: possibly not.
"Those people who think they know everything are a great annoyance to those of us who do." Asimov
Regshot.
Its easier to use than filemon and regmon.
“Science is the belief in the ignorance of the experts” - Richard P. Feynman
"What about Love?" - "Overrated. Biochemically no different than eating large quantities of chocolate." - Al Pacino in The Devils Advocate
But with RegShot you can never be sure. Do you check the whole hard drive? And it can't find files that were changed.
It is definitely easier to use than filemon and regmon, but when you want to ensure, it's not enough. So I can recommend - try ProcMon (filemon + regmon + ... in one program). If it's too hard, use Regshot and hope it finds everything (usually it's enough).
"Those people who think they know everything are a great annoyance to those of us who do." Asimov
I check the whole hard drive and it even finds attribute changes (AFAIK).
“Science is the belief in the ignorance of the experts” - Richard P. Feynman
"What about Love?" - "Overrated. Biochemically no different than eating large quantities of chocolate." - Al Pacino in The Devils Advocate
Respect
I used to check only windir, program files and documents and settings
"Those people who think they know everything are a great annoyance to those of us who do." Asimov
Thanx for the reaction, i'll give procmon and/or regshot a try to see what they come up with.
I had to buy a new pc last night, and Vista is full of surprises.
One of them is that RegShot just won't complete it's "First Shot".
After it completes the registry scan, it locks up and I have to kill it with Task Manager. This also happens after I set it to "Run in XP Compatability Mode".
Anybody here using Vista that has RegShot working?