Check for registry

i don't like Regshot. it only shows changes in your registry, not what the program tries to create or which program creates what. What I use is RegMon; simply change the filter to filter out everything besides "Writes" and "Successes" clear the list for a fresh start, then right click and exclude every process you don't care about watching. after you have all the normal processes excluded it shows you all registry activity by whatever program you're running when the keys exist on your pc or not. the same can be done with filemon. vista users can't use these programs, but they can use process monitor; i should be using that too because it combines regmon and filemon into one but i haven't messed with it to set it up correctly for what we want.