regmon.exe from www.sysinternals.com works fine