Those registry scanners definitely come in handy in those cases. do a baseline scan, change the appropriate settings, scan it again and compare against the baseline. I am using 'Advanced Registry Tracer' from Elcom soft at http://www.elcomsoft.com/art.html
_________________________
There are two types of vessels, submarines and targets.
