RegistryChangesView – Tool to Identify Registry Modification

RegistryChangesView is a tool for Windows that allows you to take a snapshot of Windows Registry and later compare it with another Registry snapshots, with the current Registry or with Registry files stored in a shadow copy created by Windows.

When comparing 2 Registry snapshots, you can see the exact changes made in the Registry between the 2 snapshots, and optionally export the Registry changes into a standard .reg file of RegEdit.

RegistryChangesView - Identify Registry Modification
RegistryChangesView – Identify Registry Modification

Examples for useful things you can do with this tool:

  • You can create a Registry snapshot before installing a new software and then after the installation is completed, compare this Registry snapshot with the current Registry and see all Registry changes made by the installer (Be aware that you’ll also see some changes made by Windows or other programs in the same time). If there are Registry changes that you don’t like, you can generate a .reg file to revert back the changes.
  • If you make a change in Windows configuration from the GUI of Windows and you want to see how to make this change in the Registry, simply create a Registry snapshot before making the config change and then after the configuration change, compare this Registry snapshot with the current Registry and optionally generate a .reg file that makes this configuration change.
  • If there is unwanted change in the Registry of your system but you don’t have any previous snapshot, you can compare the current Registry with a shadow copy created by Windows and try to locate the unwanted Registry changes.
  • You can also use this tool as a simple way to backup the Registry. The snapshot created by RegistryChangesView simply contains Registry hive files with the same name as the original one (ntuser.dat, SYSTEM, SOFTWARE, and so on…)

You can read more and download this tool over here: https://www.nirsoft.net/utils/registry_changes_view.html

Share