PDA

View Full Version : InstallRite


BrendanK.
December 16th, 2008, 02:20 AM
Anyone used this software? I was just reading an article on malware anaylsis and found this tool. It seems useful just wondering if anyone would like to give it a go.

-{ Quote: "InstallRite is a tool that can be obtained from http://www.epsilonsquared.com/installrite.htm
and used to create a database of a Windows installation.
In the initial stage, i.e. before execution of a file, the software reads the following
information of the system and records it:
•Registry keys and values
•Filesystem information including the file's checksum and version
After running a software the mentioned information can be re-checked and the two states can be compared.
This tool will was used to detect what modifications had been done by the malicious software on the victim system." }-

Sully
December 16th, 2008, 04:16 AM
Oh yeah, this program rocks! I use it all the time on new installs. You should spend some time learning what registry keys to avoid watching, like MRU's. But really, it gives such a great picture of what happened during an install it is unreal. A little long in the tooth now, but still a fine app.

Remember to save your database file if you reformat or something. One downfall of it is that you can export the registry values, but they need some cleaning up before you can do much with them. I wrote a couple apps for that purpose, if I can just remember where I put them :(

Sul.

BrendanK.
December 16th, 2008, 06:54 AM
Sweet. It looks useful so I'm sure I'll be using it :)

MrBrian
December 17th, 2008, 09:07 PM
Similar programs to try if you like InstallRite: Zsoft Uninstaller, Total Uninstall 2.35 (last freeware version).