Windows 10: Some program is changing a value in my registry. Is there a way to monitor which?

One program always adds a key to "Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" to not show thumbs on network drives. I deleted it already a couple of times but after 2 weeks or so it shows up again. First I thought it was maybe during a windows update, but that was not the case. Is there a registry monitoring app that will show me which program does the change?

submitted by /u/srirachaninja
[link] [comments]

:)

 

How to restore registry values?

Hello,

Thank you for posting your query on Microsoft Community.

You can perform system restore and check if it helps:

Perform System restore.

I suggest you to perform system restore and select a date prior to the changes which was done with the registry values and check if the issue gets fixed.

To perform System restore:

• Press Windows key + X, select
  System.
• In the left pane, click on System Protection.
• Select the option to system restore
  > next. It will show all restore points already created.
• Select the date prior to the date on which you have made the registry changes.

Registry disclaimer

To do so: Important this section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these
steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article
in the Microsoft Knowledge Base:

322756 (http://support.microsoft.com/kb/322756/ )

How to back up and restore the registry in Windows



Try the above step and let us know the status of the issue. We will be glad to assist you further.

Thank you.

 

Are my Registry Files all legitimate programs?

Isn't there a web tool whereby I can check if programs listed in my REGISTRY FILES are legitimate programs?

 

Recording changes to registry, system and programs

Regshot - free- compares registry before and after and presents a report.

Revo Uninstaller - Pro - can monitor an installation for full uninstall of any changes made - including those made by anoy other means during the period monitored.

- But I don't know how useful its log would be.

Spyme Tools - but old...
Welcome to SpyMe Tools, your Registry & Disk scanner and comparison tool.

SpyMe Tools is very useful in detecting Registry and Disk changes. If any application installs spyware, adware, dlls, programs, files, or any other type of file, picture, or program, etc. or changes the Registry's content, you will be able to see exactly where the modification occurred so you can take measures. It seems like more and more programs are attempting to install spyware, advertisements, or other garbage without your knowledge, but with this software you will know everything that is added or removed.
To detect Registry/Disk changes the program will create Dumps of the actual states of Registry/Disk. This means that at any time you can open the Dump file and view the contents of the Registry/Disk just as they were when you've scanned the Registry/Disk. The program can compare two different dump files so you'll see exactly what changed in the Registry/Disk between the two scans. The program can also restore old states of Registry keys using the data in the Dump files.

SpyMe Tools also includes a Real time Disk/Registry monitor so you may spot the changes in real time. (Real time Disk monitor works only on NT platform, including Win2k and Win XP).
=================================
Nirsoft's
FolderChangesView is a simple tool that monitors the folder or disk drive that you choose and lists every filename that is being modified, created, or deleted while the folder is being monitored.
You can use FolderChangesView with any local disk drive or with a remote network share, as long as you have read permission to the selected folder.
System Requirements

• This utility works on any version of Windows, starting from Windows 2000 and up to Windows 10. Both 32-bit and 64-bit systems are supported.