SpyMe Tools allows to detect registry and disk changes. It checks if a modification occurs in the registry or any type of file. Ideal to check if an application installs spyware, adware, dlls, etc. To Scan Registry the next options are predefined: HKEY_LOCAL_MACHINE, HKEY_CURRENT_USER, HKEY_USERS, HKEY_CLASSES_ROOT, and HKEY_CURRENT_CONFIG. You can mark the desired options or add the keys you wish to scan clicking on the Add key button; the subkeys will be showed in the Specified Subkeys text box. To begin to scan click on the Start Scanning button, the protect file window will suggest to protect your file from being opened by other people, encrypting it with a password, but you can choose "Do not protect" if you don't want to encrypt the file. You can select what type of events to be intercepted when two registry snapshot files are compared: additions, deletions, and changes. For the file mode you can choose the drives to scan or specify directories with the "add folder" button. In the File Mode there are the same options as in the registry mode, but it has other options that trigger the file changed event when new access, new creation and new attributes time differs from the old file. After scanning, a log file is generated and saved in the SpyMe Tools installation folder. The Compare Dump files option compares two files: the old state of the disk/registry and the recent state of disk/registry.
Comments