Hello all,
I want to find on a Windows, what software were removed on this ?
For me, it isn't possible except if the uninstall program is bad !
What do you think about this ?
Thanks a lot and execuse for my poor english
Cordially
Eric
You can find traces of removed software in lots of places, such as registry hives, mft, link files, unallocated clusters etc. etc. Just too much to mention. Google is your friend …
Stamitz
There are a lot of places to look for evidence of applications that had been installed at some point, and removed. In the user's Registry hive file, UserAssist and MUICache keys.
If the system is XP, check the contents of the Prefetch directory.
That should get you started.
HTH
Ok. But there isn't a hive who list the uninstalled software is there ?
I don't know about an exact registry hive, but the restore points will show what files were deleted and created. This may give you an idea if you see a lot files being deleted that are associated with a particular program.
I find this about Restore Point.
http//
Thanks.
I don't know about an exact registry hive, but the restore points will show what files were deleted and created.
You're probably thinking of the file that contains a copy of the Software hive file.
Also check rp.log…