Identifying when software was installed 1

[dbirdil]

I've notice new software being installed but I didn't install it. I assume most of this is spyware. How can you tell when some software is installed?

What I have been doing is checking the properties of what I think is a new folder for the create date. Then I try to find the appropriate software in the add/remove programs control panel and remove it.

This process is too dependent on luck.

 

[franklin97355]

Try running spyware removal tools. Also make sure you are getting security updates from MS.

 

[dbirdil]

Thanks, but I am already running 4 different SPYWARE removal tools. Each one catch's something different. None of them seem to delete the directories the files use to exist in. It takes about 90 Minutes.

I've updated my machine to the latest security releases.

I was hoping on XP there would be some kind of audit trail of when something is installed.

 

[linney]

Removing adware & spyware
faq608-4650

There are programs around which will monitor your machine and prevent new applications from running until you give the O.K.

http://maxcomputing.narod.ru/ssme.html?lang=en#get

http://www.diamondcs.com.au/processguard/

If you really want to dive in and get dirty you could take a snapshop of your registry once a day and see if you can pick up any changes. This small freeware program may help you achieve this.

http://www.webattack.com/get/regshot.shtml

Make sure your options in IE/ Tools/ Internet Options/ Advanced are correct.

Uncheck the boxes for "Install on Demand" for IE and Other programs (two boxes).