Registry Compare

[Rampage1329]

I have a windows xp vm machine. I am trying to load a virus to see what files and registry additions are being made. Our contract with trend is not solving the problem, is there a way I can see the registry entries and changes as they happen. I tried using teatimer by spybot but it isn't giving me enough information. Any help would be appreciative.

[mattsaccount]

This tool may provide what you're looking for, but you'll have to filter the results to exclude all the normal registry changes that occur in the background as the system sits there.

http://www.microsoft.com/technet/sysinternals/processesandthreads/regmon.mspx

Edit: realized that's out-of-date now. Try this:
http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx

[Rampage1329]

this looks like it might work. Does it list dlls?

[SpaceHonkey]

I used to use a tool called regsnap. Looks like it's still out there. Not sure how long the demo lasts...

http://lastbit.com/regsnap/