There is an unknown task appears on the systray of my computer and the speed of my computer becomes slow and slower. I insure that I have never installed such a program myself. I have tried to uninstall or delete it but it appears again when I reboot my computer every time. An experienced friend points out that the registry of my computer has been modified. If there is a way that it will send me a message and allow me decide if I permit this action or not when a program will modify the registry of my operating system. I ask for help from forum of computer technology and a friend on it commends me a software which can real-time monitor and fix registry problems. That is RegMon which is published by Sysinternals. With it I fix my registry and that strange program has not appeared any longer and the speed of my computer is normal again. Do you have the same troubles as me? Why do not you give it a try and solve the similar problems yourself.

Regmon is a Registry monitoring utility that will show us which applications are accessing our Registry, which keys they are accessing, and the Registry data that they are reading and writing - all in real-time. This advanced utility takes us one step beyond what static Registry tools can do, to let us see and understand exactly how programs use the Registry. With static tools we might be able to see what Registry values and keys changed. With Regmon we will see how the values and keys changed. Regmon works on Windows NT/2000/XP/2003, Windows 95/98/Me and Windows 64-bit for x64.

The heart of Regmon on Windows 9x is in the virtual device driver, Regvxd.vxd. It is dynamically loaded, and in its initialization it uses VxD service hooking (see our May 1996 Dr. Dobb Journal article on VxD service hooking for more information) to insert itself onto the call chain of 16 registry access functions in the Windows 95 kernel (Virtual Machine Manager). All registry activity, be it from 16-bit programs, Win32 applications, or device drivers, are directed at these routines, so Regmon catches all registry activity taking place on a machine. On Windows NT, 2000 and XP the Regmon loads a device driver that uses a technique called system-call hooking. When a user-mode component makes a privileged system call, control is transfered to a software interrupt handler in NTOSKRNL.EXE (the core of the Windows NT operating system). This handler takes a system call number, which is passed in a machine register, and indexes into a system service table to find the address of the NT function that will handle the request. By replacing entries in this table with pointers to hooking functions, it is possible to intercept and replace, augment, or monitor NT system services.

Regmon, which obviously hooks just the Registry-related services, is merely one example of this capability in action. On Windows .NET Server Regmon takes advantage of a new operating system Registry callback mechanism to register for and receive information about Registry accesses as they occur. When we run Regmon on .NET Server it loads a version of the Regmon driver utlizing the callbacks. When Regmon sees an open, create or close call, it updates an internal hash table that serves as the mapping between key handles and registry path names. Whenever it sees calls that are handle based, it looks up the handle in the hash table to obtain the full name for display. If a handle-based access references a key opened before Regmon started, Regmon will fail to find the mapping in it hash table and will simply present the key value instead. Information on accesses is dumped into an ASCII buffer that is periodically copied up to the GUI for it to print in its listbox. When we see a Registry value or key in Regmon output that we want to edit, simply double click on the line that includes the reference (or use the Regedit toolbar button) and Regmon will take us directly to the specific value using Regedit.

Overall, this is a very nice, easy to use and full-functions application to monitor registryr incessantly. Not only can beginners use it simply but also experienced users can also use it for advanced application. RegMon is an ideal solution for real-time registry monitor. It is the fast, affordable way to monitor and fix the registry.

RegMon 7.04 is a Registry Cleaner product from sysinternals.com, get 4 Stars SoftSea Rating, Regmon is a Registry monitoring utility that will show you which applications are accessing your Registry, which keys they are accessing, and the Registry data that they are reading and writing - all in real-time. This advanced utility takes you one step beyond what static Registry tools can do, to let you see and understand exactly how programs use the Registry. With static tools you might be able to see what Registry values and keys changed. With Regmon you ll see how the values and keys changed. SoftSea.com had fully tested, reviewed and uploaded the install files, RegMon does not contain any adware or spyware, the latest version is 7.04, you can download this registry cleaner software (186 KB) from special server of SoftSea.com. The license of this windows utility software is Freeware, you can free download and free use this Windows Utility software.