MyCity » Pascal -> Delphi » Zna li neko neku Registry monitor komponentu?

Zna li neko neku Registry monitor komponentu?

Napisano na dan: 19.6.2006
2

Zna li neko neku Registry monitor komponentu?
Pagination Prethodna strana

Idi na vrh

Poslao: 14 Jul 2006 18:04
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Mislis da radim snapshotove pa da ih uporedjujem?



Registruj se da bi učestvovao u diskusiji. Registrovanim korisnicima se NE prikazuju reklame unutar poruka.
Poslao: 14 Jul 2006 18:14
Idi na vrh
offline
  • prm 
  • Građanin
  • Pridružio: 11 Jun 2006
  • Poruke: 94

sta god ti drago samo neznam kako da automatski to uradis pa mozes i svakih par dana ili kako ti se svidi

Imao sam profesora koji je volio da kaze kako ti voles



Poslao: 14 Jul 2006 18:22
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Program treba da prati instaliranje drugih programa:
- koje fajlove gde postavljaju na disku
- koje kljuceve upisuju ili menjaju u reg. bazi

Za ono prvo sam nasao komponentu, ali ima malo zezancije zato sto komponenta radi samo u D2005.

Sto se tice registrija, lepse bi mi bilo kada bih mogao posao da zavrsim preko neke monitor-komponente nego preko uporedjivanja snapshotova iz vise razloga.

Otom-potom, mislim da pre zime necu stici da pocnem da pisem ovaj program.

Poslao: 15 Jul 2006 12:40
Idi na vrh
offline
  • Srđan Tot
  • Am I evil? I am man, yes I am.
  • Pridružio: 12 Jul 2005
  • Poruke: 2483
  • Gde živiš: Ljubljana

Sad nesto razmisljam... ona moja komponenta bas i ne moze da ti pomogne jer za svaki kljuc koji prati kreira nov thread. S obzirom da kuljuceva u reg. ima prilicno puno, kreiranje tih silnih threadova ce sigurno uticati na performanse sistema.

Dopuna: 15 Jul 2006 13:40

Probacu ovih dana da izmiksam komponentu malo drugacije... zamislio sam da sve ustvari uradim preko 2 komponente... videcemo da li ce uspeti Smile

BTW, da li zelis da ti kreiram bas komponente designtime komponente ili samo klase?

Poslao: 15 Jul 2006 12:49
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Designtime please, nisam ti ja bas toliko dobar programer... Smile

Poslao: 15 Jul 2006 13:30
Idi na vrh
offline
  • Srđan Tot
  • Am I evil? I am man, yes I am.
  • Pridružio: 12 Jul 2005
  • Poruke: 2483
  • Gde živiš: Ljubljana

Sad sam procitao nesto i shvatio da sve radim pogresno Razz

Citat:How Regmon Works

The heart of Regmon on Windows 9x is in the virtual device driver, Regvxd.vxd. It is dynamically loaded, and in its initialization it uses VxD service hooking (see our May 1996 Dr. Dobb's Journal article on VxD service hooking for more information) to insert itself onto the call chain of 16 registry access functions in the Windows 95 kernel (Virtual Machine Manager). All registry activity, be it from 16-bit programs, Win32 applications, or device drivers, are directed at these routines, so Regmon catches all registry activity taking place on a machine.

On Windows NT, 2000 and XP the Regmon loads a device driver that uses a technique we pioneered for NT called system-call hooking. When a user-mode component makes a privileged system call, control is transfered to a software interrupt handler in NTOSKRNL.EXE (the core of the Windows NT operating system). This handler takes a system call number, which is passed in a machine register, and indexes into a system service table to find the address of the NT function that will handle the request. By replacing entries in this table with pointers to hooking functions, it is possible to intercept and replace, augment, or monitor NT system services. Regmon, which obviously hooks just the Registry-related services, is merely one example of this capability in action.

On Windows .NET Server Regmon takes advantage of a new operating system Registry callback mechanism to register for and receive information about Registry accesses as they occur. When you run Regmon on .NET Server it loads a version of the Regmon driver utlizing the callbacks.

When Regmon sees an open, create or close call, it updates an internal hash table that serves as the mapping between key handles and registry path names. Whenever it sees calls that are handle based, it looks up the handle in the hash table to obtain the full name for display. If a handle-based access references a key opened before Regmon started, Regmon will fail to find the mapping in it hash table and will simply present the key's value instead.

Information on accesses is dumped into an ASCII buffer that is periodically copied up to the GUI for it to print in its listbox.

For more detailed information on how Regmon works on Windows NT, see:

* "Windows NT System Call Hooking," by Mark Russinovich and Bryce Cogswell, Dr. Dobb's Journal, January 1997
* "Inside NT Utilities", Windows NT Magazine, February 1999.
http://www.sysinternals.com/Utilities/Regmon.html

MyCity » Pascal -> Delphi » Zna li neko neku Registry monitor komponentu?

Ko je trenutno na forumu
 

Ukupno su 1112 korisnika na forumu :: 53 registrovanih, 8 sakrivenih i 1051 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 5.56, A.R.Chafee.Jr., amaterSRB, aramis s, ArchaBasha, asdfjklc, babaroga, Bahuss, Bluper, Bobrock1, Bubimir, cavatina, ccoogg123, comi_pfc, darcaud, DeerHunter, djboj, Fog of War, Georgius, karevski, Karla, Koridor, krkalon, Kubovac, kunktator, mačković, mercedesamg, Metanoja, Miki01, milimoj, Milometer, milos.cbr, milutin134, mkukoleca, nebkv, Nemanja.M, nenad81, nick79, Niko Bitan, nikoladim, ObelixSRB, operniki, ozzy, Parker, Povratak1912, procesor, Romibrat, shone34, Sir Budimir, vladaa012, Webb, Wrangler, x9