
                                    Regmon
                                    ======                            v 3.0

            Copyright 1996-1997 Mark Russinovich and Bryce Cogswell

                          http://www.ntinternals.com


    Introduction
    ------------

    Regmon is a GUI/device driver combination that together monitor and
    display all Registry activity on a system.  It has advanced filtering
    and search capabilities that make it a powerful tool for exploring the
    way Windows 95 works, seeing how applications use the Registry, or
    tracking down problems in system or application configurations.


    Starting Regmon
    ---------------

    Simply run the Regmon GUI (Regmon.exe) from the same directory that
    the driver (regvxd.vxd) resides in.  Note that it must be located on a
    non-network drive.  Menus, hot-keys, or toolbar buttons can be used to
    clear the window, save the monitored data to a file, and to filter and
    search output.

    As events are printed to the output, they are tagged with a sequence
    number.  If Regmon's internal buffers are overflowed during extremely
    heavy activity, this will be reflected with gaps in the sequence
    number.

    Each time you exit Regmon it remembers the position of the window and
    the widths of the output columns.


    Filtering Output
    ----------------

    Use the Filter dialog to select what data will be shown in the list
    view.  The '*' wildcard matches arbitrary strings, and the filters are
    case-insensitive.  Only matches shown in the path include filter, but
    that are not excluded with the path exclude filter, are displayed.  The
    process filter also accepts the wildcard character.

    For example, if the path include filter is "HKLM\*", and the path
    exclude filter is "HKLM\System*", all references to keys and values
    under HLM\, except to those under HKLM\System would be monitored.


    Searching the Output
    --------------------

    You can search the output window for strings using the Find menu item
    (or the find toolbar button).  Once you have opened a Find dialog and
    hit the FindNext button, you can repeat the search without changing
    the focus back to the Find dialog by hitting the F3 key.

    To start a search at a particular line in the output, select the
    desired line by clicking on the far left column (the index number).  If
    no line is selected a new search starts at the first entry in searching
    down, and at the last entry for searching up.


    Reporting Bugs and Feedback
    ---------------------------

    If you encounter a problem while running Regmon, please record all the
    information available on your system and the software you are running.
    Determine if the problem is reproducible, and if so, how, and send
    this information to:

         mark@ntinternals.com     and     cogswell@winternals.com

