There is an excellent free utility offered by Sysinternals (now owned by Microsoft) called Process Monitor. This allows you to monitor changes happening to files, Windows registry, network and processes in real-time. This is a fantastic utility for finding what files or registry entries a particular program or process is modifying. I used this recently so I could change some configuration settings for a program installed on my computer and then figure out which file was being used to save those settings. I could then copy that configuration file to other computers so they would have the same settings. Process Monitor is available for free download from