MiscHooks --------- 1) run taskmgr.exe or other MS application (NT) apihooks -o MiscHooks.dll taskmgr.exe display taskmgr's (or other MS app's) About, you should see Windows version 9.0 2) apply this dll on any process (winhlp32.exe), names of the files process's main module will want to open will be logged to createf.log, you'll be prompted if process's main module will try to open registry key, you'll be prompted when dialog is about to be destroyed (so WINDOWS HOOKS ARE POSSIBLE too!) note: createf.log will be closed after process's exit and you can locate it in process's working directory