Display the Windows Program History With UserAssistView - gHacks Tech News

Display the Windows Program History With UserAssistView

Windows maintains a list of programs that have been executed on the operating system in the Windows Registry. The Windows program history contains detailed information about the programs that have been launched by the active Windows user.

The feature has been available for a long time, and Microsoft has continued to use it on all modern versions of the Windows operating system including Windows 7 and newer versions.

The information is stored in the Windows Registry under a UserAssist key which contains various information that are encrypted using the ROT-13 algorithm.

The information stored under the UserAssist key in the Registry can become a privacy and security risk if someone manages to get local access to the computer or remote access to the Registry. Also, you may use them to find out if another user who had access to a PC launched programs in your absence.

The program history is stored under the following Registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist

Several applications have been created to automatically decrypt the information and display them in a readable form to the user.

UserassistView

windows program history

One of those programs is UserassistView by Nirsoft.

The portable software program displays a list of item names, their index number, times they were started, the modified time and ClassID.

You can sort the information with a click on a column header, for instance by time, item name or times the file has been opened on the system.

It is possible to delete select entries or all entries from the listing using the application.

You may run the program from the command line. This allows you to export the data to one of the supported document formats, e.g. csv or XML.

The UserAssist key will however be automatically filled with new information from that point on so that it might be a better idea to schedule a regular cleaning job with a program like CCleaner.

The program history can also be saved as text, csv or html files for further inspection. UserAssistView is compatible with all Windows NT based operating systems including Windows 7. It can be downloaded directly from the Nirsoft homepage.

The program can be quite useful, not only because it enables you to remove select entries from the Windows Registry but also as an option to verify that a cleaning program did remove the information from the Windows system.

Summary
software image
Author Rating
1star1star1star1star1star
5 based on 2 votes
Software Name
UserAssistView
Operating System
Windows
Software Category
Administration
Landing Page




  • We need your help

    Advertising revenue is falling fast across the Internet, and independently-run sites like Ghacks are hit hardest by it. The advertising model in its current form is coming to an end, and we have to find other ways to continue operating this site.

    We are committed to keeping our content free and independent, which means no paywalls, no sponsored posts, no annoying ad formats (video ads) or subscription fees.

    If you like our content, and would like to help, please consider making a contribution:

    Comments

    1. joe said on April 12, 2010 at 9:57 am
      Reply

      You know what ROT-13 ‘encryption’ algorithm is? It replaces every letter with letter 13 places furter up in alphabet.

      That’s probably the only algorithm that can be decoded realtime by human eyes:D

    2. Jan said on March 26, 2014 at 2:49 pm
      Reply

      Also try http://process-history.co.uk for a better way of gettting program history.

    Leave a Reply