Is there a way: that Regmon can retain it's log file after my system freezes & I'm forced to do a bad shutdown? I want to see what files were accessed at the moment of freezing. The instructions--see last sentence below-- imply that this might be possible if you set Regmon to "LogBoot" [maybe it can be set for 2 successive"LogBoots" ?] & then recreate the problem & then shut down---it may keep logging until you open the display again. ----------- INSTRUCTIONS: "To use Regmon's boot logging feature simply select the "Log Boot" menu entry. Regmon will indicate that starting the next time the system boots Registry activity will be monitored and recorded to a log file named REGMON.LOG in your system root directory. When you make this selection Regmon configures itself as the very first driver to initialize in the system, enabling it to capture the Registry startup activity of all other device drivers and services, including critical boot drivers such as SCSI miniport drivers and boot file system drivers. Regmon stops recording to the log file when you start the Regmon GUI, and it will only log a single boot. LOGGING IS THEREFORE ALSO STOPPED WHEN THE SYSTEM SHUTS DOWN, UNLESS YOU HAVE RE-ENABLED BOOT-TIME LOGGING FOR THE SUBSEQUENT BOOT." ---------------------- P.S.: Where IS the "LogBoot" selection?--I can't find it on my menu--but instructions for version 4.34 say it's there!

At the front of that section it reads"(Windows NT/2K only)" BTW the latest version is 6.03

Can't answer your question, but here is site for the program: http://www.sysinternals.com/ntw2k/source/regmon.shtml