http://www.sysinternals.com/ntw2k/source/regmon.shtmlu