The Change Analysis Diagnostic tool scans the computer and displays recent changes to the following areas:

• Software programs: The software programs that are listed in the Add or Remove Programs item in Control Panel.
• Operating system components: Hotfixes and downloads from Windows Update.
• Browser Helper Objects (BHOs): COM components that Internet Explorer loads when it starts. BHOs can intercept browser events, access Internet Explorer controls, create windows, and install add-ins that monitor messages and actions.
• Drivers: Kernel-mode device drivers and file system drivers.
• ActiveX controls: COM controls that have been downloaded by Internet Explorer or that are used in some Web pages.
• Other Auto-Start Extensibility Points (ASEPs): ASEPs let programs start without action from the user. An ASEP may accept one or more ASEP hooks, each of which is associated with a program.
The tool also displays changes to loaded applications and startup objects.

The Change Analysis Diagnostic tool queries the System Restore data for the number of days that the user selects. The tool finds the changes to the registry and to the file system that are relevant to these categories. Then, the tool presents the changes together with contextual information. Finally, the tool lists the changes in an XML file that can be sent to a support professional.