|
How does it work ?
OpenedFilesView uses the NtQuerySystemInformation API to enumerate all
handles in the system. After filtering non-file handles, it uses a
temporary device driver - NirSoftOpenedFilesDriver.sys for reading the
information about each handle from the kernel memory. This device driver
is automatically unloaded from the system when you exit from
OpenedFilesView utility.
Using OpenedFilesView
OpenedFilesView doesn't require any installation process or additional
DLLs. In order to start using it, just run the executable file -
OpenedFilesView.exe
The main window of OpenedFilesView display the list of all files
currently opened in your system. In order to refresh the list of opened
files, press F5, or alternatively, use the Auto Refresh feature (Options
-> Auto Refresh -> Every x seconds) in order to automatically refresh
the opened files list every 1 - 5 seconds.
Other Options
•
Show Opened Directories: By default, OpenedFilesView only display the
opened files. If you also want to view the opened Directories (folders),
select this option.
•
Show Network Files: By default, OpenedFilesView only display the opened
files on your local drives. If you also want to view the opened files on
remote network drives, select this option.
•
Sort On Refresh: If this option is selected, new opened files (after
refresh) are added to the right position according to the current column
sort. If this option is not selected, new opened files are added to the
end of the opened files list. |
