OpenedFilesView displays the list of all opened files on your system.
For each opened file, additional information is displayed: handle value, read/write/delete access, file position, the process that opened the file, and more...
Optionally, you can also close one or more opened files, or close the process that opened these files.
This utility is especially useful if you try to delete/move/open a file and you get one of the following error messages:
When you get one of these error messages, OpenedFilesView will show you which process lock your file. Closing the right process will solve this problem. optionally, you can also release the file by closing the handle from OpenedFilesView utility. However, be aware that after closing a file in this way, the program that opened the file may become unstable, and even crash.
How does it work
OpenedFilesView uses the NtQuerySystemInformation API to enumerate all handles in the system. After filtering non-file handles, it uses a temporary device driver - NirSoftOpenedFilesDriver.sys for reading the information about each handle from the kernel memory. This device driver is automatically unloaded from the system when you exit from OpenedFilesView utility.
OpenedFilesView doesn' t require any installation process or additional DLLs. In order to start using it, just run the executable file - OpenedFilesView.exe
The main window of OpenedFilesView display the list of all files currently opened in your system. In order to refresh the list of opened files, press F5, or alternatively, use the Auto Refresh feature (Options -> Auto Refresh -> Every x seconds) in order to automatically refresh the opened files list every 1 - 5 seconds.
RELATED TOPICSDownload OpenedFilesView error messages kernel memory Locked Files OpenedFilesView process running process