FileActivityWatch v1.08
Copyright (c) 2018 Nir Sofer

Description

FileActivityWatch is a tool for Windows that displays information about every read/write/delete operation of files occurs on your system. For every file, FileActivityWatch displays the number of read/write bytes, number of read/write/delete operations, first and last read/write timestamp, and the name/ID of the process responsible for the file operation.

System Requirements

This tool works on any version of Windows, starting from Windows Vista and up to Windows 10. Both 32-bit and 64-bit systems are supported. Elevation ('Run As Administrator') is required to use this tool.

Versions History

  • Version 1.08:
    • You can now resize the properties window, and the last size/position of this window is saved in the .cfg file.
  • Version 1.07:
    • Added option to choose another font (name and size) to display in the main window.
  • Version 1.06:
    • Added 'Automatically Scroll Down On New Items' option.
  • Version 1.05:
    • Added new columns: 'Read+Write Bytes' and 'Read+Write Count'.
  • Version 1.00: First release.

Known Issues

  • This tool cannot detect read/write activity if the file was opened white the tool was not running.

Start Using FileActivityWatch

FileActivityWatch doesn't require any installation process or additional DLL files. In order to start using it, simply run the executable file - FileActivityWatch.exe

Immediately after running FileActivityWatch, the main window displays all read/write/delete operations made by applications running on your system. Under the Options menu you can choose which type of operation to trace: 'Capture Read Events', 'Capture Write Events', and 'Capture Delete Events'. You can also turn off all events tracing by unchecking the 'Capture Events' option (F2).

At any time, you can press Ctrl+X (Clear List) in order to clear all items accumulated in the main window of FileActivityWatch.

Mark Files With Active Read/Write

When the 'Mark Files With Active Read/Write' option is turned on, every item with read/write/delete operation in the last few seconds is marked as follows:
  • Green - Read operation
  • Yellow - Write operation
  • Red - Read+Write operation
  • Blue - Delete operation

FileActivityWatch Columns

  • Filename:The filename that had read/write/delete operation.
  • Process ID:The ID of the process responsible for the read/write/delete operation.
  • Process Name:The name of the process responsible for the read/write/delete operation.
  • Process Path:Full path of the process.
  • Read Count:Number of read operations.
  • Write Count:Number of write operations.
  • Delete Count:Number of times that the file was deleted by the specified process.
  • Read Bytes:Total number of bytes read from the specified file by the specified process.
  • Write Bytes:Total number of bytes written to the specified file by the specified process.
  • First Read Time:Date/time when the first read operation was detected.
  • First Write Time:Date/time when the first write operation was detected.
  • Last Read Time:Date/time when the last read operation was detected.
  • Last Write Time:Date/time when the last write operation was detected.

Translating FileActivityWatch to other languages

In order to translate FileActivityWatch to other language, follow the instructions below:
  1. Run FileActivityWatch with /savelangfile parameter:
    FileActivityWatch.exe /savelangfile
    A file named FileActivityWatch_lng.ini will be created in the folder of FileActivityWatch utility.
  2. Open the created language file in Notepad or in any other text editor.
  3. Translate all string entries to the desired language. Optionally, you can also add your name and/or a link to your Web site. (TranslatorName and TranslatorURL values) If you add this information, it'll be used in the 'About' window.
  4. After you finish the translation, Run FileActivityWatch, and all translated strings will be loaded from the language file.
    If you want to run FileActivityWatch without the translation, simply rename the language file, or move it to another folder.

License

This utility is released as freeware. You are allowed to freely distribute this utility via floppy disk, CD-ROM, Internet, or in any other way, as long as you don't charge anything for this and you don't sell it or distribute it as a part of commercial product. If you distribute this utility, you must include all files in the distribution package, without any modification !

Disclaimer

The software is provided "AS IS" without any warranty, either expressed or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. The author will not be liable for any special, incidental, consequential or indirect damages due to loss of data or any other reason.

Feedback

If you have any problem, suggestion, comment, or you found a bug in my utility, you can send a message to nirsofer@yahoo.com

Download FileActivityWatch (32-bit)
Download FileActivityWatch (64-bit)

FileActivityWatch is also available in other languages. In order to change the language of FileActivityWatch, download the appropriate language zip file, extract the 'fileactivitywatch_lng.ini', and put it in the same folder that you Installed FileActivityWatch utility.

LanguageTranslated ByDateVersion
DutchJan Verheijen 09/07/20181.07
FrenchLargo 09/07/20181.07
French Eric FICHOT 09/04/20181.00
German «Latino» auf WinTotal.de 19/08/20181.08
Greek geogeo.gr 06/05/20181.06
ItalianStyb 26/04/20181.06
PolishHightower 17/07/20181.07
Portuguese Braziligorruckert 06/04/20181.00
RussianDmitry Yerokhin 09/07/20181.07
Simplified Chinese DickMoore 25/04/20181.05
SlovakFrantišek Fico 20/08/20181.08
Traditional Chinese Danfong Hsieh 03/05/20181.06