Gizmos Freeware Reviews  

Go Back   Gizmo's Freeware Forum > Freeware Forum > I Want a Freeware Program that ...

Reply
 
Thread Tools Display Modes
Old 13. Jul 2015, 08:28 AM   #1 (permalink)
Senior Member
 
sicknero's Avatar
 
Join Date: Mar 2012
Location: England
Posts: 657
Default ... tells me what exec or process has created a file or directory

I use a lot of portable software, some of which is not truly portable and definitely not "stealth", and I quite often use the software on different machines and in different installations.

The upshot of all this, is that some portable progs create directories on first run or have paths that relate to other systems.

For instance, I might end up with a second "Documents/Pictures" directory, and Maxthon browser will create a new user directory/download folder, if I forget to set a new download path.

So what I want is some way to check any folder or file, and find out out exactly what process created it.

I wouldn't be surprised if this capability already exists in Windows ... I've looked in the events viewer but the amount of info generated there is a bit overwhelming.

Any advice on how I can use an existing Windows function for this, or any simple bit of freeware, would be much appreciated.

Thank you : )
sicknero is offline   Reply With Quote
Old 13. Jul 2015, 07:35 PM   #2 (permalink)
Senior Member
 
Join Date: May 2010
Posts: 551
Default

The only way I can think of getting close at the moment is to use the creation date and time to interrogate the event log.
Burn-IT is offline   Reply With Quote
Old 14. Jul 2015, 04:56 PM   #3 (permalink)
Editor
 
George.J's Avatar
 
Join Date: Oct 2010
Posts: 1,927
Default

If you want a real-time utility you may check Process Monitor from Sysinternals or TinyWatcher. You will be surprised that thousands of real-time operations that are happening every second, and also filter the operations.

If you want an on-demand utility, try RegShot that creates a snapshot at 2 different points in time.

Both tracks the files/folder as well as registry changes.
__________________
If you seek for attention, do common things in life in an uncommon way!
George.J is offline   Reply With Quote
Old 25. Jul 2015, 03:58 PM   #4 (permalink)
Senior Member
 
sicknero's Avatar
 
Join Date: Mar 2012
Location: England
Posts: 657
Default

Thanks for the suggestions.

I like the idea of using event logs/event viewer but I'm a total stranger to them so it will take me a little while to learn my way around. I did have a brief look but I find the event viewer a bit impenetrable so far : )

I'll persevere though ... it's good to have a reason to learn something new.

I have thought of system/drive snapshotters, or rather I think a directory monitor might be more useful in this instance. I already have System Explorer.

The problem with these is partly that they need me to remember to run them : ) Sometimes a process will create a new directory and I won't notice until hours or days later.

Also programs I've tried like Directory Monitor do register the creation of directories etc, but don't tell me what process created them. Process Monitor I'm still getting to grips with but I can't seem to see anything relevant in the history window. It seems to register some actions but not all. I don't really know yet how to use the filters though.

Last edited by sicknero; 25. Jul 2015 at 04:06 PM. Reason: typo
sicknero is offline   Reply With Quote
Old 27. Jul 2015, 12:14 PM   #5 (permalink)
Senior Member
 
Join Date: May 2010
Posts: 551
Default

To help you with the Event Log, Nirsoft, as usual, do a handy viewer.
Myeventviewer.
Burn-IT is offline   Reply With Quote
Old 27. Jul 2015, 10:58 PM   #6 (permalink)
Senior Member
 
sicknero's Avatar
 
Join Date: Mar 2012
Location: England
Posts: 657
Default

Thanks I'll check out. I find a lot of the Nirsoft suite very useful
sicknero is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT +1. The time now is 07:07 PM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2019, vBulletin Solutions, Inc.