Click to See Complete Forum and Search --> : current openned files


elham
May 13th, 2009, 05:40 AM
hi,
how i can get all current files openned by each running process using c#?

cilu
May 13th, 2009, 07:37 AM
I think this is not possible outside device drivers, because of the rights one needs for that. See these:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.win32.programmer.wmi&tid=42357aad-5037-4436-8ae6-c0b6f08ef07d&cat=en-us-msdn&lang=en&cr=US&sloc=en-us&m=1&p=1
http://www.nirsoft.net/utils/opened_files_view.html

How does it work ?
OpenedFilesView uses the NtQuerySystemInformation API to enumerate all handles in the system. After filtering non-file handles, it uses a temporary device driver - NirSoftOpenedFilesDriver.sys for reading the information about each handle from the kernel memory. This device driver is automatically unloaded from the system when you exit from OpenedFilesView utility.