Download the tool from
http://www.microsoft.com/technet/sysinternals/utilities/handle.mspx
Ever wondered which program has a particular file or directory open? Now you can find out. Handle is a utility that displays information about open handles for any process in the system. You can use it to see the programs that have a file open, or to see the object types and names of all the handles of a program.
handle.exe > dd.txt will get all the files
handle AppEvent.evt
Handle v3.2
Copyright (C) 1997-2006 Mark Russinovich
Sysinternals - www.sysinternals.com
services.exe pid: 1224 2D0: C:\WINDOWS\system32\config\AppEvent.evt
No comments:
Post a Comment