5 Apr
Most of the time the culprit that causes your hard drive to work are anti-virus software, anti-spyware software, instant messenger programs (IM), and Microsoft’s own indexing service. It’s OK if a legitimate program is making your hard drive to work but you’ll never know if a hacker is doing a search on your hard drive looking for confidential stuff! Unfortunately, Microsoft didn’t include a tool to diagnose and check what program is secretly accessing your hard drive. The built-in Windows Task Manager doesn’t show you anything at all other than CPU and Memory Usage. So I am going to show you how to find out what process is busy reading and writing your hard drive when you’re not causing it.
I will show you two tools that can check what is accessing your hard drive.
1. FileMon

- FileMon monitors and displays file system activity on a system in real-time. Its advanced capabilities make it a powerful tool for exploring the way Windows works, seeing how applications use the files and DLLs, or tracking down problems in system or application file configurations. Filemon’s timestamping feature will show you precisely when every open, read, write or delete, happens, and its status column tells you the outcome. FileMon is so easy to use that you’ll be an expert within minutes. It begins monitoring when you start it, and its output window can be saved to a file for off-line viewing. It has full search capability, and if you find that you’re getting information overload, simply set up one or more filters.
There is a similar tool called DiskMon, which is also developed by the same author as FileMon. It can log and display all hard disk activity on a Windows system but it only tells you which sector is being read or written. It’s not easy to tell which file or program is accessing your hard drive using DiskMon.
[ Download FileMon ]
2. AnVir Task Manager

- AnVir Task Manager Free is freeware utility software that gives users a comprehensive set of tools to put them in full control of their computer. It gives you detailed information about every process that is running, and about applications running automatically on Windows startup including all hidden applications.
AnVir Task Manager is a very advanced yet simple to use Task Manager. It has a feature called “Disk Load” at Processes tab where you can see the rate of disk activity which summarizes amount of data read, write and transferred by a process per second.
: Copying this article to your website is strictly NOT allowed. However, if you like this article, you can use the HTML code below to directly link to this article.
Boost Disk Drive Performance In Windows Vista How To Fix Problem Ejecting USB Mass Storage Device Error A FREE Hard Disk utility to Benchmark and Test your hard drive Changing or Spoofing Hard Disk Hardware Serial Number and Volume ID Measure Actual Hard Disk Performance Under Windows Wipe Your Hard Disk Before Lending or Giving Away Install XP: Setup did not find any hard disk drives installed in your computer
Have computer technical problems? Get FREE help from Raymond.CC FORUM
14 Responses for "Find Out What Program is Secretly Accessing Your Hard Disk Drive"
Access mean read or write.
Can I detect write operation to my HDD only?
sure. just dl filemon and set the proper filter
Hey I have subscribed ur feed via mail and I like the way U present ur feeds ie the more link .. can u tell how to do that .. Thanx !!!
Filemon has been replaced by Process Monitor in Vista. Much more detailed and configureable than the process monitor
thanks for this tool.:)
Hi, Raymond, thanks for your tips.
Im 1 off your blog reader..
And im now converting this message in our own language, and send to my group
Thank you brother !.
Great tips.
I would like to know why XP needs like 40 things running in the background, drives me crazy.
Thanks Raymond! This is very useful for me.
thanks
Thanks raymond this was helpful for me to find a virus in my system
Thank you for that stuff really, well worth to mention that there’re lot of tools do similar functions
Below are two of them:
- procmon (sysinternals)
- deep monitor
@7
My xp system runs with 19 processes.
Remember that Antivirus especially norton adds a load of them (Avast which i have uses 7 extra processes).
Tha AVG 8.0 showed that it contains a virus..
Is that true can i download and use the same
Sweet little tool. I love seeing the file activity. No more mysterious HD thrashing by covert corporate and Microsoft updateware. Thanks a million!
Leave a reply