如何在Windows中监视文件和文件夹的更改

If someone else is using your computer or if you need to see what changes were made to your files and folders during a specific time, you can use Nirsoft’s handy FolderChangesView application. Nirsoft is a great freeware provider that produces amazing little tools for your PC, and the best part is that they never bundle crapware with their programs like so many other software vendors do.

如果其他人正在使用您的计算机，或者您需要查看在特定时间内对文件和文件夹进行了哪些更改，则可以使用Nirsoft方便的FolderChangesView应用程序。 Nirsoft是一家出色的免费软件提供商，它为您的PC提供出色的小工具，而最好的部分是，它们从未像其他许多软件供应商一样将垃圾软件与程序捆绑在一起 。

什么是文件夹更改视图？ (What is Folder Changes View?)

FCV is a small, standalone Utility created by Nirsoft Labs that makes it easy to monitor folders of entire disk drives for any changes. It will provide you with a comprehensive list of all the files that have been modified, created, or deleted during the time when the folder is being monitored. In addition to allowing local drive monitoring, FCV also allows you to monitor drives that are being shared over a network if you have “Read Permissions.”

FCV是Nirsoft Labs创建的小型独立实用程序，可轻松监视整个磁盘驱动器的文件夹中的任何更改。 它将为您提供监视文件夹期间已修改，创建或删除的所有文件的完整列表。 除了允许本地驱动器监视之外，FCV还允许您监视具有“读取权限”的网络上正在共享的驱动器。

下载实用程序 (Downloading the Utility)

Once you are ready to begin, you will need to download the FolderChangesView utility from Nirsoft’s website.  Simply scroll to the bottom of the page and download the zip file which contains a standalone executable file. Once you have downloaded the program, create a folder on the desktop called FCV (or wherever you want to put it), and then extract the contents into the folder.

准备开始后，您需要从Nirsoft的网站下载FolderChangesView实用程序 。 只需滚动到页面底部，然后下载包含独立可执行文件的zip文件。 下载程序后，在桌面上创建一个名为FCV的文件夹(或放置在任何位置)，然后将内容提取到该文件夹​​中。

启动和使用文件夹更改视图 (Launching and Using Folder Changes View)

Since FCV is a standalone application, there is no installation required. All you need to do is open the folder where the extracted files are and double-click the “FolderChangesView.exe” file. Remember that you may need to allow the application to run by clicking the “Run” button in the “Security Warning” window.

由于FCV是独立的应用程序，因此无需安装。 您需要做的就是打开提取文件所在的文件夹，然后双击“ FolderChangesView.exe”文件。 请记住，您可能需要通过单击“安全警告”窗口中的“运行”按钮来允许应用程序运行。

Once you have opened the program, you will need to select the folder that you want to monitor, and then press the “OK” button. Once you press “OK,” the utility will automatically begin to monitor your folder and any sub-folders according to the parameters you define. For this example, we will choose to monitor the “Downloads” folder in Windows. Do this by changing the target folder as shown in the image below.

打开程序后，将需要选择要监视的文件夹，然后按“确定”按钮。 按下“确定”后，该实用程序将根据您定义的参数自动开始监视您的文件夹和所有子文件夹。 对于此示例，我们将选择监视Windows中的“下载”文件夹。 通过更改目标文件夹，如下图所示。

Once you have selected a folder to monitor, you can also choose to edit the monitoring parameters by changing any other settings shown in the screenshot. We will not use these for now, but you can experiment with them later on. These settings will not alter any files on your computer, so you will not need to worry about messing anything up by entering the “wrong” settings.

选择要监视的文件夹后，还可以选择通过更改屏幕快照中显示的任何其他设置来编辑监视参数。 我们暂时不会使用它们，但是您可以稍后进行试验。 这些设置不会更改您计算机上的任何文件，因此您无需担心通过输入“错误”设置而弄乱任何内容。

Make Some Changes!

做一些改变！

Now that we have defined which folder will be monitored, it is time to make a change or two to see the way that the information is shown. For this example, I will delete a file from the folder, add a new folder, and move existing files into this new folder.

现在我们已经定义了要监视的文件夹，是时候进行一到两个更改以查看信息显示方式了。 对于此示例，我将从文件夹中删除文件，添加新文件夹，然后将现有文件移动到该新文件夹中。

Changes that were made in the “Downloads” folder, that were monitored by FCV are:

FCV监视的“下载”文件夹中所做的更改是：

1. “Paragon Partition Ma…” was deleted
   “ Paragon Partition Ma…”被删除
2. “New Folder” was created then modified (modification came from the name change)
   创建并修改了“新文件夹”(修改来自名称更改)
3. “VirtualBox-4.3.20-9699…” was deleted and created. This indicated that the file was moved because it was created in the “New Folder” and deleted from the original “Downloads” folder.
   删除并创建了“ VirtualBox-4.3.20-9699…”。 这表明文件已移动，因为它是在“新文件夹”中创建的，并已从原始“下载”文件夹中删除。
4. “Oracle_VM_VirtualBox…” had the same changes as the previous file because it was also moved.
   “ Oracle_VM_VirtualBox…”与上一个文件具有相同的更改，因为它也已移动。

显示什么信息？ (What Information is Shown?)

The Utility will provide you with comprehensive details about any changes in the folder. If you scroll to the right of the Monitoring window, you will see details about the file including:

该实用程序将为您提供有关文件夹中所有更改的全面详细信息。 如果滚动到“监视”窗口的右侧，将看到有关文件的详细信息，包括：

1. Filename
   文档名称
2. Modified Count
   修改计数
3. Created Count
   创建计数
4. Deleted Count
   删除计数
5. Full Path (location of the files in question)
   全路径(有问题的文件的位置)
6. Extension (the extensions of the files that have been logged by the monitor)
   扩展名(监视器已记录的文件的扩展名)
7. File Owner
   档案拥有者
8. First Time Event (This column and the column next to it will let you know when the first and last change to the file was made. This is useful if you are working on a Word Document, for example, and want to see how long the file was in use.)
   首次事件(此列及其旁边的列将让您知道何时对文件进行第一次和最后一次更改。例如，如果您正在处理Word文档，并且想要查看文件多长时间，这将很有用。文件正在使用中。)
9. Last Time Event
   上次活动
10. File Size
    文件大小
11. Modified Time (This is different from #8 and 9 since it tells you when the files attributes, name, and other details were modified rather than when it was accessed.
    修改时间(与＃8和9不同，因为它告诉您文件属性，名称和其他详细信息何时被修改而不是何时被访问。
12. Created Time
    创建时间
13. Attributes
    属性

If you want to see all this information about a single file in a window rather than having to scroll to the side, you can right-click on any entry and then press “Properties.” (NOT File Properties)

如果要在窗口中查看有关单个文件的所有这些信息，而不必滚动到侧面，则可以右键单击任何条目，然后按“属性”。 (没有文件属性)

结语 (Wrapping Up)

Now that you know how to monitor file changes on your PC, you will never have to wonder what people were doing on your computer again. You can also track any changes that could have been made by malicious software to track it down and eliminate it. Feel free to play with the settings and change the monitoring folders to see what happens. If you ever want to remove the program, it is as easy as deleting the FCV folder since there was no installation required.

既然您知道如何监视PC上的文件更改，您将不必再怀疑别人在您的计算机上正在做什么。 您还可以跟踪恶意软件可能进行的任何更改，以跟踪并消除它。 随意使用设置并更改监视文件夹以查看发生了什么。 如果您想删除该程序，由于不需要安装，因此与删除FCV文件夹一样容易。

翻译自: https://www.howtogeek.com/205144/how-to-monitor-file-and-folder-changes-in-windows/