Monitor changes to drives, files, and Windows Registry with FRSSystemWatch

Martin Brinkmann
Jul 23, 2018
Updated • Jul 23, 2018

FRSSystemWatch is a free program for Microsoft Windows devices to monitor entire drives, directories, files, or Registry keys for changes.

It can sometimes be important to make sure files or values in the Registry are not changed; maybe you want to make sure that web server files are not tampered with or that Windows or programs don't reset certain keys in the Registry.

You can use quite a few programs such as FileActivityWatch, Delete Extension Monitor, or Windows Files Monitor, and even built-in tools like the Windows Resource Monitor for that depending on your needs.


FRSSystemWatch is another program that you may use for the job. The program can monitor any drive, folder, or individual file on any connected storage device, and Registry keys.

You need to install the program before it can be used; installation is straightforward and should not take long. Compatibility-wise, it is compatible with Windows 7 and newer versions of Windows and is offered as a 32-bit and 64-bit version on the website of the developer.

The program monitors the c: drive automatically when you start it for the first time. Updates happen in real-time and data is displayed in a log-like format within the application interface.

Each entry is listed with date and time, an icon that indicates file, folder or Registry key activity, the path and name, and the action.

You may notice after some searching in the interface that there is no pause button available to stop the monitoring. The missing option to pause the monitoring is one of the shortcomings of FRSSystemWatch. It may not be an issue if you monitor very specific locations or files, but if you monitor an entire drive, new entries get added very frequently to the log which makes it difficult to near-impossible to analyze what is going on.

The only option that you have is to select Watch > Remove Monitor. The second shortcoming is that doing so removes the entire log. If you have not copied the data beforehand it is lost as the program does not save the data automatically.

Speaking of issues; the program lacks proper export options. The only ways to save data are to either select it and use edit > copy to copy it to the Clipboard or to print it.

Now the good things. You can monitor multiple locations and it is easy enough to create new monitoring jobs. Just select Watch and then the desired type of monitoring to start it. The program remembers the locations and loads them on start automatically but it will start the monitoring anew and does not load any old records.

You can modify the interface quite a bit. Select Settings to adjust the font or color scheme used by the application in great detail.

FRSSystemWatch supports quite a few keyboard shortcuts that you may find handy. Use Ctrl-A to select the entire log and then Ctrl-C to copy it to the Clipboard. That's the fastest way to export the log but remember that you need to paste it somewhere unless you use a clipboard monitor such as CopyQ, Remembr, or Clipboard Help+Spell that remember what you copy to the Clipboard.

Closing Words

FRSSystemWatch is a handy but limited system monitor for Windows. While it may already be suitable for some uses, most users probably would like to see options to pause the monitoring, auto-export the log, or at least save log files manually to different formats.

Now You: Do you monitor your system?



software image
Author Rating
3 based on 5 votes
Software Name
Operating System
Software Category
Landing Page

Tutorials & Tips

Previous Post: «
Next Post: «


  1. OldNavyGuy said on July 25, 2018 at 12:09 am

    +1 for Sysinternals Process Monitor.

  2. Brent R Jones said on July 24, 2018 at 3:21 pm

    Martin, this may be an excellent program, but does it have a future? I am leery of installing applications that have only one developer. Have you ever limited yourself because of this issure?

    1. John Fenderson said on July 25, 2018 at 6:26 pm

      “I am leery of installing applications that have only one developer.”

      Why? I’m honestly curious.

  3. Robert G. said on July 24, 2018 at 12:21 pm

    Second post for FRSSystemWatch.

    After installation, I received this message:

    The code execution cannot proceed because mfc100.dll was not found. Reinstalling the program may fix the problem.

    My OS is Win 10 Pro 64-bit OS Build 17134.167 (US release).

    1. John Fenderson said on July 24, 2018 at 8:14 pm
    2. Sean said on July 24, 2018 at 2:08 pm

      same here, had to uninstall

  4. Robert G. said on July 24, 2018 at 1:19 am

    Thanks Martin for this freeware and have a good evening!

  5. John Fenderson said on July 23, 2018 at 11:55 pm

    I’m a big fan of tripwire programs like this. Eliminating the ability to change/create/delete files and their contents without detection eliminates the vast majority of the methods that attackers can use.

  6. cybernard said on July 23, 2018 at 2:40 pm

    process monitor from microsoft is way better than this.

  7. Paul(us) said on July 23, 2018 at 11:54 am

    Martin a question to you. You wrought on October 14, 2013 at 10:54 am as a reply

    I like Registry Watcher:

    Do you still use this program or do you use another right now?

    1. Martin Brinkmann said on July 23, 2018 at 5:27 pm

      Registry Watcher is a great program.

      1. Ben said on July 24, 2018 at 1:15 pm

        Hm I took a look at Registry Watcher. It says it’s a hooker but it does not seem to hook the API to detect changes.
        So it will run scans every 30s or so which leads to quite a lot of CPU used (3-5% in my case) for several seconds.
        Not that impressed.

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.