Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.
"Tony Hoyle" <tmh at nodomain.org> wrote in message news:cljaaj$4ev$1 at paris.nodomain.org... >> Open question to the floor - would Filemon >> (http://www.sysinternals.com/) spot this, or are the scanners and the >> like at a lower level than Filemon hooks? >> > I've seen filemon traces and they didn't reveal much.. The AV operates > at quite a low level so you'd have to hook below it to see its access > (probably varies with different AV though). Procexp from the same place is much better for seeing who has what files open. John