any disk access debugger tool will tell u a processes disk access
you can try filemon from sysinternals(or was it sysutils?) for example