[cvsnt] Re: Latest Updates

[John Hall]

"Tony Hoyle" <tmh at nodomain.org> wrote in message 
news:cljaaj$4ev$1 at paris.nodomain.org...

>> Open question to the floor - would Filemon
>> (http://www.sysinternals.com/) spot this, or are the scanners and the
>> like at a lower level than Filemon hooks?
>>
> I've seen filemon traces and they didn't reveal much..  The AV operates
> at quite a low level so you'd have to hook below it to see its access 
> (probably varies with different AV though).

Procexp from the same place is much better for seeing who has what files 
open.

John