Something like one of these?
System Safety Monitor:
"System Safety Monitor (SSM) is an application-firewalling tool (it is not a "firewall" in traditional understanding, so there shouldn't be any conflicts with your network firewalls). SSM controls which programs are running on your computer and what they are doing. For example, SSM can prevent so called "DLL Injection". Also, SSM will notify you whenever a program you want to start was modified. In addition, SSM can constantly check your registry and alert you, when an important modification was made."
http://maxcomputing.narod.ru/ssme.html?lang=en-----------------
Filemon
"FileMon monitors and displays file system activity on a system in real-time. Its advanced capabilities make it a powerful tool for exploring the way Windows works, seeing how applications use the files and DLLs, or tracking down problems in system or application file configurations. Filemon's timestamping feature will show you precisely when every open, read, write or delete, happens, and its status column tells you the outcome. FileMon is so easy to use that you'll be an expert within minutes. It begins monitoring when you start it, and its output window can be saved to a file for off-line viewing. It has full search capability, and if you find that you're getting information overload, simply set up one or more filters."
http://www.sysinternals.com/Utilities/Filemon.html------------
System Integrity Monitor
"GFI LANguard System Integrity Monitor (S.I.M.) is a utility that provides intrusion detection by checking whether files have been changed, added or deleted on a Windows 2000/XP system. If this happens, it alerts the administrator by email. Because hackers need to change certain system files to gain access, this FREEWARE utility provides a great means to identify any servers that are open to attack"
http://www.gfi.com/lansim/-------------------
Free File Monitoring Software
"This FREE useful utility can help you to stay abreast of changes (file additions, deletions and changes) that occur in folders on your computer, letting you specify up to 20 directories to monitor, including your network drives. Great for System Administrators! Your files are monitored in real time."
http://www.contactplus.com/products/freestuff/monidir.htm