Try the Sysinternals utilities (https://technet.microsoft.com/en-gb/sysinternals/ https://technet.microsoft.com/en-gb/sysinternals/) - Process Explorer would be

Try the Sysinternals utilities (https://technet.microsoft.com/en-gb/sysinternals/ https://technet.microsoft.com/en-gb/sysinternals/) - Process Explorer would be a good place to start, and Process Monitor if you're feeling a bit more adventurous. edit: I should add that Mark Russinovich, who wrote these tools, has also blogged a fair bit over the years about using them to solve mysteries such as yours - e.g. http://blogs.technet.com/b/markrussinovich/archive/2012/10/30/3529266.aspx http://blogs.technet.com/b/markrussinovich/archive/2012/10/3...