here are a couple of tools you can look at:
Filemon (realtime file usage monitor)
http://www.sysinternals.com/ntw2k/source/filemon.shtml
Regmon: shows what items in the registry applications are using:
http://www.sysinternals.com/ntw2k/source/regmon.shtml
these might help you track down the disk activity at least.