you can use system hooks.
You can hook any file's function (exactly any file API ) and then you can alter with your function.
If you read my post "how to hide a file" you will have a example.
There's the posibility to make a LOG wtih the createfile, or with readfile,etc...
Uses your imagination...
