in reply to Win32 taint...shouldn't this fail?
It looks like you aren't entering in a filename, if that's the case then $file gets its value directly from the script ($file = 'xcanalys.txt';) which is why it isn't tainted.
In Section
Seekers of Perl Wisdom