Introduction
Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit.

Process Monitor runs on Windows 2000 SP4 with Update Rollup 1, Windows XP SP2, Windows Server 2003 SP1, and Windows Vista as well as x64 versions of Windows XP, Windows Server 2003 SP1 and Windows Vista.

不用多說，看名字就知道了...

詳細 (http://www.microsoft.com/technet/sysinternals/SystemInformation/processmonitor.mspx)

贊助商連結

這個程式在琥珀的 2000 SP4+ 完全不能用。想把 procmon.exe 改為 restart.exe 以正名。

這個程式在琥珀的 2000 SP4+ 完全不能用。想把 procmon.exe 改為 restart.exe 以正名。
:circle: 這程式果然夠出名(未被微軟收購)...小弟是剛才看到覺得不錯才轉貼的。

我的win2000 sp4可以跑.

1.1 發行了。自己的 2000 比較特殊，似乎討厭這個程式。

1.11 (http://www.microsoft.com/technet/sysinternals/SystemInformation/processmonitor.mspx) 發行。感謝 VirtualBox 忠實呈現運作情形。圖片如下：

http://img130.imageshack.us/img130/2285/bsodvq8.png

也許是自己的系統配置會挑軟體吧？不然 1.0、1.01、1.1、1.11 這四版，竟然沒有任何一版能和睦相處。