http://www.cracklab.ru/download.php?action=get&n=Njk1
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
Version 2.6 no longer requires the symbol engine to be configured on systems on which a trace is collected (only on the viewing system) and fixes a bug that could cause the desktop to stop updating when thread profiling is enabled on Windows 7.
Standalone: http://download.sysinternals.com/Files/ProcessMonitor.zip
