How can I monitor processes that start after I start the Performance monitor?

Start Performance Monitor (Start - Programs - Administrative Tools - Performance Monitor)

Select Log View (View - Log or Ctrl-L)

Add to the log the objects you wish to monitor (Edit - Add to Log), including "Process", when finished click Done

From the Options menu select Log and enter a file name, a period of time and click "Start Log"

When you have logged enough, switch to Performance Monitor and from Options menu select Log, select "Stop Log"

Move to Chart view (View - Chart, or Ctrl+C)

Load in the log you created by selecting Options - Data From , and selecting the file and click OK

From the Edit menu, select Add and add the counters you wish to see, you will notice that under processes, the instances are only those running when you started, don't worry.

There will probably be an area you wish to investigate, such as a spike in CPU use, disk I/O. Alter the time window to start from the peak
- From the Edit menu, select Time Window
- Move the left hand bar till the left line is in the correct place on the chart, i.e. the spike
- Click OK

Now from the Edit menu, and select Add, under processes there will now be processes that were running at THIS point allowing you to diagnose the problem process, you can also now put the time window back to normal and this process will still show