Hi BrianDrab,
Your suggestions have proved to be problematic. If I run ProcMon and then re-run SURT, ProcMon crashes. If I try to let ProcMon finish running before starting SURT, I get an error which says "A system or application resource limit has been exceeded that prevents Process Monitor from capturing additional events". At this point the ProcMon application has recorded 33,186,155 events. My PC is relatively old and running 32-bit Windows so limited in memory. Any other suggestions?