DDESPY can be used to debug issues with slow launching attachments from explorer, outlook etc - but all it tracks are hwnd handles which require additional research to find the source. I'd like to enhance/rewrite DDESPY to: - Provide info on the process rather than the hwnd id - Time should also show a delta (in sec) from previous entry - Only display steps that take longer than X secs (user definable) source code for ddespy http://msdn.microsoft.com/en-us/library/aa242184(VS.60).aspx note on getting pid from hwnd http://social.msdn.microsoft.com/Forums/en-US/netfxcompact/thread/0e63cc54-1d6d-44eb-a02c-8cb462eef7dd