http://technet.microsoft.com/en-us/sysinternals/dd996900.aspx
procdump -ma -c 60 -s 10 -n 3 <PID of W3WP>
