When I try to monitor the process with either of these programs the process terminates as if it is detecting that it is being watched.

Is this common, or am I just not using them correctly?

Plz search the board FIRST before you post anything
Your question has been answer.

API Mon seems to be working ok now, it was displaying too much information so it must of crashed.

I am getting information overload with API Mon though, even when I filter it down to just one process, and just one type of API-type i.e "File I/O", I am still getting what seems to be an infinitesimal amount of information. There is no way I can make sense of 1000s of APIs listed every second.

There are usually filters in this type of programs, to let you remove any irrelevant items from the log list.

And yes, many programs/protections do actively check if they are being spied on. Some detect if certain other software products are running (like regmon, filemon, softice and so on) and some use more generic techniques.


dELTA