I would like to find out when/if some program tries to use WriteProcessMemory on my process. I have looked around and found a few programs that do somethign like what I want. The problem with Microsofts APIMON is that it can only monitor api calls from processes you open through it. It loads a dll in to the Process's memory to see what it does. I have found another possibility in REGMON by sysinternals. They use 2 differnt methods one for 9X and the other for NT. The source is avalible and I have it but they say that their method used for NT is unsuported. Also I don't want to watch the whole system I only want to know if someone interferes with my process.
Posted on 2002-08-21 06:25:15 by dionysus
Ummmm, REGMON is used for monitoring the registry, not your process space....
Posted on 2002-08-21 06:33:56 by sluggy
lol I know that.. I did not say it did what I wanted. It does somethign like what I want, it gathers information on certain API calls. like what app did the calling, what was done, that sort of thing.
Posted on 2002-08-21 15:09:17 by dionysus
well you need to hook the wpm api and have your program intercept it and close ...look for windows hook tuts.......
Posted on 2002-08-21 19:04:59 by Qages