I am trying to develop an evaluation software mechanism that will limit the use of the program, and then require a purchase.
But when I gave it to my friend, he told me that whatever I do - write to registry, file or even alternate data stream, can be easily detected by even "innocent" utilities like Procmon. So, a potential thief just need to delete the files and registry keys my program has made, and use the software again and again.
This is very frustrating! It nullifies any protection I can think of!
My question is, is there any way to perform activity that will not be detected by the likes of procmon?