processes like Notepad or browser have legit reasons for accessing clipboard in short bursts, typically associated with keyboard and mouse activity. The vast majority of processes have no business accessing clipboard whatsoever. Is there a way to monitor the "process reads clipboard" events in order to identify potential spyware?
Try Debugviewer, from Microsoft Sysinternals Suite:
DebugView is an application that lets you monitor debug output on your local system, or any computer on the network that you can reach via TCP/IP. It is capable of displaying both kernel-mode and Win32 debug output, so you don't need a debugger to catch the debug output your applications or device drivers generate, nor do you need to modify your applications or drivers to use non-standard debug output APIs.