Injected process start fails on W7 and XP

[JoeWalker]

I installed the latest madCollection 2.7.2. Hooking code that worked previously now fails. The injection target simply does not start in XP, in Win7 the injection target fails:

Problem signature:
Problem Event Name: APPCRASH
Application Name: iexplore.exe
Application Version: 9.0.8112.16421
Application Timestamp: 4d76255d
Fault Module Name: StackHash_c2c0
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 00000000
Exception Code: c0000005
Exception Offset: 00000000
OS Version: 6.1.7601.2.1.0.256.48
Locale ID: 2057
Additional Information 1: c2c0
Additional Information 2: c2c0012f670e367647f2f382a2e0dc6b
Additional Information 3: 6d46
Additional Information 4: 6d464395e62f70b13caace935f0b552c

This is IE, it also fails for a simple test program I use for debugging with the same strange StackHash.. module name.

I fell back to madCollection 2.7.1.1 and things are OK again.

I inject by hooking CreateProcess..., starting the target process suspended, do InjectLibrary and then resume the suspended thread. All steps appear to work fine. I check the return from InjectLibrary() and it is OK.

I will continue with 2.7.1.1 for the time being.

kind regards, Joe

[madshi]

Hi Joe,

thanks for the heads-up. That's a new bug which was introduced when I added support for XE2 x64 compiling. It should be fixed in this new build now:

http://madshi.net/madCollection.exe (installer 2.7.3.0)