OS: Windows XP SP3
MCH : madCollection 188.8.131.52(beta)
Symptom 1: It is not injected into the processes already in place, but then injected into the processes that are executed (though, irregularly failed).
=> For example, firefox.exe:failed, notepad+.exe: succssed, conemu.exe: successed
Symptom 2: No injections to the processes already in place, and little injections to the processes that are subsequently executed
The DLL/SYS file used was attached to a link; driver name => iMonLOPE1021
p.s: There has been no official update for a year, is there an update schedule?
https://drive.google.com/file/d/1YtblZG ... sp=sharing
Please try giving "Everyone" NTFS read&execute rights to the hook dll, just as a quick test.
Vista ~ Windows 10 works well. ( both of x86 and x64 )
below these options which i use
isInjectToSystemProcesses = true
ispermanent = false
isinjectometroapps = true
isuseIATPatching = false
isSystemWide = true
IncludeMask = *
ExcludeMask = GetModuleList-x64.exe|iMonLope_SVC.exe|*\windows\incops3\ictray64.exe|iMonLope_UI-DBG.exe|*\windows\incops3\icdi.exe|*\windows\incops3\icdcmgr64.exe|*\windows\incops3\incops3.exe|iMonTerminator.exe|*\windows\incops3\icdi64.exe|GetActiveXInfos-x64.exe|*\windows\incops3\icdcmgr.exe|*\windows\incops3\ictray.exe|xcacls.exe|iMonInjector-x86.exe|iMonLope_UI.exe|iMonInjector-x64.exe|*\windows\incops3\ictrigger64.exe|*\windows\incops3\ictrigger.exe|*\windows\incops3\esshmwow.exe|*\windows\incops3\incops364.exe|*\windows\incops3\icview.exe|
I had some time today to run the XP test with MCH system-wide injection and everything worked as expected here. I used the exact same OS version, madCollection beta version as well as MSVC version (2015 Community Edition). Already running processes were properly injected and any newly created processes were also injected just fine for me. I ran the following series of tests:
 Regular injection (no approval callback)
 IAT injection (no approval callback)
 Regular injection + Approval callback
 IAT injection + Approval callback
Can you please upload and link us to a complete vcproj that you've created?