Don't actually add the PID to the list of monitored processes until we've verified cuckoomon has been loaded in it -- we'll need to handle races involving this later.  This will fix a CryptoWall 2.0 case where the created process is suspended, Cuckoo attempts an APC injection into the main thread of the process, but then the main thread is never actually executed as the malware creates a second suspended thread which it then resumes.  Cuckoo previously would never have attempted a second injection because it added the PID to the monitored list on the initial process creation.