Security Incidents mailing list archives

Re: Additional- Anyone seen this before?


From: Sergey Latkin <slatkin () phg com>
Date: Wed, 3 Jul 2002 14:23:47 -0400

MS_WebcheckMonitor is a hidden window, run by explorer's thread and handled 
by webcheck.dll - active channel client. It's standard dll in all windows 
systems with IE4+ installed.

On 3 July 2002 12:30, Michael  B. Morell wrote:
A quick ps of the running apps showed....

HWND    PID     PRIO    UTime           KTime           NAME
4f0146  1256    NORM    00:00:00        00:00:00
C:\WINNT\System32\cmd.exe - ps
3007e   1104    NORM    00:00:00        00:00:02        Power Meter
40092   1104    NORM    00:00:00        00:00:02        Connections Tray
4009a   1104    NORM    00:00:00        00:00:02        MS_WebcheckMonitor
300ac   1104    NORM    00:00:00        00:00:02        Address
5003a   1104    NORM    00:00:00        00:00:02        DDE Server Window
5c010a  1676    NORM    00:00:12        00:00:28        Registry Editor
3008a   1104    NORM    00:00:00        00:00:02        Program Manager

[snip]

I'm not versed on what MS_WebcheckMonitor is and neither was M$ KB, sec
focus, or google.  I was only able to find
vague references to it.  So if anyone has knoweldge of what it is, that
would be great also.  I have a feeling that the 2 might
be linked.


-- 
Sergey Latkin
Chief Technology Officer
Pinnacle Health Group
1-(800)-492-7771
slatkin () phg com
http://www.phg.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: