Security Incidents mailing list archives
Re: Additional- Anyone seen this before?
From: Sergey Latkin <slatkin () phg com>
Date: Wed, 3 Jul 2002 14:23:47 -0400
MS_WebcheckMonitor is a hidden window, run by explorer's thread and handled by webcheck.dll - active channel client. It's standard dll in all windows systems with IE4+ installed. On 3 July 2002 12:30, Michael B. Morell wrote:
A quick ps of the running apps showed.... HWND PID PRIO UTime KTime NAME 4f0146 1256 NORM 00:00:00 00:00:00 C:\WINNT\System32\cmd.exe - ps 3007e 1104 NORM 00:00:00 00:00:02 Power Meter 40092 1104 NORM 00:00:00 00:00:02 Connections Tray 4009a 1104 NORM 00:00:00 00:00:02 MS_WebcheckMonitor 300ac 1104 NORM 00:00:00 00:00:02 Address 5003a 1104 NORM 00:00:00 00:00:02 DDE Server Window 5c010a 1676 NORM 00:00:12 00:00:28 Registry Editor 3008a 1104 NORM 00:00:00 00:00:02 Program Manager
[snip]
I'm not versed on what MS_WebcheckMonitor is and neither was M$ KB, sec focus, or google. I was only able to find vague references to it. So if anyone has knoweldge of what it is, that would be great also. I have a feeling that the 2 might be linked.
-- Sergey Latkin Chief Technology Officer Pinnacle Health Group 1-(800)-492-7771 slatkin () phg com http://www.phg.com ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- Additional- Anyone seen this before? Michael B. Morell (Jul 03)
- Re: Additional- Anyone seen this before? Sergey Latkin (Jul 03)