Re: Additional- Anyone seen this before?

From: Sergey Latkin (slatkinat_private)
Date: Wed Jul 03 2002 - 11:23:47 PDT

  • Next message: Michael B. Morell: "Closed thread- Anyone seen this before?"

    MS_WebcheckMonitor is a hidden window, run by explorer's thread and handled 
    by webcheck.dll - active channel client. It's standard dll in all windows 
    systems with IE4+ installed.
    
    On 3 July 2002 12:30, Michael  B. Morell wrote:
    > A quick ps of the running apps showed....
    >
    > HWND    PID     PRIO    UTime           KTime           NAME
    > 4f0146  1256    NORM    00:00:00        00:00:00
    > C:\WINNT\System32\cmd.exe - ps
    > 3007e   1104    NORM    00:00:00        00:00:02        Power Meter
    > 40092   1104    NORM    00:00:00        00:00:02        Connections Tray
    > 4009a   1104    NORM    00:00:00        00:00:02        MS_WebcheckMonitor
    > 300ac   1104    NORM    00:00:00        00:00:02        Address
    > 5003a   1104    NORM    00:00:00        00:00:02        DDE Server Window
    > 5c010a  1676    NORM    00:00:12        00:00:28        Registry Editor
    > 3008a   1104    NORM    00:00:00        00:00:02        Program Manager
    
    [snip]
    
    > I'm not versed on what MS_WebcheckMonitor is and neither was M$ KB, sec
    > focus, or google.  I was only able to find
    > vague references to it.  So if anyone has knoweldge of what it is, that
    > would be great also.  I have a feeling that the 2 might
    > be linked.
    >
    
    -- 
    Sergey Latkin
    Chief Technology Officer
    Pinnacle Health Group
    1-(800)-492-7771
    slatkinat_private
    http://www.phg.com
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Jul 03 2002 - 12:04:30 PDT