Re: Additional- Anyone seen this before?

From: Sergey Latkin (slatkin@phg.com)
Date: 07/03/02 

From: Sergey Latkin <slatkin@phg.com>
To: "Michael  B. Morell" <MMorell@vdat.com>
Date: Wed, 3 Jul 2002 14:23:47 -0400

MS_WebcheckMonitor is a hidden window, run by explorer's thread and handled
by webcheck.dll - active channel client. It's standard dll in all windows
systems with IE4+ installed.

On 3 July 2002 12:30, Michael B. Morell wrote:
> A quick ps of the running apps showed....
>
> HWND PID PRIO UTime KTime NAME
> 4f0146 1256 NORM 00:00:00 00:00:00
> C:\WINNT\System32\cmd.exe - ps
> 3007e 1104 NORM 00:00:00 00:00:02 Power Meter
> 40092 1104 NORM 00:00:00 00:00:02 Connections Tray
> 4009a 1104 NORM 00:00:00 00:00:02 MS_WebcheckMonitor
> 300ac 1104 NORM 00:00:00 00:00:02 Address
> 5003a 1104 NORM 00:00:00 00:00:02 DDE Server Window
> 5c010a 1676 NORM 00:00:12 00:00:28 Registry Editor
> 3008a 1104 NORM 00:00:00 00:00:02 Program Manager

[snip]

> I'm not versed on what MS_WebcheckMonitor is and neither was M$ KB, sec
> focus, or google. I was only able to find
> vague references to it. So if anyone has knoweldge of what it is, that
> would be great also. I have a feeling that the 2 might
> be linked.
> 

-- 
Sergey Latkin
Chief Technology Officer
Pinnacle Health Group
1-(800)-492-7771
slatkin@phg.com
http://www.phg.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com