Security Incidents: Re: Additional- Anyone seen this before?

[Sergey Latkin <slatkin () phg com>]

MS_WebcheckMonitor is a hidden window, run by explorer's thread and handled 
by webcheck.dll - active channel client. It's standard dll in all windows 
systems with IE4+ installed.

On 3 July 2002 12:30, Michael  B. Morell wrote:
> A quick ps of the running apps showed....
>
> HWND    PID     PRIO    UTime           KTime           NAME
> 4f0146  1256    NORM    00:00:00        00:00:00
> C:\WINNT\System32\cmd.exe - ps
> 3007e   1104    NORM    00:00:00        00:00:02        Power Meter
> 40092   1104    NORM    00:00:00        00:00:02        Connections Tray
> 4009a   1104    NORM    00:00:00        00:00:02        MS_WebcheckMonitor
> 300ac   1104    NORM    00:00:00        00:00:02        Address
> 5003a   1104    NORM    00:00:00        00:00:02        DDE Server Window
> 5c010a  1676    NORM    00:00:12        00:00:28        Registry Editor
> 3008a   1104    NORM    00:00:00        00:00:02        Program Manager
[snip]

> I'm not versed on what MS_WebcheckMonitor is and neither was M$ KB, sec
> focus, or google.  I was only able to find
> vague references to it.  So if anyone has knoweldge of what it is, that
> would be great also.  I have a feeling that the 2 might
> be linked.
-- 
Sergey Latkin
Chief Technology Officer
Pinnacle Health Group
1-(800)-492-7771
slatkin () phg com
http://www.phg.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com