OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Sergey Latkin (slatkinphg.com)
Date: Wed Jul 03 2002 - 13:23:47 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    MS_WebcheckMonitor is a hidden window, run by explorer's thread and handled
    by webcheck.dll - active channel client. It's standard dll in all windows
    systems with IE4+ installed.

    On 3 July 2002 12:30, Michael B. Morell wrote:
    > A quick ps of the running apps showed....
    >
    > HWND PID PRIO UTime KTime NAME
    > 4f0146 1256 NORM 00:00:00 00:00:00
    > C:\WINNT\System32\cmd.exe - ps
    > 3007e 1104 NORM 00:00:00 00:00:02 Power Meter
    > 40092 1104 NORM 00:00:00 00:00:02 Connections Tray
    > 4009a 1104 NORM 00:00:00 00:00:02 MS_WebcheckMonitor
    > 300ac 1104 NORM 00:00:00 00:00:02 Address
    > 5003a 1104 NORM 00:00:00 00:00:02 DDE Server Window
    > 5c010a 1676 NORM 00:00:12 00:00:28 Registry Editor
    > 3008a 1104 NORM 00:00:00 00:00:02 Program Manager

    [snip]

    > I'm not versed on what MS_WebcheckMonitor is and neither was M$ KB, sec
    > focus, or google. I was only able to find
    > vague references to it. So if anyone has knoweldge of what it is, that
    > would be great also. I have a feeling that the 2 might
    > be linked.
    > 

    -- 
Sergey Latkin
Chief Technology Officer
Pinnacle Health Group
1-(800)-492-7771
slatkinphg.com
http://www.phg.com

    ----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com