Thread: MS_WebcheckMonitor

As most of you know, I'm mainly a UNIX person. However, I do use Windows on a daily basis. Earlier this afternoon, while playing around with Windows programming, I created a dialog box application that lists all* of the processes running on the system, much like TaskManager (*threads/processes that are "Untitled" are not listed by my program).

I noticed that the process list generated by my application listed more items than TaskManager. One process that really caught my eye was MS_WebcheckMonitor. I did a google search and found a handful of references to it, most of which are people wondering what it was. One link mentioned MS_WebcheckMonitor could be safely disabled by renaming WEBCHECK.DLL in safe mode (I renamed WEBCHECK.DLL about an hour ago and everything seems fine).

While glancing at the DLL in a hex editor, I noticed the strings:
"RCPT TO:<%s>\r\n"
"MAIL FROM:<%s>\r\n"
"HELO ActiveDesktop\r\n"

Has anyone had experience with this DLL or process. Does anyone have some insight as to what it is for? For those interested in seeing if it runs on their system, I have attached my simple process listing program.

[edit]
I'm using Win98SE, and yes: I know they are SMTP commands ;)
[/edit]

while i can't remeber exactly what its for, it's not harmful and is part of IE, i think is error checking or something...

Is it something to do with this in XP

http://www.theregus.com/content/4/24611.html

you know, on account of recent developments such as this it wouldn't surprise me at all...

Here it says this.

Windows 98/IE?: MS_WebcheckMonitor? It has something to do with sync. but what's this (captions from webcheck.dll):
"DATA 354 RCPT TO:<%s> MAIL FROM:<%s> HELO ActiveDesktop" and "User-Agent: MSIECrawler"..
The Windows 98 Resource Kit / Microsoft File Information states that Webcheck.dll is "Windows 98 web site monitor dynamic link library file."

and Here it says this...

The Windows 98 research gave me another keyword to search for in the Microsoft Knowledge Base - webcheck. Searching for "webcheck.dll" returned nothing useful. However, searching for "webcheck" returned item Q176960 <http://support.microsoft.com/support...-US&SD=gn&FR=0>, Description of the Loadwc.exe File in Internet Explorer (last reviewed July 25, 2000). The item says it handles subscriptions and also "propagates settings for user profiles". Oh.
November 27, 2000. A reader of this site named Dirk provided some information about webcheck. He said:
I believe Microsoft's IIS Resource Kit contains some source code for an 'unsupported' utility called Webcheck. Webcheck is a VB program that checks whether a web site is available or not. I presume that the code for checking a site is contained in the webcheck.dll file and is probably called by loadwc.exe. Why MS has included this in IE is beyond me.
I checked the Microsoft Press book "Internet Information Server Resource Kit" which describes v4 of IIS. There is one sentence in the book on page 484 about webcheck. It says: "WebCheck monitors server activity and can send e-mail notification messages or log alerts to a database". Is it the same webcheck? Beats me.

Thanks, Rob. Maybe I can stop wearing this tinfoil hat after all ;)

keep the hat man, seriously.(haha)