ranchhand
Nov 19 2002, 06:08 PM
I'm running WIN98 on an old computer I use just for lowband internet access. An item called "PTSnoop" is being loaded into my active memory, it is a 32 K file found in C:Windows directory. It has the little yellow telephone icon common to Windows. PCCILLIN does not tag it as a virus.
I removed it from the Register startup, and from Windows Explore startup, but it's back. Before I delete it from Windows, thought l would check. Also, my internet access has been running unusually slow even though I'm logged in at 54,333 (56K modem).
Anyone heard of it?
HKEd
Nov 19 2002, 06:32 PM
Hello ranchhand...ptsnoop has an unfortunate name (and there is also a trojan out there with the same name, but it's been around for a while). It's a file that looks for available COM ports for (mainly) an internal modem. If PC-Cillin didn't flag it, it should be fine and should be left in the startup group.
moon
Nov 19 2002, 06:33 PM
It could be assosiated with your modem, but there is also a back door trojan of the same name.
jimholly
Nov 20 2002, 06:01 AM
A good read about the
PTSnoop Trojan.
ranchhand
Nov 20 2002, 11:31 AM
Thanks guys. I moved snoop to Recycle Bin, and now my internet access is back to normal immediately. When I get home from work I'll check the WIN.inin file to see if there are any alterations. I suspect it was not a trojan, but was just a pain.
Thanks again - Jim, that was a good read on Snoop!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.