Ptsnoop - what should I do about it?

erb

When I use ctl+alt+dlt to to see the progams running on my computer there is one called Ptsnoop. I am using Windows 98SE and dial up modem.

I have done a search for this to get information but this is conflicting. Some people say it is used by dial up modems, that I use, and others say it is a trojan. I think it has been there for some time but have not been aware of any problems.

I have scanned with AVG and no viruses were found. I use ZoneAlarm firewall and have no alerts about this.

Does any body know what I should about it if anything?

Noobie_2

Ha, I'm getting the same info as you - some sites list as used by a dial-up modem, some as a virus. Seems to date back to 2002 so guess someone on here will have come across it before.

Noobie_2

Seems there's also a legit (??) program with the same or very similar name written by a Karen Kenworthy which enables you to monitor what's going on, on your pc. (karenware.com/powertools/ptsnoop.asp)

Pest Patrol list a virus by the same name going back to something like October 1999 - so quite likely someone will have heard of it before.

backflip

One way of checking would be to go to Run (start button) type msconfig, go to the startup tab and see what runs when you start. If you see ptsnoop you could untick and reboot to find out what happens. If your modem won't connect then go back and re-tick ptsnoop. At least you'd know if it was your modem using it.

Toxteth_OGrady

Alternatively search for the ptsnoop file on your C: drive. Have a look which folder it's in to see if its kosher. i.e. if it's in something like C:/Program Files/modem maker's name it's likely to be harmless.

You could then cut and paste it to floppy disk to archive it off your system (noting where you removed it from). Then run your system as normal to check that everything works OK without it.

If it doesn't, e.g. your modem stops working just copy it back to its original location.

8)

TOG

erb

Sorry I have not been back earlier but been a bit busy last few days.

backflip  - did as you suggested and tried connecting without Ptsnoop.  It did connect to sites OK but I did not get a dialling tone or the beeps when the number was dialled.  Tried again with Ptsnoop working and got the usual dialling tone and beeps when the number was rang.  Indicated Ptsnoop impacts the modem in some way.

Toxteth_OGrady - did the search you suggested.  Ptsnoop was found in 2 folders

C:\WINDOWS     Application

C:\WINDOWS\CABS   Ex_File
both of these had a date of 9-3-99 which was about 7 months before I bought the computer so suggest it came with the computer.

Also, found in 2 Temp Internet Files dated 1-12-04 but these probably relate to when I was searching for information onPtsnoop.

What do you make of these results?

£$&*"($£&(

I have ptsnoop on my seldom used PC. I wondered what it was and everything suggested it was to do with the modem and removing it caused the modem to not work properly. I seem to remember doing other checks and it was definately a modem thing in my case. The file was on the drivers disk for the motherboard which included the modem I think.

Toxteth_OGrady

PTSNOOP.EXE is a TSR used by your modem. However, that particular TSR can be a pain in the *ss, resource wise. If your modem is ancient, like a 28.8, consider replacing it.

PTSNOOP.EXE is a program that comes with the set of drivers for modems based on the PC-Tel chipset. These can include the HSP Micro-Modems as well as a few others. It's a PCTel driver loader for programs that request a Comm Port

These modems use your system processor rather than a dedicated chip on the modem card, an architecture known as host signal processing (HSP). When an application requests the COM port,ptsnoop.exe loads the rest of the software for your modem.

Some users have reported that ptsnoop.exe loads anyway, even though they do not have HSP modems.

If you don't have an HSP modem, you can safely delete ptsnoop.exe.

TSR stands for Terminate Stay Resident. These are small programs that like to just hang out in your system memory. They can actually slow your sytem down. I recommend disabling the ones that are NOT critical to system operation.

If your system still connects OK without it, delete the .exe like I said by archving to floppy.

If you then have a problem, restore it or better still buy a new modem.

8)

TOG