Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Well it took me some time but i finally figured out how to completly remove PTSnoop from the computer where it will never come back and here is how..... it is a bit of a pain to do but for most i think it is worth the hassel to be able to turn on your computer and not see PTSNOOP! and run screaming for the Format command LOL
1st) goto START then RUN and type in REGEDIT once the regedit window pops up goto EDIT then FIND and type in PTSNOOP and hit ENTER each item that the regedit finds with PTSNOOP in the text it will highlight then all you have to do is hit DELETE do this untill it says FINISHED SEARCHING THROUGH REGISTRY. (you can use F3 key after you search for the first one to continue searching instead of haveing to keep typing that aweful name PTSNOOP LOL)
2nd) goto START -->FIND/SEARCH -->and type in PTSNOOP.exe -->then hit ENTER delete all the files that is finds.
3RD)go back to step 2 and type in PCtelMDMCHIPV.INF this is the file that tells the computer to load the PTSNOOP file open this file in NOTEPAD and goto EDIT --> SEARCH --> and type in once again PTSNOOP and delete the entire line that has PTSNOOP in it there should be 2 or 3 depending on your computer.
4th) and finally sit back drink a cold one and be proud of yourself because you have just gotten rid of the most annoying file in the world! oh yeah dont forget to RESTART your machine ~

I believe PTSNOOP is valid file....it's on my 98 box with fresh install (after 0 write, fdisk, format), valid 98 disk, not on net yet, no other apps installed....must be some other problem that made your ptsnoop act up.

I had it for years on one of my older machines,p3 450, even after formatting & a clean installs of win98se, it was still there....But mind you once I upgraded to a new machine, it's no longer with me, even though I'm running the very same win98se disk, strange.??
Maxx...

http://www.sophos.com/virusinfo/analyses/trojptsnoop.html
This site for business computers says it is a trojan, setup to self install and load itself at system start, in win.ini. I have it, too, as I recently put a new modem on my system and I believe it was there after that.
http://www.f-secure.com/v-descs/ptsnoop.shtmlThis site says it is not a trojan, but then goes on to explain that it really is a backdoor trojan. They recommend removing it. It tries to connect you to a website that is no longer active, and would allow that site to control your cursor and mouse. Nasty stuff. Where it came form, who knows? It is installed through some modem software.
HTH

I just searched for PTSNOOP and PTYSNOOP and PCtelMDMCHIPV.INF. I didn't find any files but did find entries for both snoops in current user / software / microsoft / windows / explorer. I have to think it's suspicious just from it's name.
This machine (old Compaq Prolinea) was freshly formatted and had a clean w98 install. The MSKB doesn't acknowledge them either. No info from google either. It's not referenced in SpyBot's search list.
I don't think it's from Microsoft but could be a tag along to a common driver but whenever i install an OS first thing i do is remove anything i know i don't want.

First of all I am assuming you mean ptsnoop.exe (it's good practice to ensure that you are setup to display full file names).
In which case it can be a trojan or it can be a modem file:
http://www.computing.net/windows95/wwwboard/forum/140152.htmlYou need to determine which - never go just by the sound of a name or the look of an icon.
Derek

Ptsnoop comes with modems using the pctel 789 chipset (and maybe others). If that's the type of modem you're using then that file is supposed to be there, although I think the modem works OK without it.
I don't think deleting the pctel inf file as Jeremy suggests will have an affect since the modem is already installed. You can delete the registry reference by running regedit and going to:
Hkey_local_machine
software
microsoft
windows
currentversion
run

Yeah, I have a CMR modem that came with my mobo, and it's since installing it that I've noticed this in my running programs. I don't know if it's needed, either. As noted, Spybot doesn't see it nor does my AVG program say anything about it. According to the f-secure site above, it tries to send you to a website that is no longer active. That's probably a good thing. It doesn't seem to be causing any problems, so it's probably ok to just ignore it. At least, that's what I'm going to do for now.

I have done everything it said to so and im still having a problem with it. its not there when i boot my system but when i check mscongig startup its there and checked also countryselection do not know what this is. please help tell me what im doing wrong.
thankyou
dixigirl

Do you have a modem with the pctel 789 chipset? You may need to open the case and look at the modem.
If you do, then don't worry about those files. They're perfectly OK. They're not causing any problems with your computer.
If you don't have a modem with the 789 chipset then perhaps you once had one and the drivers weren't removed when a new modem was installed. Go to add/remove programs in control panel and look for an HSP modem. That's probably the old modem. Uninstall it. If it turns out the HSP modem is your current modem, you'll need to reinstall the drivers.
'Countryselection' accompanies the modem ptsnoop. The fact it's also loading means you have the modem ptsnoop and not the virus ptsnoop.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |