Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I have an adsl connection open most of the day (listening to web radio). Every now and then my mouse suddenly starts moving on its own accord - usually it moves quite fast in a dead straight line from where it is, straight to the right hand side of the desktop. Am I being hacked? is it anything to do with PTSnoop?

I don't think I have a PCTell modem - I use an Acatel Speedtouch USB ADSL modem. I found the following site (www.europe.f-secure.com/v-descs/ptsnoop.shtml)through google - "Ptsnoop is a simple backdoor program written in Visual Basic.... when the connection succeeds, the backdoor clips cursor to a certain area and allows a hacker or script on these websites to control mouse movement and window positions".

Yep. I've seen that. It's been on the net for a long time. If you take a look at all the rest of the links when you do a search at google you will see that site is one of the the only ones that claims PTSnoop is a trojan.
If you have a look in device manager:
Start>>settings>>control panel>>system>>device manager tab.What is listed under modems? PCtel makes chipsets for a lot of modem companies...
Also... do a search on your hard drive for PTSnoop.exe. When found, right click and go to properties. Take a look around it's properties. Who made it?

You're right! Just found another modem (not in use - must have come with the pc) which is supplied by PCtel. Now that just leaves the mysterious poltegeist taking over control of my mouse.. :)

have you ran a virus scan on your computer? if you have not, you could have the Back Orfice, Sub7, or Netbus server client on your machine. if you do have one of these programs on your computer, disconnect from the internet and use a virus cleaner on your computer. it should remove /clean the infected files. if it does not, such as with the netbus server, you have 2 choices, you can download a program desined to remove the programs, or you can manually delete them from the dos prompt (must be in real-mode DOS to delete manually) the netbus server program is usually called "patch.exe" and it could be anywhere on your hard drive. If you do have the latest version of AV software installed on your computer, and you have firewall protection, but you still have problems with your mouse, I would contact the product manufacturer, or microsoft to get the problem resolved.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |