Computing.Net > Forums > Windows Me > What Is PTSNOOP In My MSCONFIG?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

What Is PTSNOOP In My MSCONFIG?

Reply to Message Icon

Name: Bruce
Date: December 1, 2001 at 15:19:50 Pacific
Comment:

I was going through my settings in MSCONFIG and noticed 'PTSNOOP' was starting up. Does anyone know what this is?
Thanks,
Bruce



Sponsored Link
Ads by Google

Response Number 1
Name: ShutMeUpOrDown:)
Date: December 1, 2001 at 15:33:32 Pacific
Reply:

Bruce, do you have a compaq PC? Or a PCtel modem?


0

Response Number 2
Name: Alvaro Martín Gómez
Date: December 1, 2001 at 15:34:40 Pacific
Reply:

Hi. Go here:

http://www.driverforum.com/other/12398.html

Hope this helps.


0

Response Number 3
Name: ShutMeUpOrDown:)
Date: December 1, 2001 at 15:35:26 Pacific
Reply:

Newgrl posted this a while back:
PTSNOOP is part of your modem software. Usually associated with PCTell chipset winmodems.
PCTel FAQ

What is PTSnoop?

The PTSnoop program is used by the modem to interface with your computer.

The program is not actually "snooping", but is interfacing with your computer to allow the modem to function. It is also used to support modem voice functionality, if your particular modem supports that feature.

PTSnoop is not a malicious program and is not gathering any data about you. You can remove the PTSnoop application, but every time you reboot your computer it will reinstall itself.


More:
Another answer to what PTsnoop is.

PTSNOOP is a token program that waits for a program to request the COM port to be opened. Then it makes sure that the modem drivers get loaded if they are not.

PTSNOOP can be found with several different modems, such as the MICOM HSP PCTEL and EPS Technology COMM WAVE PCMCIA modems. It is not mandatory for proper operation, and the manufacturers list removal of PTSNOOP in various steps of their troubleshooting procedures.


0

Response Number 4
Name: jimi_l
Date: December 1, 2001 at 15:38:49 Pacific
Reply:

It is also used by many AGP video cards.It has somthing to do with a memory sharing thing.
Jimi_l


0

Response Number 5
Name: Jeremy II
Date: December 1, 2001 at 15:51:26 Pacific
Reply:

There is also a ptsnoop virus, but don't get worried, it could be either one. Check it out, hopefully it's the modem thing


0

Related Posts

See More



Response Number 6
Name: Jeremy II
Date: December 1, 2001 at 15:57:39 Pacific
Reply:

Oops, there is some more info here, I didn't realize that adding a link adds it where no one woill notice it. However, maybe it is NOT a virus, it's confusing. Do a scan and if it doesn't show up, I guess it's not :)

http://www.europe.f-secure.com/v-descs/ptsnoop.shtml

http://www.driverforum.com/other/12398.html


0

Response Number 7
Name: Al
Date: December 1, 2001 at 18:26:35 Pacific
Reply:

Relax, PTSNOOP is NOT a Virus and never has been.


0

Response Number 8
Name: Jeremy II
Date: December 1, 2001 at 20:59:01 Pacific
Reply:

Well that's the so called virus experts for ya, rather sound alarms than spend 5 minutes hacking it up to see what it does


0

Response Number 9
Name: newgrl
Date: December 2, 2001 at 10:26:40 Pacific
Reply:

If they just would have named their executable something else, it most likely wouldn't bother anyone... but PTSnoop.exe does sound suspicious. I would have worried about it if I had seen it in my startup group.

How about something a little more mundane... like PTmodem.exe... or something to that effect?


0

Response Number 10
Name: Nicholas Maietta
Date: December 31, 2001 at 14:11:42 Pacific
Reply:

I agree with "newgrl" on Dec 2 entry, as she said "How about something a little more mundane... like PTmodem.exe... or something to that effect?"... that's about it.


0

Response Number 11
Name: Phil Colbourn
Date: January 2, 2002 at 02:03:47 Pacific
Reply:

so if ptsnoop.exe started to establish a connection over ppp whould you be worried?

unfortunately, I didn't take notes about where it was connecting to and on what port.


0

Response Number 12
Name: rick
Date: January 5, 2002 at 08:29:03 Pacific
Reply:

I have this program in my Registry too - and had read that it could be necessary for a modem. BUT, there are plenty of sites around that say Ptsnoop can also be a malicious trojan. How can I find out its real nature (have done a virus scan etc)?


0

Response Number 13
Name: Gerry Maddock
Date: January 7, 2002 at 07:33:03 Pacific
Reply:

EVERYONE WHO HAS ANSWERED YOU IS DEAD WRONG AND SHOULD NOT GIVE ADVICE UNLESS THEY ARE 100% SURE. PTSNOOP is NOT a virus, but a backdoor program. A backdoor program gives outsiders access to your computer via the internet. THIS IS NOT A MODEM PROGRAM. USE COMMON SENSE PEOPLE! No one would name a file "SNOOP"! Read the following article for removal instructions:
http://www.europe.f-secure.com/v-descs/ptsnoop.shtml


0

Response Number 14
Name: Gerry Maddock
Date: January 7, 2002 at 07:50:16 Pacific
Reply:

OK, I was wrong, some modems do install this program. But rather than asking someone on this list, I suggest you contact the company who sold you your computer and/or modem and ask them.


0

Response Number 15
Name: Benjamin Kendrick
Date: January 10, 2002 at 21:59:04 Pacific
Reply:

If i'm using cable internet, is the ptsnoop program even really necessay? I want to try and free up some resources by closing programs runnung in the background.


0

Response Number 16
Name: Dean Gartley
Date: January 16, 2002 at 11:32:50 Pacific
Reply:

The f-secure site mentioned above gives a useful test - copy and open your win.ini file using e.g. notepad, look for the "load=" line below the ptsnoop. This is where a visual basic virus that uses the ptsnoop will have it's sites defined. Remove the text after the =.
My line was blank after the =, and my PC has never tried to connect to a site on its own.


0

Response Number 17
Name: sreeni reddy
Date: January 19, 2002 at 18:56:58 Pacific
Reply:

i have seen this ptsnoop.exe on many computers throughout my experience it has never bothered me before ntil today. this was mainly because i saw the ptsnoop in starting up from the Run key in the registry and deleted the entry, but a few days later wen i pressed CTRL-ALT-DEL i saw that it was running and wen i checked the regisstry i saw that it had come back, so i checked on the interent and see that some ppl think its a trojan and some ppl think its a modem program. As far as i can tell the one on my pc is not the virus or trojan but sumthing , it has also never tried to connect to the internet since i run firewall software on my pc which alerts me if any program which has not been given permission tries to connect to the internet, any program that tries to connect or has permission is logged and ptsnoop has never tried, so i dont know wat it is but its not a virus or trojan( this does not mean that the one on your pc isnt so check it out)

ps the firewall im running is zonealarm it is free for single users


0

Response Number 18
Name: Kyne
Date: January 21, 2002 at 14:55:50 Pacific
Reply:

Just rename the executable if it worries you. Change the extention or something. As far as I know, this program should never make a TCP/IP connection in or out.


0

Response Number 19
Name: Whocares
Date: January 27, 2002 at 10:57:51 Pacific
Reply:

Wow people...

Everybody is an expert!!!
Some say it's nothing without a doubt, some say it's a virus or backdoor without a doubt, hell one guy said "DON'T SAY ANYTHING UNLESS YOU KNOW..IT IS A VIRUS (because of the name)" then he posted again to say "I'M not sure!" another person said if you’re so worried take your computer to a repair tech. (he must not have realized that this was a computing tech support message board).

Well...I had the same question. What the hell is this ptsnoop? And after reading all the posts here I think I am actually dumber than I was before I came here.

Just remember...those who are quick to answer that which they do not know, often times end up with their foot squarely in their mouth!


0

Response Number 20
Name: TJ
Date: January 29, 2002 at 22:41:26 Pacific
Reply:

I just did a fresh install of a PC. Ptsnoop is an exe file for the PC-Tel modem I have installed. It came up after I installed the drivers off Microsofts update page. I personaly don't know what it does but if it doesn't need to be run then I won't bother with it.

Also from what I have seen PTsnoop is also a Trojan. So people here are both right. Here is the info I found on the Trojan...

"This non-destructive backdoor program is created in Visual Basic 5.0. It uses the Visual Basic WebBrowser Control to download pages from the Internet.

It appears as a PCTEL modem driver program PTSNOOP.exe."

Always do your reseach before posting smart remarks on others. It only makes you look like the idiot.


0

Response Number 21
Name: Sacha
Date: January 31, 2002 at 12:10:24 Pacific
Reply:

[windows]
;rem TShoot: load=ptsnoop.exe
;rem TShoot: run=
NullPort=None
load=ptsnoop.exe
;rem TShoot: run=C:\WINDOWS\SYSTEM\cmmpu.exe
run=
device=Canon Bubble-Jet BJC-210,CAN800B,LPT1:

That is the only reference to ptsnoop.exe in my win.ini file... so it seems as if it has to do with my printer...


0

Response Number 22
Name: mateod
Date: February 3, 2002 at 01:56:54 Pacific
Reply:

my pctel modem driver uses the files
ptsnoop.exe and pctptt.exe, and both of these come up in the startup.
big deal.


0

Response Number 23
Name: betterthanyou
Date: February 4, 2002 at 16:29:59 Pacific
Reply:

Well...
The Properties - Version menu claims that the program is made by PCTel. So either they wrote it into the program to keep people from knowing (makes sense) or it's just what everyone here seems to think it is...
A modem related program


0

Response Number 24
Name: Marc Andrew Kramer
Date: February 5, 2002 at 12:09:44 Pacific
Reply:

I too have found the PTSnoop on my computer. I know for a fact it is not a virus on my system since I reformated my entire HD and the file kept resurfacing. I also happen to have an Archos jukebox that had problems transfering files through the USB port. I used msconfig to disable PTsnoop from loading on start-up. Not only has my computer performace not been harmed, but the USB transfers are improved.

Hope this helps.


0

Response Number 25
Name: Marcus Brodie
Date: February 6, 2002 at 17:19:40 Pacific
Reply:

I don't have a question about PTSNOOP, but thought I could throw something else out there. Does anyone know how to connect a printer, that's locally connected w/USB, on a network?



0

Response Number 26
Name: J P Todd
Date: February 7, 2002 at 22:11:49 Pacific
Reply:

Much like Sasha's response (Response #21), It's in my win.ini file, and it seems to have something to do with my printer:

[windows]
load=ptsnoop.exe
run=
NullPort=None
device=EPSON Stylus COLOR 740,EPIJNL20,EPUSB1:

Has anyone noticed problems with their computers, such as excessive crashes? Does this program hog a lot of memory as a TSR (terminate and stay resident)?


0

Response Number 27
Name: mateod
Date: February 8, 2002 at 14:13:19 Pacific
Reply:

I just renamed ptsnoop.exe to ptsnoop.xyz, no problems so far, and it doesn't load up on startup anymore. Modem still works...


0

Response Number 28
Name: adam
Date: February 13, 2002 at 11:02:27 Pacific
Reply:

right click on ptsnoop.exe and click on quick view it will open up a screen and all the information on PCTEL will be inside IF it is the modem program. im too busy to read all the resonses so if this has been stated already then sorry and disregard


0

Response Number 29
Name: luck91
Date: February 13, 2002 at 16:25:37 Pacific
Reply:

Tech Support Gurru tip of the day....rename all occurance's of ptsnoop.exe. Have problems...rename it back. No problems...then you don't need the files. This is one of the handiest troubleshooting tricks you will ever use. ALWAYS HAVE A BOOT DISK HANDY. If you know DOS...all is good.


0

Response Number 30
Name: Jefré Miles
Date: February 13, 2002 at 21:03:17 Pacific
Reply:

http://www.echelonwatch.org


0

Response Number 31
Name: Angelo Guidotti
Date: February 13, 2002 at 23:50:35 Pacific
Reply:

I was curious about ptsnoop on my computer so I deleted ptsnoop.exe and tried to sign on......my modem would not inneciate. Restored ptsnoop and batta bing batta boom I'm replying to this thread.


0

Response Number 32
Name: Bill
Date: February 16, 2002 at 17:05:57 Pacific
Reply:

Gotcha all beat. I have two "ptsnoop.exe's" running. One seems to be the PCTel driver (msinfo32 sez PCTel supplied it), and the other is Karen Kenworthy's Snoop, which is a neat and handy little utility I got from her site http://www.karenware.com/

There could be a virus out there, but I don't worry about it.


0

Response Number 33
Name: pcjabber
Date: February 18, 2002 at 06:46:14 Pacific
Reply:

JB Todd and Sasha:
Win.ini is the Windows Initialization file. This is the file that tells Windows what your settings are. Naturally, it would have your printer configuration in this file. Not to be ugly, but believe the well-respected people of this board. I've learned that and now I am pretty well respected on Computing.net.
PCjabber


0

Response Number 34
Name: mark
Date: February 18, 2002 at 08:13:52 Pacific
Reply:

I hate PTSNOOP.exe
All I know about it is as follows - -
Yesterday, for no apparent reason, my computer kept resetting its home page to a DISGUSTING website and its numerous related pop-ups. After hours of trying different things I noticed a new line in the startup process that read, 'load=ptsnoop.exe'
I unchecked that instruction and BINGO - my computer doesnt reset its homepage any more.
Then I noticed that i have 2 versions of ptsnoop.exe on my machine - i 'quickviewed' them and they seem to be 2 quite different files - - - so my conclusion is that one of them is the dreaded backdoor file.
This file has caused me 24hours of confusion and frustration - it's a b********d.


0

Response Number 35
Name: guru_eric
Date: February 18, 2002 at 19:52:40 Pacific
Reply:

The file "ptsnoop.exe" is a file used by PCTel modems. If you delete it, it can reinstall itself the next time you reboot.

For more info, visit Symantec's website www.sarc.com and do a search for ptsnoop.


0

Response Number 36
Name: Tahir
Date: February 19, 2002 at 12:10:35 Pacific
Reply:

Hello guys.
I just reinstal my modem driver. It has PcTel chip in it. But i cant find this ptsnoop.exe file and my modem doesnt work. Can any one tell me where to get this file from. I dont want any viruses.

Thanks


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Me Forum Home


Sponsored links

Ads by Google


Results for: What Is PTSNOOP In My MSCONFIG?

What is wrong with my computer? www.computing.net/answers/windows-me/what-is-wrong-with-my-computer/22913.html

What is Needed In System Startup? www.computing.net/answers/windows-me/what-is-needed-in-system-startup/38489.html

What is sps in start up? www.computing.net/answers/windows-me/what-is-sps-in-start-up/15173.html