I have found that a program called ptsnoop.exe is running in the background
every time I run windows. It is in my win.ini file in the WINDOWS section as
load=ptsnoop.exe.
Does anyone know what it is, why it is there and whether or not it is safe
to remove it from my win.ini file?
Thanks.
Richard
PTSNOOP.EXE is not an MS file.
A search at www.NorthernLight.com returned 60+ hits.
See one such hit at http://discussions.virtualdr.com/Forum1/HTML/006239.html
"ptsnoop.exe is a TSR used by your modem. Disabling it would be a bad Idea.
However, that particular TSR can be a pain (jem edit here), resource wise.
If your modem is ancient, like a 28.8, consider replacing it.
Ptsnoop.exe is a program that comes with the set of drivers for modems based on
the PC-Tel chipset.
These modems use your system processor rather than a dedicated chip on the
modem card,
an architecture known as host signal processing (HSP).
When an application requests the COM port,
ptsnoop.exe loads the rest of the software for your modem.
Some users have reported that ptsnoop.exe loads anyway, even though they do not
have HSP modems.
If you don't have an HSP modem, you can safely delete ptsnoop.exe.
Ptsnoop.exe is a support file for a modem driver:
Here is some more info:
http://www.driverforum.com/modem/7537.html"
A cursory review of NorthernLight hits indicates this file is a common target of trojans.
HTH,
Jack E Martinelli