Link to home
Start Free TrialLog in
Avatar of henrib
henrib

asked on

PTSNOOP AND PCTPTT

This is  irritating rather than important.

Ptsnoop.exe and Pctptt.exe have been on my PC since it was repaired, at least I never noticed them in the previous 3 years.  As far as I am concerned I do not need them (I'm on broadband), in fact I've renamed them both to .bxe to stop them running and there have been no adverse effects.  BUT under the registry key:

LOCALMACHINE/SOFTWARE/MICROSOFT/WINDOWS/CURRENTVERSION/RUN

there are 2 entries COUNTRY SELECTION  "pctptt.exe" and PTSNOOP "ptsnoop.exe", whether I let Norton SystemWorks delete these entries, which it sees correctly as invalid, or whether I delete through Regedit they both reappear after a reboot.

I guess there are some other entries hidden in the registry which are causing this but I don't want to be guessing in the registry, so can one of you techies please point me in the right direction?
Avatar of Pete Long
Pete Long
Flag of United Kingdom of Great Britain and Northern Ireland image

Hi henrib,
Using the Windows System Configuration Utility (startup)


Windows 98, ME, and XP have MSCONFIG

*****************
Windows 2000 doesn’t have msconfig but you can use it, if you...
Download the two files here
http://www2.whidbey.com/djdenham/Msconfig.htm
************

If annoying programs are popping up every time you boot into windows XP or log in, you can disable them with the System Configuration Utility.

Press START > RUN > type MSCONFIG to launch

When the application starts you will need to click the startup tab.

This lists all the applications that will start when you boot up or log in, you can simply untick the ones you don’t want to start and reboot (if a problem occurs you can simply re-tick it)

Most programs launch from the following registry Key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Once you are sure you no longer need the application you can launch REGEDIT and go and delete a programs value from this key (DON’T DELETE THE ENTIRE KEY!!!)

Any software that is listed as "Common Startup" is being launched from the startup folder (click START >PROGRAMS >STARTUP to view them.  You can delete the Icons from here  <by right clicking it and selecting delete> to stop it launching.) This only deletes the shortcut; it does not uninstall the application.

*****Links*****

XP http://support.microsoft.com/default.aspx?scid=kb;en-us;310560
98 http://support.microsoft.com/default.aspx?scid=kb;en-us;281965
ME http://support.microsoft.com/default.aspx?scid=kb;en-us;281995

*****Start up Software*****

Autorun Software Downloads
http://www.bykeyword.com/pages/autorun.html

Startup Control Panel
http://www.mlin.net/StartupCPL.shtml

PeteL
Avatar of henrib
henrib

ASKER

Hi Pete,

I'm running 98SE BTW.  Good, and rapid, info.   I'm (fairly) familiar with msconfig but it doesn't do the trick.  Whatever I do to remove these registry entries they reappear on the next boot.  Sure, because I've renamed the .exes the applications don't run but I'd be much happier if I knew what was recreating the registry entries.

I'll go and check out the link now.

Henrib
Avatar of henrib

ASKER

Just noticed the link to StartupCPL at the end of your message. I downloaded it within the last week and, I'm afraid it can't sort it either
From the following web page, I downloaded the Startup Programs database (in html format) that is referenced there, and found this info on your two programs:'

pctptt
Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required

ptsnoop
These descriptions I've come across - all valid as far as I can see :-
(1) Program installed with some modems that monitors the COM ports for the modem driver. Not required from what I've read - may need a registry edit to get rid of it
(2) Backdoor trojan virus that copies itself as PTSNOOP.EXE -see here for more info
(3) Apparently the people who put it out claim it's a driver for a Voice modems (don't know who they are though - Ed)
Note: If using AOL and you disable this you may lose your connection or lock up
(4) Can also be an older Logitech scanner program. Remove from the Win.ini tab under Load='path'PTSNOOP and the System.ini tab under drivers='path'ptrtkr.drb. Can cause parallel port conflicts big time dragging system resources way down when a conflict exists
(5) Allows audio monitoring of modem phone dialling tones and can be useful if you have connection problems
(6) Karen Kenworthy's Snooper - "logs the start and stop time of all programs run under Windows"

So I think both of these apply to your modem.  Have you tried removing your modem, if you use broadband instead?  Or have you tried disabling EVERYTHING under MSCONFIG?  There must be something running that keeps resurrecting those entries in your registry...


Avatar of henrib

ASKER

Thanks Lee but I found that info. this morning on http://www.windowsstartup.com/wso/index.php which was what convinced me that the 2 programs were related to the modem and so I had no need for them and have successfully run without them since.

I like the idea of disabling everything under MSCONFIG, I'll try it now.
ASKER CERTIFIED SOLUTION
Avatar of stevenlewis
stevenlewis

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Yup GO with Steves advice, just make sure you DISABLE it and not REMOVE it ,or it will reinstall it when it boots up

Pete
Avatar of henrib

ASKER

Lee,

O.K. Made sure the registry entries as above were not there, set msconfig so that NOTHING loaded - no config.sys, autoexec.bat, winstart.bat , system.ini or win.ini AND I unticked everything under the startup tab as well as unticking the load startup group box.  Rebooted, looked in the registry and both entries were back!!  Did it all again just to make sure.  Incidentally when you run msconfig after the reboot the entries for ptsnoop and pctptt have ticked themselves under the startup tab, that's why I did it twice just to make sure I wasn't cracking up.

Potentially useful clue.  It seems to me then whenever I reboot after deleting these entries I see the "Please wait while setup updates your config. files etc."  (The text message you see in DOS pre Windoze, not the Little Drummer Boy) which I don't see if I leave the reg. entries in place.  Could something be executing from the registry at this point?

Steven,

Yes, the modem is still installed and has been untouched since I got the PC.  I'll try your idea and come back.

Henrib
Didn't I suggest removing the modem in my comment?:

> Have you tried removing your modem, if you use broadband instead?
>>Didn't I suggest removing the modem in my comment?:

That probably my fault for the "Go with steves comment post"

But Im sure Steven will be gracious to post you some points, and if he misses this I will.

Pete
Avatar of henrib

ASKER

When I accepted Stevens answer I did type a post to go with it but obviously didn't press sumbit.  So:

Disabling the modem in device manager worked fine, the problems sorted and I'm a happy man.

I accepted Steven's answer rather than yours, Lee, because I thought you meant physically remove the modem and with hands the size of mine typing is the easier option; but in the spirit of the New Year and to avoid any bad feeling I'm quite happy for the points to be shared between the 2 of you.  I presume you can sort it out between you.

Henrib

Oh, well, now that I know you had a reason to award to steven instead of me, I am content to let steven have the points.  No need to take further action on this.  Thanx for coming back and explaining...

Lee
henrib, glad we were able to help!

Lee, please see here
https://www.experts-exchange.com/questions/20837622/For-Lee-Tutor.html
Steve
Hurrah! and a joyous New Year to you all

Pete