Ptsnoop Virus
Results 1 to 4 of 4

Thread: Ptsnoop Virus

  1. #1
    Banned
    Join Date
    Aug 2002
    Posts
    33

    Ptsnoop Virus

    Have a pc at my business that has ptsnoop.exe running on it. I have read that it is a backdoor virus. I have followed the instructions to remove it from Trend Micro (it is supposedly in win.inf) but I don't see it there. If it hit ctrl+alt+dlt, it is running.

    Anybody know anything about this virus and how to get rid of it? THANKS...

  2. #2
    Banned
    Join Date
    Aug 2002
    Posts
    33

    Ptsnoop Virus

    Have a pc at my business that has ptsnoop.exe running on it. I have read that it is a backdoor virus. I have followed the instructions to remove it from Trend Micro (it is supposedly in win.inf) but I don't see it there. If it hit ctrl+alt+dlt, it is running.

    Anybody know anything about this virus and how to get rid of it? THANKS...

  3. #3
    Senior Member
    Join Date
    Apr 2002
    Posts
    634
    According to the Sophos antivirus site:

    Troj/Ptsnoop is a backdoor Trojan. It copies itself to \windows\system\ptsnoop.exe and changes win.ini adding 'c:\windows\system\ptsnoop.exe' to 'load = '.
    You'll only have to:
    1- stop the virus in memory. Do ctrl+alt+del, select it, and put the "end task" (or something like that, I use French version) button.
    2- delete the "ptsnoop.exe" file in your system.
    3- remove the line added by the virus in your Win.ini file.
    4- reboot to verify and think to update your virus definition.

    Voilą.
    Life is boring. Play NetHack... --more--

  4. #4
    Senior Member
    Join Date
    Apr 2002
    Posts
    634
    According to the Sophos antivirus site:

    Troj/Ptsnoop is a backdoor Trojan. It copies itself to \windows\system\ptsnoop.exe and changes win.ini adding 'c:\windows\system\ptsnoop.exe' to 'load = '.
    You'll only have to:
    1- stop the virus in memory. Do ctrl+alt+del, select it, and put the "end task" (or something like that, I use French version) button.
    2- delete the "ptsnoop.exe" file in your system.
    3- remove the line added by the virus in your Win.ini file.
    4- reboot to verify and think to update your virus definition.

    Voilą.
    Life is boring. Play NetHack... --more--

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •