ptsnoop

[nlday]

thanks ann marie. for now i'll leave it alone, but will look over the registry procedures. in feb. i'll be doing a full restore anyway...lots of fun reinstalling everything???! but it is a rewarding pastime. thanks for the link to we- compute...lots of fun reading there,and i put it on my fav. list.

just did a complete scan with ants ...Beginne mit Scanvorgang ...
~~~~~~~~~~~~~~~~~~~~~~~~~~~


C:\Program Files\Real\RealJukebox\realjbox.exe könnte ein Trojaner sein! (13)
=> Programm schreibt in Registry (Run, RunOnce usw.) oder greift auf INIs zu!
=> Programm erfragt das System-Verzeichnis!
=> Programm erfragt das Windows-Verzeichnis!
=> Programm nutzt die WinSock-Schnittstelle!
=> Programm belegt einen Port!
=> Programm beinhaltet die Zeichenkette "Server"!


C:\cpqs\Backweb\Program\backweb.exe könnte ein Trojaner sein! (13)
=> Programm schreibt in Registry (Run, RunOnce usw.) oder greift auf INIs zu!
=> Programm erfragt das System-Verzeichnis!
=> Programm erfragt das Windows-Verzeichnis!
=> Programm nutzt die WinSock-Schnittstelle!
=> Programm beinhaltet die Zeichenkette "Server"!
=> Programm baut DialUp-Verbindungen auf!

Report vom 12/3/01
ANTS Version 2.0 mit 1606 geladenen Signaturen.

Es wurde wahrscheinlich ein Trojaner gefunden in:
C:\Program Files\Real\RealJukebox\realjbox.exe

Es wurde wahrscheinlich ein Trojaner gefunden in:
C:\cpqs\Backweb\Program\backweb.exe


Helfen Sie uns - übermitteln Sie die Scanresultate!




~~~~~~~~~~~~~~~~
Benötigte Zeit: 1140 Sekunden
any thing to worry about? ?start a new thread? i can't find how to fix it if it needs to be fixed,wil keep looking

[This message has been edited by nlday (edited 12-03-2001).]

[This message has been edited by nlday (edited 12-03-2001).]

[AnnMarie]

Hi nlday - there is no problem. Ants is reporting that realjbox.exe and backweb.exe could be possible trojans however realjbox.exe is a valid plugin and backweb.exe is an updater normally loaded onto HP machines (and sometimes compaq) so unless you do not have RealJukeBox installed on your machine you have nothing to worry about.

[nlday]

thanks annmarie. trying to translate this german ...what a headache. here's a eng/german online dictionary i found http://dict.leo.org/

[AnnMarie]

Thanks very much - it will be very handy (I'm running Ants too). Have added it to my favorites folder. Auf Wiedersehen

[Styx]

PTSnoop is completely unnecessary. It is also not spy or malware. If you're running Win 98 FE or SE use the System Configuration Utility to shut it off. You may have to delete it from your registry and the above utility (more than once after a restart) in that order.

First clean out your Startup folder - Start; Programs; Startup. Right click each item in turn there and choose delete. I have only 'swtray' there, the joystick driver, and it has to be there. On most machines you don't want anything in that folder.

Check your available resources by right-clicking My Computer; clicking Properties; Click the Performance tab. Resources available are displayed as percent there at top. Check it when you get done running the System Configuration Utility mentioned below.

Clicking Start; Run; typing 'msconfig', without the quoatation marks, in the Run box and clicking OK; Then clicking the Startup tab; Uncheck anything you don't need running in the background. For reference on what's not needed running in the background in the System Configuration Utility view this website first and print out the list:
http://www2.whidbey.net/djdenham/Running_items.htm