1. Disable System Restore (Windows Me/XP).

2. Update the virus definitions.

3.Backup your system registry.

4.Restart your system in safe mode.
5. Run a full system scan.

6. Delete these values added to theregistry.



NB: Use this Symantec

Tool to reset shell\open\command registry keys if regedit (Registry editor)
is not accessible .


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"ICQSniffer"="%ProgramFiles%\IcqSniffer\IcqSniffer.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQSnifferv1.2EvaluationVersion\"DisplayName"="ICQSnifferv1.2EvaluationVersion"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQSnifferv1.2EvaluationVersion\"UninstallString"="C:\PROGRA~1\ICQSNI~1\UNWISE.EXEC:\PROGRA~1\ICQSNI~1\INSTALL.LOG"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQSnifferv1.2EvaluationVersion\"DisplayVersion"="1.2"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQSnifferv1.2EvaluationVersion\"Publisher"="EffeTech"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQSnifferv1.2EvaluationVersion\"URLInfoAbout"="[http://]www.etherboss.com/i[REMOVED]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQSnifferv1.2EvaluationVersion\"Contact"="Harry"
HKEY_CURRENT_USER\Software\EffeTech
HKEY_CURRENT_USER\Software\EffeTech\ICQSniffer15-dayEvaluationVersion
HKEY_CURRENT_USER\Software\EffeTech\ICQSniffer15-dayEvaluationVersion\Config
HKEY_CURRENT_USER\Software\EffeTech\ICQSniffer15-dayEvaluationVersion\General
HKEY_CURRENT_USER\Software\EffeTech\ICQSniffer15-dayEvaluationVersion\Reg
HKEY_CURRENT_USER\Software\EffeTech\ICQSniffer15-dayEvaluationVersion\Settings
HKEY_CURRENT_USER\Software\EffeTech\ICQSniffer15-dayEvaluationVersion\Reg\SetupTime:0x00017CFE
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\StartMenu2\Programs\ICQSniffer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQSnifferv1.2EvaluationVersion