One of my managers left his PC unattended over the weekend and later discovered that his browser had been hijacked. Here’s what I’ve done so far, I downloaded the latest updates for ADAWARE and ran it (3 times). I rebooted the PC into safe mode and ran ADAWARE. I searched the C: drive for any .exe files created during the weekend date and deleted those. I went into the HKLM, current version, Run and deleted all .exe’s that I did not recognize. I also went into the Internet Explorer, Main and deleted the entries that was being defaulted. I went into the HKCU and deleted what I could find of the hijacking pgms, I deleted all undesired websites from the Favorite folders of all profiles (porn sites keep reappearing). Where else should I go to ferret out the hijacking programs? I would hate to have to re-format the drive. Will the approach be different depending on what software is doing the hijacking? Thanks in advance.