<blockquote>Locking duplicate thread.<br> Please continue here: [/questions/821032]</blockquote><br> A user on my workstation uses Firefox and has visited a site that installed "Win 7 Internet Security 2011" on this machine. I successfully identified and removed the Trojan virus software. The browsers where neutralized by this virus and are inoperable. I created a new user account for this person. This user has been reinfected with the new account. I want to find out where this user has been to identify where this Trojan virus is coming from. The only way I know how to do this is by reviewing the history log file to see where this person has been. I want to review the history location as the administror of the machine; not use the infected user account. If there is a better way to do this outside of the infected user account, I am open to suggestions. Thank you for your assistance.