Thanks for the reply
Didn't know IE7 was better currently, but I don't really trust IE.
Anyways, I've scanned his computer, I've re-scanned, I've gone through half of the files manually, I've spent an entire night going through the registry for the most common stuff I know. I know he doesn't use P2P software, I'd be aware of it, there would be a massive bandwitdh drop
I've just un-installed a whole bunch of programs, it was clean for a whole 15mins, and we went to eat dinner, I came back, there was some 20+ popups plastered all over the desktop. I'm seriously considering blocking port 80.
Edit:
Infection spreads faster then I can delete stuff. O.o
I was deleting some files, and as I was looking up file names on google, I noticed the process list slowly grow smaller, process after process shutting itself down, first went explorer (doesn't it always?), then went all the internet protocol services, then went the rest and the computer crashed. I managed to boot back into Safe Mode, but it's screwing up even more badly then booting up into standard Windows. I've never had this happen to a computer. Think I need to reformat it (again)