There is an ad-ware worm on my windows 7 PC that I am trying to get rid of. McAfee has been largely unsuccessful. I can see the malicious .exe created under the C:\ProgramData\ folder that is causing the abnormal behaviour: hyper-links on browser when clicked opens a new window with ads.
I deleted the malicious .exefile to stop the behaviour but this only helps temporarily as the .exe is re-created and ran as a background process.
How can I get to the root of this problem, i.e. find the program that generates this .exe and remove it. Is it possible to trace the generation of .exe files or folders in the ProgramData folder on Windows 7?