Not likely at all if he deleted everything, cleared temp files, and the cache, etc. At most, you could get some low-level software to analyze the HDD directly to find what files have been "deleted" by Windows. But it's EXTREMELY unlikely this will work given the fact of, You have no idea when he removed all these files, and how many files have been created/moved/deleted etc.(which overwrites those previously "deleted" files.) Try this; C:\Documents and Settings\username\Local Settings; copy and past the previous(minus the ;'s)into Explorer, Internet Explorer, My Computer, or whatever, and replace username with whatever username you use. Check the dirs listed in there. You might be able to turn up some clues as to where he's been. James P. Grant III
A+ Certified Technician
A+ Certified Technician