Today I removed SweetIm.A- a web browser hijacker according to the web community. After the removal The Active Directory User Account used lost all of its mapped drives, its favorites in chrome,firefox, and IE11, and removed the Outlook Account attached to the user. I have two questions- After a scan why would the AD User Account be corrupted? I don't understand this fully- But why would MalWarebytes active protection allow malware to be installed if it indeed was attached to a Flash Player update? (One method that SweetIm was accused of infecting a computer) Thanks in advance! -Wil