You might want to disable NPROTECT: Norton Protected Recycle Bin from Norton Utilities. Adds an extra layer of safety before you remove deleted files from the Recycled Bin. If you look at the Combofix logs-both-you will see that Combofix deletes the files, but they are back in force the next time.
FYI:
About NPROTECT: If Nprotect is enabled on Norton Protect tab of Recycle Bin properties and the internet connection is established, the directory c:\recycler\nprotect will fill with files until all available free space is used. Approximately every 60 minutes a large batch of files (over 100) get written to that directory. It's an annoyance, uses system resources and doesn't need to run: It builds up a huge number of files in the Recycler Folder. There is a service that starts this and I recommend that you disable it:
You can use a Command Prompt to do it all- disable and remove:
Click on Start> Run> type in
cmd> copy the following command and paste it into the prompt:
del /f/s/q/a:rsha c:\recycled\nprotect\*.*
(Note: space after 'del', colon between a and rsha, forward slashes. Then space before 'c' and slashes are reverse. Dot between the two asterisks.)
Press Enter.
After that is done:
[1]. Close any open browsers.
[2]. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
[3]. Open notepad and copy/paste the text in the code below into it:
Code:
KILLALL::
File::
c:\windows\system32\drivers\woxkrsui.sys
c:\progra~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
Folder::
Registry::
Driver::
woxkrsui
NProtectService
CFSvcs
Save this as CFScript.txt, in the same location as ComboFix.exe
Referring to the picture above, drag CFScript into ComboFix.exe
When finished, it will produce a log for you at C:\ComboFix.txt . Please attach to your next reply.
Run one more scasn with HJT and include new log.
Are you having any malware related problems at this point?