Ok, as I knew from your two FRST logs and also Combofix log, you have a patched / infected services.exe file, We will have to manually find the backup copies of services.exe on your system and script for combofix to replace the bad copy with a good copy
First, Norton may still detect the files you had detected when you came to the forum, that is OK, because if all is going well the location would have changed for the detections, as Combofix and FRST have their own Quarantine folders which I clean up at the end as part of step 4. (See my first post)
Now
Please download SystemLook from one of the links below and save it to your Desktop.
hxxp://jpshortstuff.247fixes.com/SystemLook.exe change the xx to tt
Disable Norton for say 30 mins
Double-click SystemLook.exe to run it.
Copy the content of the following codebox into the main textfield: (don't forget the : in front of :filefind)
:filefind
\n
\@
*.@
services.exe
Click the Look button to start the scan.
When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
Quads
