Source of VirusProtector

My father has Norton 360 running on his laptop (as part of the Comcast provided Norton Security Suite). Auto-protect is regularly reporting and quarantining VirusProtector. How do I determine why this software keeps appearing for Norton to find? I cleaned an earlier infection (that Norton failed to prevent) from the machine with SuperAntiSpyware and now neither that nor Malwarebytes finds problems when they are run. It seems likely that something was left behind that keeps downloading the malware but what is it?