I've been trying to help a friend with his computer and, no matter what I
do, spyware keeps returning. Here is my novice checklist that I've gone
through:

msconfig: If I find an obvious spyware entry, I both uncheck it AND I locate
the actual spyware file(s) and permanently delete them.
Malwarebytes (usually 2 scans), Spybot S&D, and TDDS Killer.
CCleaner and reset Internet Explorer.
IE Internet Options > Connections tab > LAN settings: make sure both lower
boxes are unchecked.
Microsoft Security Essentials: configure for daily overnight scan (computer
is left on).

When I'm done, I try some sample Google searches to make sure there is no
evidence of browser hijacking. At this point, I feel like we've made
progress and cleaned the computer. Then, a couple weeks later, I'm back to
repeat the same exercise! Monday will be my 3rd visit in 2 months! ((

I'm no expert, but it sure feels like I've done everything to both clean and
protect the computer. I know that user activity is a big factor in how a
computer gets infected. However, I would really love to hear any
suggestions on any additional settings to check and/or any better tools than
what I've listed above. All input is greatly appreciated.

Thanks!