Look Dom, he needs to update Malwarebytes' Anti-malware program the one he is using is way out of date. Plus what happened to his Norton program? It was showing in the very first HJT log but now it is not showing in these?
Are you actually at this computer or is this all being done via email or something?
I really need to be working with the person who is actually using the computer and via that actual computer if possible. There is too much "lag time" between posting instructions and then seeing results.
Obviously sometime in the last 5 days the Norton program has been removed. I would like to know what this guy has actually been doing to keep getting these infections...file sharing perhaps?