Not sure where Norman came from there, though it didn't locate anything on a system that still has infection. I am getting the sense that this system has quite a bit of not-so-well-known anti-malware softwares and I am still not sure all that you have are true legit softwares. Please run the SDFix scan steps as posted and post back those results.
Also I would like to check one of the files showing there. Make sure you can
View Hidden Files. Also uncheck "Hide Extensions for Known File Types"
Please locate the following hilighted file(s), zip a copy of it, and send it to jintan@cfl.rr.com as an attachment. Please place "Submitted Files - padmee" as the email Subject.
C:\WINNT\
invoice.exe