jamesg1213
As long as it of a reasonable date and prior to your infection.
Properties shows it originates from 2008 Wook, hopefully that's genuine.
yup that's the fella!!! It's from the Service Pack.
put a spare back in the dllcache too.
Do that SFC /scannow and it will replace it anyhow if it is a wrong 'un.
Doing that will also change the system registry back to the defaults for the system files included in the scan also, which may alter some of the customised behaviour you've set up since installation but it will ensure that any malware hasn't made any changes to file pointers to do with the system.