Yes, all files are visible...none hidden.

My properties are the same as yours so I guess this file is legit. I think the file and virus are gone but for some reason this reg entry remains. If I search the registry for the 018 HJT log entry {a6d99a9c-484a-4a16-aa0c-2e72067f9c07}, I find it listed in four different locations. I'm wondering if it would be safe to just delete them from the registry. I ran ccleaner in hopes that it would do it but it still shows up in the HJT log after.