I watched this file insert itself as 010tmp from the temporary internet files directory using services.exe. The file seems to do whatever it does to poison the local DNS and unloads after that. There are no anti-virus or anti-malware programs that detect anything being wrong. Besides modifying the hosts file, how else would a program like that poison the local DNS? Or more importantly, where should I look to fix this? Thanks!