Look at the location. It is a temporary file. That is why it is sometimes there and sometimes not. Let us see if we can find out more. Post a HijackThis log here.