This trojan looks like it rode in on the PDF javascript exploit. (Reader 7)
User had up to date AVG free and MS updates.
Ran ComboFix with a different CFscript than post 13753.
Ran Malwarebytes to clean up.
Ran HJT.
Uploading all logs here.
Your feedback is greatly appreciated!