When spybot detects or deletes a file, write the file's date created (or date modified) in the log file (and possibly on the screen during the removal stage when the user is prompted) - this would be helpful in determining how long the computer has been compromised. In my case I had a keylogger and wanted to know how long it had been there.