Now run this zoek script:

[HKEY_USERS\S-1-5-21-3130723657-4083518555-1479036497-1000\Software\WinRAR\ArcHistory];r
"1"="";r
C:\Users\Jack Foley\AppData\Local\Temp\iswizard;f\
emptyalltemp;
autoclean;

… … … … … …

Open notepad and copy/paste the text present inside the code box below:



DeQuarantine::
C:\Qoobox\Quarantine\C\users\Jack Foley\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk
Quit::



Save this as CFScript.txt

http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif

Close all browser windows and refering to the picture above.

Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will will re-run. When finished, it will produce a log for you.
Attach the contents of the log in your next reply. (typical location: C:[b]ComboFix.txt[/b] )