Now run this zoek script:
[HKEY_USERS\S-1-5-21-3130723657-4083518555-1479036497-1000\Software\WinRAR\ArcHistory];r
"1"="";r
C:\Users\Jack Foley\AppData\Local\Temp\iswizard;f\
emptyalltemp;
autoclean;
… … … … … …
Open notepad and copy/paste the text present inside the code box below:
DeQuarantine::
C:\Qoobox\Quarantine\C\users\Jack Foley\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk
Quit::
Save this as CFScript.txt
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
Close all browser windows and refering to the picture above.
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will will re-run. When finished, it will produce a log for you.
Attach the contents of the log in your next reply. (typical location: C:[b]ComboFix.txt[/b] )