Thanks for that, tubby. Well done. You're a bit lucky system restore worked.
Just out of interest, read an article that said there's been a 585% increase in rogues in the first 6 months of this year.
I was involved (peripherally) on another forum with helping someone to try and remove pretty much a "zero-day" rogue antimalware. Poor bu@@er hasn't got access to the control panel, any system tools, can't boot into safe, no .exe will run, with a message saying "..has been disabled by the administrator..." and nothing he had detected it before it went belly up. His AV has now been disabled. I think he's either looking at a BART cd, or a format/reinstall.
This sort of thing just reinforces the idea that it is a very good idea to disable (or prompt) for scripts to be allowed to run in any browser.
Among other GOP's.