|
Re: Does this HJT log look suspicious?
When I ran ComboFix, it asked me if i wanted to install the recovery console but I thoguht I already had it so I said no, that explains why it says I dont have the recovery console installed.
I did run ComboFix twice. I had to run it a second time because I deleted the log from the first one.
Here is the quarantined files list..
2008-12-15 16:43:23 A------- 54 C:\Qoobox\Quarantine\catchme.log
2008-12-15 16:45:00 A------- 5,987 C:\Qoobox\Quarantine\Registry_backups\tcpip.reg
2008-12-15 16:45:29 A------- 0 C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-CFSServ.exe.reg.dat
2008-12-15 16:45:29 A------- 0 C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-NDSTray.exe.reg.dat
2008-12-15 16:45:29 A------- 0 C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-TFncKy.reg.dat
2008-12-15 16:45:36 A------- 652 C:\Qoobox\Quarantine\Registry_backups\MSConfigStartUp-AlcoholAutomount.reg.dat
|