View Single Post
Old 12-15-2008, 06:46 PM   #9 (permalink)
tanger
Registered User
 
Join Date: Aug 2007
Posts: 62
OS: XP SP3


Re: Does this HJT log look suspicious?

When I ran ComboFix, it asked me if i wanted to install the recovery console but I thoguht I already had it so I said no, that explains why it says I dont have the recovery console installed.

I did run ComboFix twice. I had to run it a second time because I deleted the log from the first one.

Here is the quarantined files list..



2008-12-15 16:43:23 A------- 54 C:\Qoobox\Quarantine\catchme.log
2008-12-15 16:45:00 A------- 5,987 C:\Qoobox\Quarantine\Registry_backups\tcpip.reg
2008-12-15 16:45:29 A------- 0 C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-CFSServ.exe.reg.dat
2008-12-15 16:45:29 A------- 0 C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-NDSTray.exe.reg.dat
2008-12-15 16:45:29 A------- 0 C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-TFncKy.reg.dat
2008-12-15 16:45:36 A------- 652 C:\Qoobox\Quarantine\Registry_backups\MSConfigStartUp-AlcoholAutomount.reg.dat
tanger is offline