Yes that file is legit.

Please see link I gave you how to install recovery console manually, rerun combofix and post back a fresh combofix and a fresh hijackthis log afterwards.