start:: closeprocesses: createrestorepoint: HKU\S-1-5-21-847398224-3266564336-1598762257-1001\...\Run: [Creative SoundBlaster] => C:\Users\droopy\AppData\Local\CTHelpers.exe [6955384 2011-06-01] (TeamViewer GmbH -> TeamViewer GmbH) FF NewTab: Mozilla\Firefox\Profiles\59qx6eqf.default -> hxxps://securesearch.org/homepage?hp=2&pId=LU150701WEBDIRECT&iDate=2020-10-27 02:35:26&bName= 2020-11-14 15:05 - 2020-11-14 15:05 - 000000000 ____D C:\Users\droopy\AppData\Roaming\TeamViewer 2015-02-11 11:15 - 2015-02-11 11:15 - 000013312 _____ () C:\Users\droopy\AppData\Local\avicap32.dll 2011-06-01 14:34 - 2011-06-01 14:34 - 006955384 _____ (TeamViewer GmbH) C:\Users\droopy\AppData\Local\CTHelpers.exe 2011-07-24 16:02 - 2011-07-24 16:02 - 002133368 _____ (TeamViewer GmbH) C:\Users\droopy\AppData\Local\TeamViewer_Desktop.exe 2011-06-01 14:35 - 2011-06-01 14:35 - 001275768 _____ (TeamViewer GmbH) C:\Users\droopy\AppData\Local\TeamViewer_Resource_ru.dll 2011-07-21 19:17 - 2011-07-21 19:17 - 000050040 _____ (TeamViewer GmbH) C:\Users\droopy\AppData\Local\tv_w32.dll 2011-07-24 16:02 - 2011-07-24 16:02 - 000108408 _____ (TeamViewer GmbH) C:\Users\droopy\AppData\Local\tv_w32.exe 2011-07-24 16:02 - 2011-07-24 16:02 - 000053112 _____ (TeamViewer GmbH) C:\Users\droopy\AppData\Local\tv_x64.dll 2011-07-24 16:02 - 2011-07-24 16:02 - 000144248 _____ (TeamViewer GmbH) C:\Users\droopy\AppData\Local\tv_x64.exe IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com emptytemp: end::