GOOGLETOOLBARNOTIFIER.EXE Description: GoogleToolbarNotifier Google Inc. GoogleToolbarNotifier 4, 1, 509, 1944 MD5= 5D61BE7DB55B026A5D61A3EED09D0EAD File is signed and the signature was verified. File size= 39408 Related registry changes: HKLM\SOFTWARE\CLASSES\CLSID\{FBA44040-BD27-4A09-ACC8-C08B7C723DCD}\LOCALSERVER32\: “”C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE“” HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{80B84A0A-EDA4-47FD-8BE1-6B49F4197EE5}\APPNAME: “GOOGLETOOLBARNOTIFIER.EXE” HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\SWG: “”C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE“”

GOOGLEUPDATE.EXE Description: Google Installer Google Inc. Google Update 1.2.183.21 MD5= F02A533F517EB38333CB12A9E8963773 File is signed and the signature was verified. File size= 136176 Related registry changes: HKLM\SOFTWARE\CLASSES\APPID\GOOGLEUPDATE.EXE HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE HKLM\SOFTWARE\CLASSES\APPID\GOOGLEUPDATE.EXE\APPID: “{9465B4B4-5216-4042-9A2C-754D3BCDC410}” HKLM\SOFTWARE\CLASSES\CLSID\{392AEC72-6F8C-4A0D-BF72-8EFDB0C23CAF}\LOCALSERVER32\: “”C:\PROGRAM FILES\GOOGLE\UPDATE\GOOGLEUPDATE.EXE“” HKLM\SOFTWARE\GOOGLE\GOOGLE TOOLBAR\COMPONENT\USED\SEARCHWITHGOOGLEUPDATE.EXE: 0X00000001 HKLM\SOFTWARE\GOOGLE\UPDATE\PATH: “C:\PROGRAM FILES\GOOGLE\UPDATE\GOOGLEUPDATE.EXE” HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\APPNAME: “GOOGLEUPDATE.EXE” HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE\DISABLEEXCEPTIONCHAINVALIDATION: 0X00000000 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GUPDATE\IMAGEPATH: “C:\PROGRAM FILES\GOOGLE\UPDATE\GOOGLEUPDATE.EXE /SVC” HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GUPDATEM\IMAGEPATH: “C:\PROGRAM FILES\GOOGLE\UPDATE\GOOGLEUPDATE.EXE /MEDSVC”

GOOGLETOOLBAR_32.DLL Description: Google Toolbar Google Inc. Google Toolbar for Internet Explorer 7, 1, 1920, 1238 MD5= 0714772B2F3E7095312020DAC8C61C59 File is signed and the signature was verified. File size= 305328 Related registry changes: HKLM\SOFTWARE\CLASSES\CLSID\{00EF2092-6AC5-47C0-BD25-CF2D5D657FEB}\INPROCSERVER32\: “C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\GOOGLETOOLBAR_32.DLL” HKLM\SOFTWARE\CLASSES\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\INPROCSERVER32\: “C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\GOOGLETOOLBAR_32.DLL” HKLM\SOFTWARE\CLASSES\CLSID\{32004B8A-44A9-43E7-84E9-808838809519}\INPROCSERVER32\: “C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\GOOGLETOOLBAR_32.DLL” HKLM\SOFTWARE\CLASSES\CLSID\{AA58ED58-01DD-4D91-8333-CF10577473F7}\INPROCSERVER32\: “C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\GOOGLETOOLBAR_32.DLL“

SWG.DLL Description: GoogleToolbarNotifier Google Inc. GoogleToolbarNotifier 5, 7, 6406, 1642 MD5= A953E104137DF406B70477D60BC29008 File is signed and the signature was verified. File size= 1007160 Related registry changes: HKLM\SOFTWARE\CLASSES\CLSID\{6134CEA9-DD6E-495C-A0D1-4F232027D7D7}\INPROCSERVER32\: “C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.6406.1642\SWG.DLL” HKLM\SOFTWARE\CLASSES\CLSID\{84798B8E-69F8-4846-9516-373C2996E2F7}\INPROCSERVER32\: “C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.6406.1642\SWG.DLL” HKLM\SOFTWARE\CLASSES\CLSID\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}\INPROCSERVER32\: “C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.6406.1642\SWG.DLL” HKLM\SOFTWARE\CLASSES\TYPELIB\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\18.0\0\WIN32\: “C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.6406.1642\SWG.DLL“

GOOGLEUPDATERSERVICE.EXE Description: Service Google Software Updater Google Updater keeps your Google software up to date. If Google Updater Service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. Start Type: loaded manually on demand gusvc Google Google Updater 2.4.1441.4352.beta MD5= CC839E8D766CC31A7710C9F38CF3E375 File is signed and the signature was verified. File size= 182768 Related registry changes: HKLM\SOFTWARE\CLASSES\APPID\GOOGLEUPDATERSERVICE.EXE HKLM\SOFTWARE\CLASSES\APPID\GOOGLEUPDATERSERVICE.EXE\APPID: “{61E28BF8-C02B-499F-8E7A-34C1E4A1C649}” HKLM\SOFTWARE\CLASSES\CLSID\{89DAE4CD-9F17-4980-902A-99BA84A8F5C8}\LOCALSERVER32\: “”C:\PROGRAM FILES\GOOGLE\COMMON\GOOGLE UPDATER\GOOGLEUPDATERSERVICE.EXE“” HKLM\SOFTWARE\CLASSES\CLSID\{B53B7061-6584-46AA-A033-D610EB10BD9B}\LOCALSERVER32\: “”C:\PROGRAM FILES\GOOGLE\COMMON\GOOGLE UPDATER\GOOGLEUPDATERSERVICE.EXE“” HKLM\SOFTWARE\CLASSES\TYPELIB\{5924C60B-6D7F-4AD6-8084-24A59431C967}\1.0\0\WIN32\: “C:\PROGRAM FILES\GOOGLE\COMMON\GOOGLE UPDATER\GOOGLEUPDATERSERVICE.EXE” HKLM\SOFTWARE\GOOGLE\COMMON\GOOGLE UPDATER\PATH: “C:\PROGRAM FILES\GOOGLE\COMMON\GOOGLE UPDATER\GOOGLEUPDATERSERVICE.EXE” HKLM\SOFTWARE\GOOGLE\GOOGLE TOOLBAR\COMPONENT\USED\GOOGLEUPDATERSERVICE.EXE: 0X00000001 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GUSVC\IMAGEPATH: “”C:\PROGRAM FILES\GOOGLE\COMMON\GOOGLE UPDATER\GOOGLEUPDATERSERVICE.EXE“”

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\INTERNET EXPLORER\USERDATA\P7AMJ75M\PMOCNTR2[1].XML C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\INTERNET EXPLORER\USERDATA\XZZJTUR0\MGMHPPD[1].XML C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\PROTECT\S-1-5-21-1659004503-1708537768-1801674531-500\110A2C91-A392-441A-875E-FDAF33A0183C C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\CRYPTO\RSA\S-1-5-21-1659004503-1708537768-1801674531-500\932A2DB58C237ABD381D22DF4C63A04A_E17EF422-72D0-4843-9F36-93D1C74DF894 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\TOOLBAR\METRICS_1235289040.XML C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\TOOLBAR CACHE\7.1.1920.1238\EN\ANNOTAIONS_WHITELIST.JSON.CONTENT C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\TOOLBAR CACHE\7.1.1920.1238\EN\TRANSLATE_ELEMENT.JS.CONTENT C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\TOOLBAR CACHE\7.1.1920.1238\EN\TRANSLATE_LANGUAGES.JSON.CONTENT C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\TOOLBAR DNS DATA\DATA C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\GOOGLETOOLBARINSTALLER1.LOG C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\GOOGLETOOLBARINSTALLER2.LOG C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\CLIC…EXE_F84B370C827B5C7A_0001.0003_NONE_F6C58DDCFF6080A6\GOOGLEUPDATESETUP.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\GOOG…APP_F84B370C827B5C7A_0001.0003_134BA92E7AB29ACD\CLICKONCE_BOOTSTRAP.CDF-MS C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\GOOG…APP_F84B370C827B5C7A_0001.0003_134BA92E7AB29ACD\CLICKONCE_BOOTSTRAP.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\GOOG…APP_F84B370C827B5C7A_0001.0003_134BA92E7AB29ACD\CLICKONCE_BOOTSTRAP.EXE.CDF-MS C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\GOOG…APP_F84B370C827B5C7A_0001.0003_134BA92E7AB29ACD\CLICKONCE_BOOTSTRAP.EXE.MANIFEST C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\GOOG…APP_F84B370C827B5C7A_0001.0003_134BA92E7AB29ACD\CLICKONCE_BOOTSTRAP.MANIFEST C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\GOOG…APP_F84B370C827B5C7A_0001.0003_134BA92E7AB29ACD\GOOGLEUPDATESETUP.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\MANIFESTS\CLIC…EXE_F84B370C827B5C7A_0001.0003_NONE_F6C58DDCFF6080A6.CDF-MS C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\MANIFESTS\CLIC…EXE_F84B370C827B5C7A_0001.0003_NONE_F6C58DDCFF6080A6.MANIFEST C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\MANIFESTS\GOOG…APP_F84B370C827B5C7A_0001.0003_NONE_66A9A60297EC7146.CDF-MS C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\MANIFESTS\GOOG…APP_F84B370C827B5C7A_0001.0003_NONE_66A9A60297EC7146.MANIFEST C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MICROSOFT\NETWORK\DOWNLOADER\QMGR0.DAT C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MICROSOFT\NETWORK\DOWNLOADER\QMGR1.DAT C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\GOOGLE\CUSTOM BUTTONS\TOOLBAR.GOOGLE.COM_O8Y91YHB24Z6SR0SGYSK.XML C:\PROGRAM FILES\GOOGLE\COMMON\GOOGLE UPDATER\GOOGLEUPDATERSERVICE.EXE C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\COMPONENT\GOOGLECLD_26623DE26D4DBD2D.DLL C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\COMPONENT\GOOGLETOOLBAR.7.1.1920.1238.MANIFEST.XML C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\COMPONENT\GOOGLETOOLBARDYNAMIC_32_1885C46768B5CB16.DLL C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\COMPONENT\GOOGLETOOLBARDYNAMIC_MUI_EN_70C5B381380DB17F.DLL C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\COMPONENT\GOOGLETOOLBARMANAGER_007014361504C04D.EXE C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\COMPONENT\GOOGLETOOLBARUSER_32_06C7E768E8862B48.EXE C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\COMPONENT\GOOGLETOOLBAR_32_7815E32C4DF47CF7.DLL C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\COMPONENT\GOOGLEUPDATERSERVICE_5898FABCFA121C11.EXE C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\COMPONENT\GOOGLEUPDATESETUP_90698EA083D01143.EXE C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\COMPONENT\SEARCHWITHGOOGLEUPDATE_86D23231A3A85F4A.EXE C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\GOOGLETOOLBARHELPERPATCH_SIGNED.MSP C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\GOOGLETOOLBARHELPER_SIGNED.MSI C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\GOOGLETOOLBARUSER_32.EXE C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\GOOGLETOOLBAR_32.DLL C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.6406.1642\GTH.DLL C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.6406.1642\GTN.DLL C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.6406.1642\README.URL C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.6406.1642\SWG.DLL C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOGLECRASHHANDLER.EXE C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOGLEUPDATE.EXE C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOGLEUPDATEBROKER.EXE C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOGLEUPDATEHELPER.MSI C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOGLEUPDATEONDEMAND.EXE C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATE.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_AM.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_AR.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_BG.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_BN.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_CA.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_CS.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_DA.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_DE.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_EL.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_EN-GB.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_EN.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_ES-419.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_ES.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_ET.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_FA.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_FI.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_FIL.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_FR.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_GU.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_HI.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_HR.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_HU.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_ID.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_IS.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_IT.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_IW.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_JA.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_KN.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_KO.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_LT.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_LV.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_ML.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_MR.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_MS.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_NL.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_NO.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_PL.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_PT-BR.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_PT-PT.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_RO.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_RU.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_SK.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_SL.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_SR.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_SV.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_SW.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_TA.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_TE.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_TH.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_TR.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_UK.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_UR.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_VI.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_ZH-CN.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\GOOPDATERES_ZH-TW.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\NPGOOGLEUPDATE3.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\PSMACHINE.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65\PSUSER.DLL C:\PROGRAM FILES\GOOGLE\UPDATE\DOWNLOAD\{F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}\0.0.0.0\GOOGLETOOLBARINSTALLER_EN32_SIGNED.EXE C:\PROGRAM FILES\GOOGLE\UPDATE\GOOGLEUPDATE.EXE C:\WINDOWS\INSTALLER\3767C.MSI C:\WINDOWS\INSTALLER\37680.MSI C:\WINDOWS\TASKS\GOOGLEUPDATETASKMACHINECORE.JOB C:\WINDOWS\TASKS\GOOGLEUPDATETASKMACHINEUA.JOB C:\WINDOWS\TEMP\GOOGLETOOLBARINSTALLER1.LOG C:\WINDOWS\TEMP\GUI4.TMP C:\WINDOWS\TEMP\GUR3.EXE C:\WINDOWS\TEMP\GUR3.TMP

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\INTERNET EXPLORER\USERDATA\XZZJTUR0\PMOCNTR2[1].XML

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\INTERNET EXPLORER\USERDATA\INDEX.DAT C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\PROTECT\S-1-5-21-1659004503-1708537768-1801674531-500\PREFERRED C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GDIPFONTCACHEV1.DAT C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\FEEDS CACHE\INDEX.DAT C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\CE4CF87733651BF1F44DD1E02FC1A8E8 C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\NGEN_SERVICE.LOG

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\CRYPTO C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\CRYPTO\RSA C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MICROSOFT\CRYPTO\RSA\S-1-5-21-1659004503-1708537768-1801674531-500 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\GOOGLE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CRASHREPORTS C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CUSTOM BUTTONS C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CUSTOM BUTTONS\ENTERPRISE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\TOOLBAR C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\TOOLBAR CACHE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\TOOLBAR CACHE\7.1.1920.1238 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\TOOLBAR CACHE\7.1.1920.1238\EN C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\TOOLBAR DNS DATA C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\DEPLOYMENT C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\DEPLOYMENT C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\GOOGLE TOOLBAR C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\DATA C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\DATA\T2WVMHG6.G3E C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\DATA\T2WVMHG6.G3E\ZZWXYN6N.C9Q C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\DATA\T2WVMHG6.G3E\ZZWXYN6N.C9Q\GOOG…APP_F84B370C827B5C7A_0001.0003_134BA92E7AB29ACD C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\DATA\T2WVMHG6.G3E\ZZWXYN6N.C9Q\GOOG…APP_F84B370C827B5C7A_0001.0003_134BA92E7AB29ACD\DATA C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\CLIC…EXE_F84B370C827B5C7A_0001.0003_NONE_F6C58DDCFF6080A6 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\GOOG…APP_F84B370C827B5C7A_0001.0003_134BA92E7AB29ACD C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\APPS\2.0\XC567B5E.TQ5\WV36B27P.9KP\MANIFESTS C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MICROSOFT\NETWORK\DOWNLOADER C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\GOOGLE C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\GOOGLE\CUSTOM BUTTONS C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\GOOGLE\GOOGLE TOOLBAR C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\GOOGLE\GOOGLE TOOLBAR\COMPONENT C:\PROGRAM FILES\GOOGLE\COMMON\GOOGLE UPDATER C:\PROGRAM FILES\GOOGLE\CRASHREPORTS C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR C:\PROGRAM FILES\GOOGLE\GOOGLE TOOLBAR\COMPONENT C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\5.7.6406.1642 C:\PROGRAM FILES\GOOGLE\UPDATE C:\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.65 C:\PROGRAM FILES\GOOGLE\UPDATE\DOWNLOAD C:\PROGRAM FILES\GOOGLE\UPDATE\DOWNLOAD\{F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24} C:\PROGRAM FILES\GOOGLE\UPDATE\DOWNLOAD\{F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}\0.0.0.0 C:\PROGRAM FILES\GOOGLE\UPDATE\INSTALL C:\PROGRAM FILES\GOOGLE\UPDATE\OFFLINE C:\PROGRAM FILES\GOOGLE\UPDATE\OFFLINE\{452D4EE0-18D1-45AA-B06A-9933A11C286C}