

"qtsupport.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "imapi2.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "imapi2fs.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "Picasa3.exe" called "OpenService" to access the "rasman" service "Picasa3.exe" called "OpenService" to access the "Sens" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights "GoogleUpdaterService.exe" called "OpenService" to access the "gusvc" service requesting "SERVICE_QUERY_CONFIG" (0X1) access rights "GPhotos.scr" called "OpenService" to access the "RASMAN" service "GPhotos.scr" called "OpenService" to access the "rasman" service "GPhotos.scr" called "OpenService" to access the "Sens" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights "GoogleUpdaterService.exe" called "OpenService" to access the "" service

"GoogleUpdaterService.exe" called "OpenService" to access the "gusvc" service "PicasaUpdater_5ff7.exe" called "OpenService" to access the "RASMAN" service "PicasaUpdater_5ff7.exe" called "OpenService" to access the "rasman" service

"PicasaUpdater_5ff7.exe" called "OpenService" to access the "Sens" service requesting "SERVICE_QUERY_STATUS" (0X4) access rights "PicasaUpdater_5ff7.exe" called "OpenService" to access the "PcaSvc" service "" called "OpenService" to access the "PcaSvc" service

"PicasaUpdater_5ff7.exe" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_6f01.exe" (Handle: 1140) "PicasaUpdater_5ff7.exe" wrote 1500 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_6f01.exe" (Handle: 1140) "" wrote 4 bytes to a remote process "C:\Program Files\Google\Picasa3\Picasa3.exe" (Handle: 632) "" wrote 52 bytes to a remote process "C:\Program Files\Google\Picasa3\Picasa3.exe" (Handle: 632) "" wrote 32 bytes to a remote process "C:\Program Files\Google\Picasa3\Picasa3.exe" (Handle: 632) "" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_5ff7.exe" (Handle: 352) "" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_5ff7.exe" (Handle: 352) "" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_5ff7.exe" (Handle: 352) "" wrote 1500 bytes to a remote process "%TEMP%\PicasaUpdater_5ff7.exe" (Handle: 352)
