Spawned process "update.exe" with commandline "/quiet /norestart" ( Show Process) Spawned process "GPhotos.scr" with commandline "/c /installcheck" ( Show Process) Spawned process "GoogleUpdaterService.exe" with commandline "/install /appid=picasa" ( Show Process) "Picasa3.exe" wrote 4 bytes to a remote process "C:\Program Files\Google\Picasa3\Picasa3.exe" (Handle: 888) "Picasa3.exe" wrote 52 bytes to a remote process "C:\Program Files\Google\Picasa3\Picasa3.exe" (Handle: 888) "Picasa3.exe" wrote 32 bytes to a remote process "C:\Program Files\Google\Picasa3\Picasa3.exe" (Handle: 888) "GoogleUpdaterService.exe" wrote 52 bytes to a remote process "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" (Handle: 420) "GoogleUpdaterService.exe" wrote 32 bytes to a remote process "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" (Handle: 420) "GoogleUpdaterService.exe" wrote 4 bytes to a remote process "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" (Handle: 420)
"GoogleUpdaterService.exe" wrote 1500 bytes to a remote process "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" (Handle: 420) "PicasaUpdater_5ff7.exe" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_6f01.exe" (Handle: 1140) "PicasaUpdater_5ff7.exe" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_6f01.exe" (Handle: 1140) "PicasaUpdater_5ff7.exe" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_6f01.exe" (Handle: 1140) "PicasaUpdater_5ff7.exe" wrote 1500 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_6f01.exe" (Handle: 1140)
"" wrote 4 bytes to a remote process "C:\Program Files\Google\Picasa3\Picasa3.exe" (Handle: 632) "" wrote 52 bytes to a remote process "C:\Program Files\Google\Picasa3\Picasa3.exe" (Handle: 632) "" wrote 32 bytes to a remote process "C:\Program Files\Google\Picasa3\Picasa3.exe" (Handle: 632) "" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_5ff7.exe" (Handle: 352) "" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_5ff7.exe" (Handle: 352) "" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\PicasaUpdater_5ff7.exe" (Handle: 352) "" wrote 1500 bytes to a remote process "%TEMP%\PicasaUpdater_5ff7.exe" (Handle: 352)