The rogue runs as a non-PNP hardware driver and so will appear in the device
manager. research 'go.google.com redirect' using another PC, and it'll point
you to a trojan usually called something like TDSSServ.exe