Adobe Acrobat seems to have been either cleared of suspicion: <a href="http://www.pcmag.com/article2/0,2817,2358121,00.asp" rel="nofollow">http://www.pcmag.com/article2/0,2817,2358121,00.asp</a> or involved in only some of the targets: <a href="http://www.wired.com/threatlevel/2010/01/google-hack-attack/" rel="nofollow">http://www.wired.com/threatlevel/2010/01/google-hack-attack/</a> .  I still find it hard to believe that IE6 was an important vector into Google- who there besides those in a sandboxed QA environment would use a browser that out of date?