|
| |||
| MS' Java? Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently? I noticed my Java doesn't seem to work anymore. Thank you in advance. :) -- Phillip Pi Senior Software Quality Assurance Analyst ISP/Symantec Online Services, Consumer Business Unit Symantec Corporation www.symantec.com ----------------------------------------------------- Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail) ----------------------------------------------------- Please do NOT e-mail me for technical support. DISCLAIMER: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer. Thank you. |
| |||
| Re: MS' Java? It was removed quite some time ago. "Phillip Pi" <phillip_pi@symantec.comSYMC> wrote in message news:upOXmo3BIHA.5228@TK2MSFTNGP05.phx.gbl... | Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently? | I noticed my Java doesn't seem to work anymore. | | Thank you in advance. :) | -- | Phillip Pi | Senior Software Quality Assurance Analyst | ISP/Symantec Online Services, Consumer Business Unit | Symantec Corporation | www.symantec.com | ----------------------------------------------------- | Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail) | ----------------------------------------------------- | Please do NOT e-mail me for technical support. DISCLAIMER: The views | expressed in this posting are mine, and do not necessarily reflect the | views of my employer. Thank you. |
| |||
| Re: MS' Java? Ms never owned Java. It had the license to bundle it with its IE6 but since SP1 this was stopped. MS was forced to reissue SP1a in which Java was unbundled. If you really need Java then try this link: http://java.sun.com/javase/downloads/index.jsp Hope this proves useful. Phillip Pi wrote: > > Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently? > I noticed my Java doesn't seem to work anymore. > > Thank you in advance. :) > -- > Phillip Pi > Senior Software Quality Assurance Analyst > ISP/Symantec Online Services, Consumer Business Unit > Symantec Corporation > www.symantec.com > ----------------------------------------------------- > Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail) > ----------------------------------------------------- > Please do NOT e-mail me for technical support. DISCLAIMER: The views > expressed in this posting are mine, and do not necessarily reflect the > views of my employer. Thank you. |
| |||
| Re: MS' Java? Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I wonder if MS did something to remove it? On 10/5/2007 1:28 PM PT, ANONYMOUS wrote: > Ms never owned Java. It had the license to bundle it with its IE6 but > since SP1 this was stopped. MS was forced to reissue SP1a in which Java > was unbundled. If you really need Java then try this link: > > http://java.sun.com/javase/downloads/index.jsp > > Hope this proves useful. > > > Phillip Pi wrote: >> Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently? >> I noticed my Java doesn't seem to work anymore. >> >> Thank you in advance. :) -- Phillip Pi Senior Software Quality Assurance Analyst ISP/Symantec Online Services, Consumer Business Unit Symantec Corporation www.symantec.com ----------------------------------------------------- Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail) ----------------------------------------------------- Please do NOT e-mail me for technical support. DISCLAIMER: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer. Thank you. |
| |||
| Re: MS' Java? Hmm, when did MS release a hotfix to remove it? I have had this XP Pro. installation since about 2002 and had its licensed Java worked in IE6.0 SP2 (didn't have Sun Java installed). On 10/5/2007 12:57 PM PT, Tom [Pepper] Willett wrote: > It was removed quite some time ago. > > "Phillip Pi" <phillip_pi@symantec.comSYMC> wrote in message > news:upOXmo3BIHA.5228@TK2MSFTNGP05.phx.gbl... > | Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently? > | I noticed my Java doesn't seem to work anymore. > | > | Thank you in advance. :) -- Phillip Pi Senior Software Quality Assurance Analyst ISP/Symantec Online Services, Consumer Business Unit Symantec Corporation www.symantec.com ----------------------------------------------------- Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail) ----------------------------------------------------- Please do NOT e-mail me for technical support. DISCLAIMER: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer. Thank you. |
| |||
| Re: MS' Java? For more information about MS and Sun re Java, and if you need MS's JavaVM, see this site: http://inetexplorer.mvps.org/answers/14.html -- Jon Kennedy, MS MVP/IE Charlotte, NC, USA jkennedy2@carolina.rr.com "Phillip Pi" <phillip_pi@symantec.comSYMC> wrote in message news:uflATZ6BIHA.2324@TK2MSFTNGP03.phx.gbl... > Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I > wonder if MS did something to remove it? > > > On 10/5/2007 1:28 PM PT, ANONYMOUS wrote: > >> Ms never owned Java. It had the license to bundle it with its IE6 but >> since SP1 this was stopped. MS was forced to reissue SP1a in which Java >> was unbundled. If you really need Java then try this link: >> >> http://java.sun.com/javase/downloads/index.jsp >> >> Hope this proves useful. >> >> >> Phillip Pi wrote: >>> Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently? >>> I noticed my Java doesn't seem to work anymore. >>> >>> Thank you in advance. :) > -- > Phillip Pi > Senior Software Quality Assurance Analyst > ISP/Symantec Online Services, Consumer Business Unit > Symantec Corporation > www.symantec.com > ----------------------------------------------------- > Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail) > ----------------------------------------------------- > Please do NOT e-mail me for technical support. DISCLAIMER: The views > expressed in this posting are mine, and do not necessarily reflect the > views of my employer. Thank you. |
| |||
| Re: MS' Java? Phillip Pi wrote: > Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I > wonder if MS did something to remove it? > > Yes. Read this article: http://support.microsoft.com/?kbid=813926 Hope this helps. |
| |||
| Re: MS' Java? "Phillip Pi" wrote: > Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I > wonder if MS did something to remove it? > > > On 10/5/2007 1:28 PM PT, ANONYMOUS wrote: > > > Ms never owned Java. It had the license to bundle it with its IE6 but > > since SP1 this was stopped. MS was forced to reissue SP1a in which Java > > was unbundled. If you really need Java then try this link: > > > > http://java.sun.com/javase/downloads/index.jsp > > > > Hope this proves useful. > > > > > > Phillip Pi wrote: > >> Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently? > >> I noticed my Java doesn't seem to work anymore. > >> > >> Thank you in advance. :) > -- > Phillip Pi > Senior Software Quality Assurance Analyst > ISP/Symantec Online Services, Consumer Business Unit > Symantec Corporation > www.symantec.com > ----------------------------------------------------- > Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail) > ----------------------------------------------------- > Please do NOT e-mail me for technical support. DISCLAIMER: The views > expressed in this posting are mine, and do not necessarily reflect the > views of my employer. Thank you. > Microsoft was forced to remove their version of Java because Microsoft and Sun could not come to terms on a license agreement. However, you can download and install the Java Runtime Environment from Sun's website at no charge. Have a nice day. C.B. |
| |||
| Re: MS' Java? On 10/5/2007 5:56 PM PT, Jon Kennedy typed: > For more information about MS and Sun re Java, and if you need MS's JavaVM, > see this site: > http://inetexplorer.mvps.org/answers/14.html Thanks. I do have MS' Java installed since I installed this XP Pro. back in 2002 or so. Also in IE's options, I see options for Java VM: C:\>jview Microsoft (R) Command-line Loader for Java Version 5.00.3810 Copyright (C) Microsoft Corp 1996-2000. All rights reserved. Usage: JView [options] <classname> [arguments] Options: /? displays usage text /cp <classpath> set class path /cp:p <path> prepend path to class path /cp:a <path> append path to class path /n <namespace> namespace in which to run /p pauses before terminating if an error occurs /v verify all classes /d:<name>=<value> define system property /a execute AppletViewer /vst print verbose stack traces (requires debug classes) /prof[:options] enable profiling (/prof:? for help) Classname: .CLASS file to be executed. Arguments: command-line arguments to be passed on to the class file Anyways, when I try to run Java applets from Internet Web sites like on ezboard.com, www.javatester.org/version.html , etc. show an empty box with the infamous red square with a red X. Screen shot: http://img443.imageshack.us/img443/1...pprosp2ff1.gif ... I can use Sun's JRE just fine if I enable it for IE6.0 SP2. I don't know why the old one from MS doesn't work anymore. :( -- "When you have seen one ant, one bird, one tree, you have not seen them all." --Edward O. Wilson, 1992 /\___/\ / /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site) | |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net \ _ / Remove ANT from e-mail address: philpi@earthlink.netANT ( ) or ANTant@zimage.com Ant is currently not listening to any songs on his home computer. |
| |||
| Re: MS' Java? On 10/6/2007 9:58 PM PT, CB typed: >> Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I >> wonder if MS did something to remove it? >> >> >> On 10/5/2007 1:28 PM PT, ANONYMOUS wrote: >> >>> Ms never owned Java. It had the license to bundle it with its IE6 but >>> since SP1 this was stopped. MS was forced to reissue SP1a in which Java >>> was unbundled. If you really need Java then try this link: >>> >>> http://java.sun.com/javase/downloads/index.jsp >>> >>> Hope this proves useful. >>> >>> >>> Phillip Pi wrote: >>>> Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently? >>>> I noticed my Java doesn't seem to work anymore. >>>> >>>> Thank you in advance. :) > > Microsoft was forced to remove their version of Java because > Microsoft and Sun could not come to terms on a license agreement. However, > you can download and install the Java Runtime Environment from Sun's website > at no charge. Right, but I still have its old Java VM installed since I installed it from 2002 or so before MS yanked it from its Web site. Sun JRE works fine, but if I tell it to disable for IE6.0 SP2 and use old MS Java VM, then it doesn't work. Screen shot: http://img443.imageshack.us/img443/1...pprosp2ff1.gif -- /\___/\ / /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site) | |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net \ _ / Remove ANT from e-mail address: philpi@earthlink.netANT ( ) or ANTant@zimage.com Ant is currently not listening to any songs on his home computer. |
| |||
| Re: MS' Java? Hi, You might first make sure that "msjava.dll" is still located in the System32 folder. If your installation of Windows XP Home||Pro predates SP1a then the MS Java Virtual Machine should be installed on your machine and that file should be located in the System32 folder. Then try reregistering that DLL file by clicking on Start||Run and typing the following into the Run box: regsvr32 Msjava.dll The MS Java Virtual Machine and the Sun Java Virtual Machine can co-exist quite nicely on the same machine, and you should be able to switch between them. I have both virtual machines installed on three Windows XP machines here and have no problems with any of them using either the MSJVM or Sun. As long as you have the latest secure version of the MSJVM(build 3810) installed, you shouldn't have any problems using that Virtual Machinen. Good luck, Donald Anadell "Ant" <philpi@earthlink.netANT> wrote in message news:%23CVKwwOCIHA.5044@TK2MSFTNGP03.phx.gbl... > On 10/6/2007 9:58 PM PT, CB typed: > >>> Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I >>> wonder if MS did something to remove it? >>> >>> >>> On 10/5/2007 1:28 PM PT, ANONYMOUS wrote: >>> >>>> Ms never owned Java. It had the license to bundle it with its IE6 but >>>> since SP1 this was stopped. MS was forced to reissue SP1a in which >>>> Java >>>> was unbundled. If you really need Java then try this link: >>>> >>>> http://java.sun.com/javase/downloads/index.jsp >>>> >>>> Hope this proves useful. >>>> >>>> >>>> Phillip Pi wrote: >>>>> Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 >>>>> recently? >>>>> I noticed my Java doesn't seem to work anymore. >>>>> >>>>> Thank you in advance. :) > > >> Microsoft was forced to remove their version of Java because >> Microsoft and Sun could not come to terms on a license agreement. >> However, you can download and install the Java Runtime Environment from >> Sun's website at no charge. > > Right, but I still have its old Java VM installed since I installed it > from 2002 or so before MS yanked it from its Web site. > > Sun JRE works fine, but if I tell it to disable for IE6.0 SP2 and use old > MS Java VM, then it doesn't work. Screen shot: > http://img443.imageshack.us/img443/1...pprosp2ff1.gif > -- > /\___/\ > / /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site) > | |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net > \ _ / Remove ANT from e-mail address: philpi@earthlink.netANT > ( ) or ANTant@zimage.com > Ant is currently not listening to any songs on his home computer. |
| |||
| Re: MS' Java? (logs) On 10/7/2007 9:33 AM PT, Donald Anadell typed: > You might first make sure that "msjava.dll" is still located in the System32 > folder. I do have it: v5.0.3810.0. Is this correct? > If your installation of Windows XP Home||Pro predates SP1a then the MS Java > Virtual Machine should be installed on your machine and that file should be > located in the System32 folder. > > Then try reregistering that DLL file by clicking on Start||Run and typing > the following into the Run box: > regsvr32 Msjava.dll That didn't work after I got a successful message. > The MS Java Virtual Machine and the Sun Java Virtual Machine can co-exist > quite nicely on the same machine, and you should be able to switch between > them. I have both virtual machines installed on three Windows XP machines > here and have no problems with any of them using either the MSJVM or Sun. > As long as you have the latest secure version of the MSJVM(build 3810) > installed, you shouldn't have any problems using that Virtual Machinen. Yeah, that is what I am trying to do. Have both. Something is broken with my Java. :( Is there a downloadable EXE file to reinstall it? Also, is disabling in control panel's Sun Java JRE v6.0 b3 options not run in MSIE and VM enabled in IE6's options enough? Or did I miss other places? FYI if it even helps. I ran the latest Process Explorer on iexplore.exe: Process PID CPU Description User Name Priority Handles Window Title System Idle Process 0 92.36 NT AUTHORITY\SYSTEM 0 0 Interrupts n/a Hardware Interrupts 0 0 DPCs n/a 0.69 Deferred Procedure Calls 0 0 System 4 0.69 NT AUTHORITY\SYSTEM 8 632 smss.exe 1492 Windows NT Session Manager NT AUTHORITY\SYSTEM 11 21 csrss.exe 1560 0.69 Client Server Runtime Process NT AUTHORITY\SYSTEM 13 513 winlogon.exe 1584 Windows NT Logon Application NT AUTHORITY\SYSTEM 13 584 services.exe 1628 0.69 Services and Controller app NT AUTHORITY\SYSTEM 9 316 svchost.exe 1828 Generic Host Process for Win32 Services NT AUTHORITY\SYSTEM 8 220 svchost.exe 1872 Generic Host Process for Win32 Services NT AUTHORITY\NETWORK SERVICE 8 264 svchost.exe 440 Generic Host Process for Win32 Services NT AUTHORITY\SYSTEM 8 1,631 svchost.exe 616 Generic Host Process for Win32 Services NT AUTHORITY\NETWORK SERVICE 8 98 spoolsv.exe 748 Spooler SubSystem App NT AUTHORITY\SYSTEM 8 130 svchost.exe 952 Generic Host Process for Win32 Services NT AUTHORITY\LOCAL SERVICE 8 173 cygrunsrv.exe 972 MYBOX\SvcCOPSSH 8 81 nTuneService.exe 1044 NVIDIA Access Manager NT AUTHORITY\SYSTEM 8 147 nvsvc32.exe 1060 NVIDIA Driver Helper Service, Version 163.69 NT AUTHORITY\SYSTEM 8 139 PERSFW.exe 1064 Kerio Personal Firewall Engine NT AUTHORITY\SYSTEM 8 73 HPZipm12.exe 376 PML Driver NT AUTHORITY\SYSTEM 8 42 PnkBstrA.exe 392 NT AUTHORITY\SYSTEM 8 46 PnkBstrB.exe 464 NT AUTHORITY\SYSTEM 8 58 tcpsvcs.exe 544 TCP/IP Services Application NT AUTHORITY\SYSTEM 8 74 wdfmgr.exe 660 Windows User Mode Driver Manager NT AUTHORITY\LOCAL SERVICE 8 66 vmware-authd.exe 1168 VMware Authorization Service NT AUTHORITY\SYSTEM 8 138 vmnat.exe 1196 VMware NAT Service NT AUTHORITY\SYSTEM 8 54 vmnetdhcp.exe 1324 VMware VMnet DHCP service NT AUTHORITY\SYSTEM 8 29 alg.exe 252 Application Layer Gateway Service NT AUTHORITY\LOCAL SERVICE 8 104 lsass.exe 1640 LSA Shell (Export Version) NT AUTHORITY\SYSTEM 9 331 sshd.exe 1236 MYBOX\SvcCOPSSH 8 98 explorer.exe 996 Windows Explorer MYBOX\Bob 8 712 ul TaskSwitch.exe 1824 MYBOX\Bob 8 35 CTHELPER.EXE 776 CtHelper Application MYBOX\Bob 8 176 hpcmpmgr.exe 2412 HP Framework Component Manager Service MYBOX\Bob 8 176 hpwuSchd2.exe 2452 Hewlett-Packard Product AssistBob MYBOX\Bob 8 23 hphmon06.exe 2460 HPHmon06 MYBOX\Bob 8 101 rundll32.exe 2500 Run a DLL as an App MYBOX\Bob 8 92 FreeShade.exe 2572 FreeShade MYBOX\Bob 8 22 goScreen.exe 2584 Virtual multi-page monitor manager MYBOX\Bob 8 98 goScreen MCDTray.exe 2600 Media Changer Deluxe SysTray Launcher MYBOX\Bob 8 25 Pickatag.exe 2608 MYBOX\Bob 8 22 PopTray.exe 2624 PopTray E-Mail Notifier MYBOX\Bob 8 150 trillian.exe 788 Trillian MYBOX\Bob 8 340 Trillian SecureCRT.EXE 3532 SecureCRT Application MYBOX\Bob 8 79 Bobian - SecureCRT SecureCRT.EXE 2044 SecureCRT Application MYBOX\Bob 8 153 alpha.zimage.com - SecureCRT notepad.exe 3888 Notepad MYBOX\Bob 8 31 seamonkey.exe 796 SeaMonkey MYBOX\Bob 8 188 Compose: Re: MS' Java? procexp.exe 2880 4.17 Sysinternals Process Explorer MYBOX\Bob 13 422 Process Explorer - Sysinternals: www.sysinternals.com [MYBOX\Bob] iexplore.exe 2800 0.69 Internet Explorer MYBOX\Bob 8 323 Java Tester - What Version of Java Are You Running? - Microsoft Internet Explorer Process: iexplore.exe Pid: 2800 Base Size Mapping Description Version Time Name 0x140000 0x3000 Data <Pagefile Backed> 0x260000 0x3000 Data <Pagefile Backed> 0x263000 0xD000 Data <Pagefile Backed> 0x330000 0x2000 Data <Pagefile Backed> 0x390000 0x2000 Data <Pagefile Backed> 0x3A0000 0x2000 Data <Pagefile Backed> 0x3B0000 0x2000 Data <Pagefile Backed> 0x3C0000 0x2000 Data <Pagefile Backed> 0x3E0000 0x2000 Data <Pagefile Backed> 0x420000 0x5000 Data <Pagefile Backed> 0x425000 0xBB000 Data <Pagefile Backed> 0x4E0000 0x2000 Data <Pagefile Backed> 0x4E2000 0x6000 Data <Pagefile Backed> 0x4F0000 0x103000 Data <Pagefile Backed> 0x600000 0x9C000 Data <Pagefile Backed> 0x69C000 0x264000 Data <Pagefile Backed> 0xA00000 0x51000 Data <Pagefile Backed> 0xA70000 0xE000 Data <Pagefile Backed> 0xB60000 0x2000 Data <Pagefile Backed> 0xEE0000 0x2000 Data <Pagefile Backed> 0x1000000 0x1000 Data <Pagefile Backed> 0x1070000 0x2000 Data <Pagefile Backed> 0x1A00000 0x1000 Data <Pagefile Backed> 0x1B20000 0x2000 Data <Pagefile Backed> 0x1B30000 0x2000 Data <Pagefile Backed> 0x1E50000 0x1000 Data <Pagefile Backed> 0x1F60000 0x1000 Data <Pagefile Backed> 0x1F70000 0x2000 Data <Pagefile Backed> 0x7F6F0000 0x7000 Data <Pagefile Backed> 0x7F6F7000 0xF9000 Data <Pagefile Backed> 0x7FFB0000 0x24000 Data <Pagefile Backed> 0x77DD0000 0x9B000 Image Advanced Windows 32 Base API 5.01.2600.2180 8/4/2004 12:56 AM ADVAPI32.dll 0x77B40000 0x22000 Image Application Compatibility Client Library 5.01.2600.2180 8/4/2004 12:56 AM appHelp.dll 0x20000000 0x12000 Image Shell Browser UI Library 6.00.2900.2180 8/4/2004 12:56 AM browselc.dll 0x75F80000 0xFD000 Image Shell Browser UI Library 6.00.2900.3157 6/15/2007 1:12 AM BROWSEUI.dll 0x76FD0000 0x7F000 Image 2001.12.4414.0308 7/25/2005 9:39 PM CLBCATQ.DLL 0x773D0000 0x103000 Image User Experience Controls Library 6.00.2900.2982 8/25/2006 8:45 AM comctl32.dll 0x5D090000 0x9A000 Image Common Controls Library 5.82.2900.2982 8/25/2006 8:45 AM comctl32.dll 0x763B0000 0x49000 Image Common Dialogs DLL 6.00.2900.2180 8/4/2004 12:56 AM comdlg32.dll 0x77050000 0xC5000 Image 2001.12.4414.0258 8/4/2004 12:56 AM COMRes.dll 0x77A80000 0x94000 Image Crypto API32 5.131.2600.2180 8/4/2004 12:56 AM CRYPT32.dll 0x754D0000 0x80000 Image Microsoft Trust UI Provider 5.131.2600.2180 8/4/2004 12:56 AM CRYPTUI.dll 0x76600000 0x1D000 Image Offline Network Agent 5.01.2600.2180 8/4/2004 12:56 AM CSCDLL.dll 0x77A20000 0x54000 Image Client Side Caching UI 5.01.2600.2180 8/4/2004 12:56 AM cscui.dll 0x2000000 0x6000 Image ctagent 1.00.0000.0012 8/11/2006 2:56 PM ctagent.dll 0x350000 0x3000 Data 8/23/2001 5:00 AM ctype.nls 0x76F20000 0x27000 Image DNS Client API DLL 5.01.2600.2938 6/26/2006 10:37 AM DNSAPI.dll 0x16000000 0x28000 Image Trillian Event Control 3.01.0007.0000 7/19/2007 12:00 AM events.dll 0x69450000 0x16000 Image Windows Error Reporting 5.01.2600.2180 8/4/2004 12:56 AM faultrep.dll 0x10000000 0x1A000 Image FreeShade 1.00.0000.0004 9/27/2001 1:16 AM FreeShade.dll 0x77F10000 0x47000 Image GDI Client DLL 5.01.2600.3159 6/19/2007 6:31 AM GDI32.dll 0x662B0000 0x58000 Image Home Networking Configuration Manager 5.01.2600.2180 8/4/2004 12:56 AM hnetcfg.dll 0x400000 0x19000 Image Internet Explorer 6.00.2900.2180 8/4/2004 12:56 AM iexplore.exe 0x76C90000 0x28000 Image Windows NT Image Helper 5.01.2600.2180 8/4/2004 12:56 AM IMAGEHLP.dll 0x66880000 0xC000 Image IE plugin image decoder support DLL 6.00.2900.2180 8/4/2004 12:56 AM ImgUtil.dll 0x76390000 0x1D000 Image Windows XP IMM32 API Client DLL 5.01.2600.2180 8/4/2004 12:56 AM IMM32.DLL 0xB20000 0xC000 Data 10/9/2007 6:11 AM index.dat 0xB70000 0x174000 Data 10/9/2007 6:11 AM index.dat 0xCF0000 0x38000 Data 10/9/2007 6:11 AM index.dat 0x2EB0000 0x8000 Data 10/9/2007 6:11 AM index.dat 0x76D60000 0x19000 Image IP Helper API 5.01.2600.2912 5/19/2006 5:59 AM iphlpapi.dll 0x7C800000 0xF5000 Image Windows NT BASE API Client DLL 5.01.2600.3119 4/16/2007 8:52 AM kernel32.dll 0x290000 0x3D000 Data 7/17/2004 11:48 AM locale.nls 0x629C0000 0x9000 Image Language Pack 5.01.2600.2180 8/4/2004 12:56 AM LPK.DLL 0x2510000 0xA5000 Data 8/23/2001 5:00 AM mlang.dat 0x75CF0000 0x91000 Image Multi Language Support DLL 6.00.2900.2180 8/4/2004 12:56 AM mlang.dll 0x77B20000 0x12000 Image ASN.1 Runtime APIs 5.01.2600.2180 8/4/2004 12:56 AM MSASN1.dll 0x74720000 0x4B000 Image MSCTF Server DLL 5.01.2600.2180 8/4/2004 12:56 AM MSCTF.dll 0x755C0000 0x2E000 Image Microsoft Text Frame Work Service IME 5.01.2600.2180 8/4/2004 12:56 AM msctfime.ime 0x4AA00000 0x15000 Image Active Debugging Proxy/Stub 6.00.0000.8424 11/15/1999 10:46 AM MSDBG.DLL 0x7DC30000 0x2F2000 Image Microsoft (R) HTML Viewer 6.00.2900.3157 6/15/2007 1:12 AM mshtml.dll 0x7D1E0000 0x2BE000 Image Windows Installer 3.01.4000.4039 4/18/2007 9:12 AM msi.dll 0x76380000 0x5000 Image GDIEXT Client DLL 5.01.2600.2180 8/4/2004 12:56 AM msimg32.dll 0x2DC0000 0x4000 Data 6/4/2004 8:46 PM MSIMGSIZ.DAT 0x746F0000 0x2A000 Image Active IMM Server DLL 5.01.2600.2180 8/4/2004 12:56 AM msimtf.dll 0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM msjava.dll 0x746C0000 0x27000 Image Microsoft Line Services library file 3.10.0349.0000 8/23/2001 5:00 AM msls31.dll 0x77C70000 0x23000 Image Microsoft Authentication Package v1.0 5.01.2600.2180 8/4/2004 12:56 AM msv1_0.dll 0x7C340000 0x56000 Image Microsoft® C Runtime Library 7.10.3052.0004 9/25/2007 1:25 AM MSVCR71.dll 0x77C10000 0x58000 Image Windows NT CRT DLL 7.00.2600.2180 8/4/2004 12:56 AM msvcrt.dll 0x71A50000 0x3F000 Image Microsoft Windows Sockets 2.0 Service Provider 5.01.2600.2180 8/4/2004 12:56 AM mswsock.dll 0x5B860000 0x54000 Image Net Win32 API DLL 5.01.2600.2976 8/17/2006 5:28 AM NETAPI32.dll 0x7C900000 0xB0000 Image NT Layer DLL 5.01.2600.2180 8/4/2004 12:56 AM ntdll.dll 0x774E0000 0x13D000 Image Microsoft OLE for Windows 5.01.2600.2726 7/25/2005 9:39 PM ole32.dll 0x77120000 0x8B000 Image 5.01.2600.3139 5/17/2007 4:28 AM OLEAUT32.dll 0x5EDD0000 0x17000 Image 5.01.2600.2180 8/4/2004 12:56 AM olepro32.dll 0xFD0000 0x2F000 Image Orbitcth 2.02.0000.0001 9/20/2007 3:40 PM orbitcth.dll 0x5E310000 0xC000 Image IE PNG plugin image decoder 6.00.2900.3157 6/15/2007 1:12 AM pngfilt.dll 0x76BF0000 0xB000 Image Process Status Helper 5.01.2600.2180 8/4/2004 12:56 AM PSAPI.DLL 0x76FC0000 0x6000 Image Remote Access AutoDial Helper 5.01.2600.2938 6/26/2006 10:37 AM rasadhlp.dll 0x76EE0000 0x3C000 Image Remote Access API 5.01.2600.2180 8/4/2004 12:56 AM RASAPI32.DLL 0x76E90000 0x12000 Image Remote Access Connection Manager 5.01.2600.2180 8/4/2004 12:56 AM rasman.dll 0x77E70000 0x91000 Image Remote Procedure Call Runtime 5.01.2600.2180 8/4/2004 12:56 AM RPCRT4.dll 0xFFD0000 0x28000 Image Microsoft Enhanced Cryptographic Provider 5.01.2600.2161 8/3/2004 10:31 PM rsaenh.dll 0x76E80000 0xE000 Image Routing Utilities 5.01.2600.2180 8/4/2004 12:56 AM rtutils.dll 0x1080000 0x11A000 Image SBSD IE Protection 1.05.0000.0008 8/31/2007 4:46 PM SDHelper.dll 0x77FE0000 0x11000 Image Security Support Provider Interface 5.01.2600.2180 8/4/2004 12:56 AM Secur32.dll 0x722B0000 0x5000 Image SENS Connectivity API DLL 5.01.2600.2180 8/4/2004 12:56 AM sensapi.dll 0x77920000 0xF3000 Image Windows Setup API 5.01.2600.2180 8/4/2004 12:56 AM SETUPAPI.dll 0x1A10000 0x88000 Image Shell Doc Object and Control Library 6.00.2900.2180 8/4/2004 12:56 AM shdoclc.dll 0x7E290000 0x171000 Image Shell Doc Object and Control Library 6.00.2900.3157 6/15/2007 1:12 AM SHDOCVW.dll 0x7C9C0000 0x815000 Image Windows Shell Common Dll 6.00.2900.3051 12/19/2006 2:52 PM SHELL32.dll 0x77F60000 0x76000 Image Shell Light-weight Utility Library 6.00.2900.3157 6/15/2007 1:12 AM SHLWAPI.dll 0x2D0000 0x41000 Data 8/23/2001 5:00 AM sortkey.nls 0x320000 0x6000 Data 7/17/2004 11:48 AM sorttbls.nls 0x6D7C0000 0x79000 Image Java(TM) Platform SE binary 6.00.0030.0005 9/25/2007 1:11 AM ssv.dll 0x75E90000 0xB0000 Image Fusion 2.5 5.01.2600.3019 10/19/2006 6:56 AM SXS.DLL 0x76EB0000 0x2F000 Image Microsoft® Windows(TM) Telephony API Client DLL 5.01.2600.2180 8/4/2004 12:56 AM TAPI32.dll 0x270000 0x16000 Data 8/23/2001 5:00 AM unicode.nls 0x7E1E0000 0xA2000 Image OLE32 Extensions for Win32 6.00.2900.3157 6/15/2007 1:12 AM urlmon.dll 0x7E410000 0x90000 Image Windows XP USER API Client DLL 5.01.2600.3099 3/8/2007 8:36 AM USER32.dll 0x769C0000 0xB3000 Image Userenv 5.01.2600.2180 8/4/2004 12:56 AM USERENV.dll 0x74D90000 0x6B000 Image Uniscribe Unicode script processor 1.420.2600.2180 8/4/2004 12:56 AM USP10.dll 0x5AD70000 0x38000 Image Microsoft UxTheme Library 6.00.2900.2180 8/4/2004 12:56 AM uxtheme.dll 0x77C00000 0x8000 Image Version Checking and File Installation Libraries 5.01.2600.2180 8/4/2004 12:56 AM VERSION.dll 0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000 2/28/2003 6:26 PM VMHELPER.DLL 0x771B0000 0xAA000 Image Internet Extensions for Win32 6.00.2900.3164 6/26/2007 7:35 AM WININET.dll 0x76B40000 0x2D000 Image MCI API DLL 5.01.2600.2180 8/4/2004 12:56 AM WINMM.dll 0x76360000 0x10000 Image Winstation Library 5.01.2600.2180 8/4/2004 12:56 AM WINSTA.dll 0x76C30000 0x2E000 Image Microsoft Trust Verification APIs 5.131.2600.2180 8/4/2004 12:56 AM WINTRUST.dll 0x76F60000 0x2C000 Image Win32 LDAP API DLL 5.01.2600.2180 8/4/2004 12:56 AM WLDAP32.dll 0x71AB0000 0x17000 Image Windows Socket 2.0 32-Bit DLL 5.01.2600.2180 8/4/2004 12:56 AM WS2_32.dll 0x71AA0000 0x8000 Image Windows Socket 2.0 Helper for Windows NT 5.01.2600.2180 8/4/2004 12:56 AM WS2HELP.dll 0x71A90000 0x8000 Image Windows Sockets Helper DLL 5.01.2600.2180 8/4/2004 12:56 AM wshtcpip.dll 0x71AD0000 0x9000 Image Windows Socket 32-Bit DLL 5.01.2600.2180 8/4/2004 12:56 AM wsock32.dll 0x76F50000 0x8000 Image Windows Terminal Server SDK APIs 5.01.2600.2180 8/4/2004 12:56 AM WTSAPI32.dll 0x1420000 0x2C5000 Image Service Pack 2 Messages 5.01.2600.2180 8/4/2004 12:56 AM xpsp2res.dll As you can see, IE loaded its MS Java stuff: 0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM msjava.dll 0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000 2/28/2003 6:26 PM VMHELPER.DLL I also ran Process Monitor to log. I did a search and found these related to MS Java: 37243 08:27.6 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll 37244 08:27.6 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll 37245 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37269 08:27.6 iexplore.exe 960 RegQueryValue HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default) SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll 37270 08:27.6 iexplore.exe 960 RegQueryKey HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 SUCCESS Query: Name 37271 08:27.6 iexplore.exe 960 RegOpenKey HKCU\Software\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 NAME NOT FOUND Desired Access: Maximum Allowed 37272 08:27.6 iexplore.exe 960 RegQueryValue HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default) SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll 37273 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37274 08:27.6 iexplore.exe 960 RegQueryKey HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name 37339 08:27.7 iexplore.exe 960 RegQueryValue HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default) SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll 37340 08:27.7 iexplore.exe 960 RegCloseKey HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 SUCCESS 37341 08:27.7 iexplore.exe 960 RegQueryKey HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name 37385 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37386 08:27.7 iexplore.exe 960 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened 37387 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE 37388 08:27.7 iexplore.exe 960 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37389 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37390 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37391 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37392 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37393 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37394 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37395 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37396 08:27.7 iexplore.exe 960 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened 37397 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE 37398 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH C:\WINDOWS\system32\msjava.dll SUCCESS 37399 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_CC_FLUSH C:\WINDOWS\system32\msjava.dll SUCCESS 37400 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37401 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37402 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37403 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37404 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37405 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37406 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37407 08:27.7 iexplore.exe 960 Load Image C:\WINDOWS\system32\msjava.dll SUCCESS Image Base: 0x7c000000, Image Size: 0xea000 37408 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msjava.dll SUCCESS Desired Access: Read 37409 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msjava.dll\CheckAppHelp SUCCESS Type: REG_DWORD, Length: 4, Data: 1 37410 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msjava.dll SUCCESS 37428 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: Opened 37429 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter: msjava.dll, 2: msjava.dll 37430 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS 37431 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS 37432 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37433 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\ SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: Opened 37434 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS SUCCESS Type: QueryDirectory, Filter: WINDOWS, 2: WINDOWS 37435 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\ SUCCESS 37436 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\ SUCCESS 37437 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: Opened 37438 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS\system32 SUCCESS Type: QueryDirectory, Filter: system32, 2: system32 37439 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS SUCCESS 37440 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS SUCCESS 37441 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: Opened 37442 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter: msjava.dll, 2: msjava.dll 37443 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS 37444 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS 37445 08:27.7 csrss.exe 1560 RegOpenKey HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read, WOW64_64Key 37446 08:27.7 csrss.exe 1560 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll NAME NOT FOUND Length: 1,024 37447 08:27.7 csrss.exe 1560 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers SUCCESS 37448 08:27.7 csrss.exe 1560 RegOpenKey HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read, WOW64_64Key 37449 08:27.7 csrss.exe 1560 RegQueryValue HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll NAME NOT FOUND Length: 1,024 37450 08:27.7 csrss.exe 1560 RegCloseKey HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers SUCCESS 37451 08:27.7 csrss.exe 1560 RegOpenKey HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\msjava.dll NAME NOT FOUND Desired Access: Read, WOW64_64Key 37452 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37453 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37454 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: Opened 37455 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE 37456 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37457 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37458 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37459 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37460 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37461 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37462 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37463 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37464 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: Opened 37465 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY 37466 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37467 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37468 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37469 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37470 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37471 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37472 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37473 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37474 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: Opened 37475 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE 37476 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37477 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37478 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37479 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37480 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37481 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37482 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37483 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37484 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: Opened 37485 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY 37486 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37487 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37488 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37489 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37490 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37491 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37492 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37493 08:27.7 csrss.exe 1560 RegOpenKey HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS Desired Access: Read, WOW64_64Key 37494 08:27.7 csrss.exe 1560 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447} NAME NOT FOUND Length: 1,024 37495 08:27.7 csrss.exe 1560 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS 37496 08:27.7 csrss.exe 1560 RegOpenKey HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS Desired Access: Read, WOW64_64Key 37497 08:27.7 csrss.exe 1560 RegQueryValue HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447} NAME NOT FOUND Length: 1,024 37498 08:27.7 csrss.exe 1560 RegCloseKey HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS 37499 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS 37500 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS 37501 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37502 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\JUICERPATH NAME NOT FOUND Length: 144 37503 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37504 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\Program Files\Internet Explorer\VMHELPER.DLL NAME NOT FOUND 37505 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\vmhelper.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:26:27 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 12/25/2006 11:53:27 AM, AllocationSize: 290,816, EndOfFile: 286,992, FileAttributes: n/a 37506 08:27.7 iexplore.exe 960 IRP_MJ_CREATE C:\WINDOWS\system32\vmhelper.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened 37507 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE 37508 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH C:\WINDOWS\system32\vmhelper.dll SUCCESS 37509 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_CC_FLUSH C:\WINDOWS\system32\vmhelper.dll SUCCESS 37510 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\vmhelper.dll SUCCESS 37511 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType: SyncTypeOther 37512 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\vmhelper.dll SUCCESS 37513 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\vmhelper.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\vmhelper.dll 37514 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP C:\WINDOWS\system32\vmhelper.dll SUCCESS 37515 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE C:\WINDOWS\system32\vmhelper.dll SUCCESS 37516 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\vmhelper.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\vmhelper.dll 37517 08:27.7 iexplore.exe 960 Load Image C:\WINDOWS\system32\vmhelper.dll SUCCESS Image Base: 0x7c520000, Image Size: 0x48000 37518 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\VMHELPER.DLL NAME NOT FOUND Desired Access: Read 37519 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37520 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\EnableFI NAME NOT FOUND Length: 144 37521 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37522 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37523 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\CPUType NAME NOT FOUND Length: 144 37524 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37525 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37526 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\EnableGCHeapCheck NAME NOT FOUND Length: 144 37527 08:27.7 Procmon.exe 2248 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened 37528 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37529 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37530 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\EnableGCHeapCheck NAME NOT FOUND Length: 144 37531 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37532 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37533 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\DisableGCClassCollection NAME NOT FOUND Length: 144 37534 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37535 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37536 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\InitStaticsEarly NAME NOT FOUND Length: 144 37537 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37538 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37539 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\EnableJIT SUCCESS Type: REG_BINARY, Length: 4, Data: 01 00 00 00 37540 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37541 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37542 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37543 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\DoNotJitList NAME NOT FOUND Length: 144 37544 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37545 08:27.7 Procmon.exe 2248 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY 37546 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37547 08:27.7 Procmon.exe 2248 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37548 08:27.7 Procmon.exe 2248 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37549 08:27.7 Procmon.exe 2248 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37550 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37551 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\Verification NAME NOT FOUND Length: 144 37552 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37553 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37554 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\VerificationOptions NAME NOT FOUND Length: 144 37555 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37556 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37557 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\FileURLsAreTrusted NAME NOT FOUND Length: 144 37558 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37559 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37560 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37561 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: C:\WINDOWS\java\classes;. 37562 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: C:\WINDOWS\java\classes;. 37563 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: C:\WINDOWS\java\classes;. 37564 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: C:\WINDOWS\java\classes;. 37565 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37566 08:27.7 Procmon.exe 2248 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37567 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\java\classes PATH NOT FOUND 37568 08:27.7 Procmon.exe 2248 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37569 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\Documents and Settings\Ant\Desktop SUCCESS CreationTime: 1/19/2002 10:50:26 PM, LastAccessTime: 10/6/2007 9:42:36 AM, LastWriteTime: 10/6/2007 9:42:36 AM, ChangeTime: 10/6/2007 9:42:36 AM, AllocationSize: 0, EndOfFile: 0, FileAttributes: D 37570 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37571 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: 37572 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: 37573 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: 37574 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: 37575 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37576 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37577 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\LibsDirectory NAME NOT FOUND Length: 144 37578 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37579 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37580 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib 37581 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib 37582 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib 37583 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib 37584 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37585 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\java\trustlib PATH NOT FOUND 37586 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37587 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\SourcePath NAME NOT FOUND Length: 144 37588 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37589 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37590 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\DevClassPath NAME NOT FOUND Length: 144 37591 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37592 08:27.7 iexplore.exe 960 Thread Create SUCCESS Thread ID: 3528 37593 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37594 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\EnableContexts NAME NOT FOUND Length: 144 37595 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37596 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37597 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\FTMChecksDisabled NAME NOT FOUND Length: 144 37598 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37599 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37600 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\FTMChecksDisabledForADO NAME NOT FOUND Length: 144 37601 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37602 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM\Debug NAME NOT FOUND Desired Access: Query Value 37603 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM\MSDebug SUCCESS Desired Access: Query Value 37604 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM\MSDEBUG SUCCESS 37605 08:27.7 iexplore.exe 960 Thread Create SUCCESS Thread ID: 2844 42516 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM\ActiveXDebug NAME NOT FOUND Desired Access: Query Value 42517 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 42518 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\DebuggingFlags NAME NOT FOUND Length: 144 42519 08:27.8 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 42520 08:27.8 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 42521 08:27.8 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\EnableEventMonitors NAME NOT FOUND Length: 144 42522 08:27.8 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 42523 08:27.8 iexplore.exe 960 RegCreateKey HKLM\Software\Microsoft\Code Store Database\Global Namespace\Java Packages SUCCESS Desired Access: Maximum Allowed 42524 08:27.8 iexplore.exe 960 RegCreateKey HKLM\Software\Microsoft\Code Store Database\Application Namespaces SUCCESS Desired Access: Maximum Allowed 42525 08:27.8 iexplore.exe 960 RegCreateKey HKLM\SOFTWARE\Microsoft\Code Store Database SUCCESS Desired Access: Maximum Allowed 42526 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages SUCCESS Desired Access: Maximum Allowed 42527 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM\Pending Deletions NAME NOT FOUND Desired Access: Maximum Allowed 42528 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang SUCCESS Desired Access: Maximum Allowed 42529 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42530 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42531 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42532 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42533 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42534 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49 PM, LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004 12:56:44 AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize: 294,912, EndOfFile: 294,400, FileAttributes: n/a 42535 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42536 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Info SUCCESS Type: REG_BINARY, Length: 12, Data: 00 00 05 00 E2 0E 00 00 1A 00 00 00 42537 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Info SUCCESS Type: REG_BINARY, Length: 12, Data: 00 00 05 00 E2 0E 00 00 1A 00 00 00 42538 08:27.8 iexplore.exe 960 IRP_MJ_CREATE C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP PATH NOT FOUND Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a 42539 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49 PM, LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004 12:56:44 AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize: 294,912, EndOfFile: 294,400, FileAttributes: n/a 42540 08:27.8 iexplore.exe 960 IRP_MJ_CREATE C:\Documents and Settings\Ant\Desktop\java\lang\ PATH NOT FOUND Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a 42541 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM\Compatibility NAME NOT FOUND Desired Access: Query Value 42542 08:27.8 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM\Compatibility NAME NOT FOUND Desired Access: Query Value 42543 08:27.8 iexplore.exe 960 Thread Exit SUCCESS User Time: 0.0000000, Kernel Time: 0.0156250 44010 08:27.9 iexplore.exe 960 RegOpenKey HKCU\Software\Classes\MIME\Database\Content Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read 44011 08:27.9 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS Desired Access: Read 44012 08:27.9 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS Query: Name 44013 08:27.9 iexplore.exe 960 RegOpenKey HKCU\Software\Classes\MIME\Database\Content Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Maximum Allowed 44014 08:27.9 iexplore.exe 960 RegQueryValue HKCR\MIME\Database\Content Type\application/x-java-jnlp-file\Image Filter CLSID NAME NOT FOUND Length: 144 44015 08:27.9 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS 46361 08:28.0 iexplore.exe 960 RegOpenKey HKCU\Software\Classes\MIME\Database\Content Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read 46362 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS Desired Access: Read 46363 08:28.0 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS Query: Name 46364 08:28.0 iexplore.exe 960 RegOpenKey HKCU\Software\Classes\MIME\Database\Content Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read 46365 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read 46366 08:28.0 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS I hope that helped. -- "We're all ants. I'm a glittery little ant." --Alanis Morissette /\___/\ / /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site) | |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net \ _ / Remove ANT from e-mail address: philpi@earthlink.netANT ( ) or ANTant@zimage.com Ant is currently not listening to any songs on his home computer. |
| |||
| Re: MS' Java? On 10/7/2007 9:33 AM PT, Donald Anadell typed: > You might first make sure that "msjava.dll" is still located in the System32 > folder. I do have it: v5.0.3810.0. Is this correct? > If your installation of Windows XP Home||Pro predates SP1a then the MS Java > Virtual Machine should be installed on your machine and that file should be > located in the System32 folder. > > Then try reregistering that DLL file by clicking on Start||Run and typing > the following into the Run box: > regsvr32 Msjava.dll That didn't fix the problem after I got a successful message. > The MS Java Virtual Machine and the Sun Java Virtual Machine can co-exist > quite nicely on the same machine, and you should be able to switch between > them. I have both virtual machines installed on three Windows XP machines > here and have no problems with any of them using either the MSJVM or Sun. > As long as you have the latest secure version of the MSJVM(build 3810) > installed, you shouldn't have any problems using that Virtual Machinen. Yeah, that is what I am trying to do. Have both. Something is broken with my Java. :( Is there a downloadable EXE file to reinstall it? Also, is disabling in control panel's Sun Java JRE v6.0 b3 options not run in MSIE and VM enabled in IE6's options enough? Or did I miss other places? Logs if they help. I ran the latest Process Explorer on iexplore.exe: Process PID CPU Description User Name Priority Handles Window Title System Idle Process 0 92.36 NT AUTHORITY\SYSTEM 0 0 Interrupts n/a Hardware Interrupts 0 0 DPCs n/a 0.69 Deferred Procedure Calls 0 0 System 4 0.69 NT AUTHORITY\SYSTEM 8 632 smss.exe 1492 Windows NT Session Manager NT AUTHORITY\SYSTEM 11 21 csrss.exe 1560 0.69 Client Server Runtime Process NT AUTHORITY\SYSTEM 13 513 winlogon.exe 1584 Windows NT Logon Application NT AUTHORITY\SYSTEM 13 584 services.exe 1628 0.69 Services and Controller app NT AUTHORITY\SYSTEM 9 316 svchost.exe 1828 Generic Host Process for Win32 Services NT AUTHORITY\SYSTEM 8 220 svchost.exe 1872 Generic Host Process for Win32 Services NT AUTHORITY\NETWORK SERVICE 8 264 svchost.exe 440 Generic Host Process for Win32 Services NT AUTHORITY\SYSTEM 8 1,631 svchost.exe 616 Generic Host Process for Win32 Services NT AUTHORITY\NETWORK SERVICE 8 98 spoolsv.exe 748 Spooler SubSystem App NT AUTHORITY\SYSTEM 8 130 svchost.exe 952 Generic Host Process for Win32 Services NT AUTHORITY\LOCAL SERVICE 8 173 cygrunsrv.exe 972 MYBOX\SvcCOPSSH 8 81 nTuneService.exe 1044 NVIDIA Access Manager NT AUTHORITY\SYSTEM 8 147 nvsvc32.exe 1060 NVIDIA Driver Helper Service, Version 163.69 NT AUTHORITY\SYSTEM 8 139 PERSFW.exe 1064 Kerio Personal Firewall Engine NT AUTHORITY\SYSTEM 8 73 HPZipm12.exe 376 PML Driver NT AUTHORITY\SYSTEM 8 42 PnkBstrA.exe 392 NT AUTHORITY\SYSTEM 8 46 PnkBstrB.exe 464 NT AUTHORITY\SYSTEM 8 58 tcpsvcs.exe 544 TCP/IP Services Application NT AUTHORITY\SYSTEM 8 74 wdfmgr.exe 660 Windows User Mode Driver Manager NT AUTHORITY\LOCAL SERVICE 8 66 vmware-authd.exe 1168 VMware Authorization Service NT AUTHORITY\SYSTEM 8 138 vmnat.exe 1196 VMware NAT Service NT AUTHORITY\SYSTEM 8 54 vmnetdhcp.exe 1324 VMware VMnet DHCP service NT AUTHORITY\SYSTEM 8 29 alg.exe 252 Application Layer Gateway Service NT AUTHORITY\LOCAL SERVICE 8 104 lsass.exe 1640 LSA Shell (Export Version) NT AUTHORITY\SYSTEM 9 331 sshd.exe 1236 MYBOX\SvcCOPSSH 8 98 explorer.exe 996 Windows Explorer MYBOX\Bob 8 712 ul TaskSwitch.exe 1824 MYBOX\Bob 8 35 CTHELPER.EXE 776 CtHelper Application MYBOX\Bob 8 176 hpcmpmgr.exe 2412 HP Framework Component Manager Service MYBOX\Bob 8 176 hpwuSchd2.exe 2452 Hewlett-Packard Product AssistBob MYBOX\Bob 8 23 hphmon06.exe 2460 HPHmon06 MYBOX\Bob 8 101 rundll32.exe 2500 Run a DLL as an App MYBOX\Bob 8 92 FreeShade.exe 2572 FreeShade MYBOX\Bob 8 22 goScreen.exe 2584 Virtual multi-page monitor manager MYBOX\Bob 8 98 goScreen MCDTray.exe 2600 Media Changer Deluxe SysTray Launcher MYBOX\Bob 8 25 Pickatag.exe 2608 MYBOX\Bob 8 22 PopTray.exe 2624 PopTray E-Mail Notifier MYBOX\Bob 8 150 trillian.exe 788 Trillian MYBOX\Bob 8 340 Trillian SecureCRT.EXE 3532 SecureCRT Application MYBOX\Bob 8 79 Bobian - SecureCRT SecureCRT.EXE 2044 SecureCRT Application MYBOX\Bob 8 153 alpha.zimage.com - SecureCRT notepad.exe 3888 Notepad MYBOX\Bob 8 31 seamonkey.exe 796 SeaMonkey MYBOX\Bob 8 188 Compose: Re: MS' Java? procexp.exe 2880 4.17 Sysinternals Process Explorer MYBOX\Bob 13 422 Process Explorer - Sysinternals: www.sysinternals.com [MYBOX\Bob] iexplore.exe 2800 0.69 Internet Explorer MYBOX\Bob 8 323 Java Tester - What Version of Java Are You Running? - Microsoft Internet Explorer Process: iexplore.exe Pid: 2800 Base Size Mapping Description Version Time Name 0x140000 0x3000 Data <Pagefile Backed> 0x260000 0x3000 Data <Pagefile Backed> 0x263000 0xD000 Data <Pagefile Backed> 0x330000 0x2000 Data <Pagefile Backed> 0x390000 0x2000 Data <Pagefile Backed> 0x3A0000 0x2000 Data <Pagefile Backed> 0x3B0000 0x2000 Data <Pagefile Backed> 0x3C0000 0x2000 Data <Pagefile Backed> 0x3E0000 0x2000 Data <Pagefile Backed> 0x420000 0x5000 Data <Pagefile Backed> 0x425000 0xBB000 Data <Pagefile Backed> 0x4E0000 0x2000 Data <Pagefile Backed> 0x4E2000 0x6000 Data <Pagefile Backed> 0x4F0000 0x103000 Data <Pagefile Backed> 0x600000 0x9C000 Data <Pagefile Backed> 0x69C000 0x264000 Data <Pagefile Backed> 0xA00000 0x51000 Data <Pagefile Backed> 0xA70000 0xE000 Data <Pagefile Backed> 0xB60000 0x2000 Data <Pagefile Backed> 0xEE0000 0x2000 Data <Pagefile Backed> 0x1000000 0x1000 Data <Pagefile Backed> 0x1070000 0x2000 Data <Pagefile Backed> 0x1A00000 0x1000 Data <Pagefile Backed> 0x1B20000 0x2000 Data <Pagefile Backed> 0x1B30000 0x2000 Data <Pagefile Backed> 0x1E50000 0x1000 Data <Pagefile Backed> 0x1F60000 0x1000 Data <Pagefile Backed> 0x1F70000 0x2000 Data <Pagefile Backed> 0x7F6F0000 0x7000 Data <Pagefile Backed> 0x7F6F7000 0xF9000 Data <Pagefile Backed> 0x7FFB0000 0x24000 Data <Pagefile Backed> 0x77DD0000 0x9B000 Image Advanced Windows 32 Base API 5.01.2600.2180 8/4/2004 12:56 AM ADVAPI32.dll 0x77B40000 0x22000 Image Application Compatibility Client Library 5.01.2600.2180 8/4/2004 12:56 AM appHelp.dll 0x20000000 0x12000 Image Shell Browser UI Library 6.00.2900.2180 8/4/2004 12:56 AM browselc.dll 0x75F80000 0xFD000 Image Shell Browser UI Library 6.00.2900.3157 6/15/2007 1:12 AM BROWSEUI.dll 0x76FD0000 0x7F000 Image 2001.12.4414.0308 7/25/2005 9:39 PM CLBCATQ.DLL 0x773D0000 0x103000 Image User Experience Controls Library 6.00.2900.2982 8/25/2006 8:45 AM comctl32.dll 0x5D090000 0x9A000 Image Common Controls Library 5.82.2900.2982 8/25/2006 8:45 AM comctl32.dll 0x763B0000 0x49000 Image Common Dialogs DLL 6.00.2900.2180 8/4/2004 12:56 AM comdlg32.dll 0x77050000 0xC5000 Image 2001.12.4414.0258 8/4/2004 12:56 AM COMRes.dll 0x77A80000 0x94000 Image Crypto API32 5.131.2600.2180 8/4/2004 12:56 AM CRYPT32.dll 0x754D0000 0x80000 Image Microsoft Trust UI Provider 5.131.2600.2180 8/4/2004 12:56 AM CRYPTUI.dll 0x76600000 0x1D000 Image Offline Network Agent 5.01.2600.2180 8/4/2004 12:56 AM CSCDLL.dll 0x77A20000 0x54000 Image Client Side Caching UI 5.01.2600.2180 8/4/2004 12:56 AM cscui.dll 0x2000000 0x6000 Image ctagent 1.00.0000.0012 8/11/2006 2:56 PM ctagent.dll 0x350000 0x3000 Data 8/23/2001 5:00 AM ctype.nls 0x76F20000 0x27000 Image DNS Client API DLL 5.01.2600.2938 6/26/2006 10:37 AM DNSAPI.dll 0x16000000 0x28000 Image Trillian Event Control 3.01.0007.0000 7/19/2007 12:00 AM events.dll 0x69450000 0x16000 Image Windows Error Reporting 5.01.2600.2180 8/4/2004 12:56 AM faultrep.dll 0x10000000 0x1A000 Image FreeShade 1.00.0000.0004 9/27/2001 1:16 AM FreeShade.dll 0x77F10000 0x47000 Image GDI Client DLL 5.01.2600.3159 6/19/2007 6:31 AM GDI32.dll 0x662B0000 0x58000 Image Home Networking Configuration Manager 5.01.2600.2180 8/4/2004 12:56 AM hnetcfg.dll 0x400000 0x19000 Image Internet Explorer 6.00.2900.2180 8/4/2004 12:56 AM iexplore.exe 0x76C90000 0x28000 Image Windows NT Image Helper 5.01.2600.2180 8/4/2004 12:56 AM IMAGEHLP.dll 0x66880000 0xC000 Image IE plugin image decoder support DLL 6.00.2900.2180 8/4/2004 12:56 AM ImgUtil.dll 0x76390000 0x1D000 Image Windows XP IMM32 API Client DLL 5.01.2600.2180 8/4/2004 12:56 AM IMM32.DLL 0xB20000 0xC000 Data 10/9/2007 6:11 AM index.dat 0xB70000 0x174000 Data 10/9/2007 6:11 AM index.dat 0xCF0000 0x38000 Data 10/9/2007 6:11 AM index.dat 0x2EB0000 0x8000 Data 10/9/2007 6:11 AM index.dat 0x76D60000 0x19000 Image IP Helper API 5.01.2600.2912 5/19/2006 5:59 AM iphlpapi.dll 0x7C800000 0xF5000 Image Windows NT BASE API Client DLL 5.01.2600.3119 4/16/2007 8:52 AM kernel32.dll 0x290000 0x3D000 Data 7/17/2004 11:48 AM locale.nls 0x629C0000 0x9000 Image Language Pack 5.01.2600.2180 8/4/2004 12:56 AM LPK.DLL 0x2510000 0xA5000 Data 8/23/2001 5:00 AM mlang.dat 0x75CF0000 0x91000 Image Multi Language Support DLL 6.00.2900.2180 8/4/2004 12:56 AM mlang.dll 0x77B20000 0x12000 Image ASN.1 Runtime APIs 5.01.2600.2180 8/4/2004 12:56 AM MSASN1.dll 0x74720000 0x4B000 Image MSCTF Server DLL 5.01.2600.2180 8/4/2004 12:56 AM MSCTF.dll 0x755C0000 0x2E000 Image Microsoft Text Frame Work Service IME 5.01.2600.2180 8/4/2004 12:56 AM msctfime.ime 0x4AA00000 0x15000 Image Active Debugging Proxy/Stub 6.00.0000.8424 11/15/1999 10:46 AM MSDBG.DLL 0x7DC30000 0x2F2000 Image Microsoft (R) HTML Viewer 6.00.2900.3157 6/15/2007 1:12 AM mshtml.dll 0x7D1E0000 0x2BE000 Image Windows Installer 3.01.4000.4039 4/18/2007 9:12 AM msi.dll 0x76380000 0x5000 Image GDIEXT Client DLL 5.01.2600.2180 8/4/2004 12:56 AM msimg32.dll 0x2DC0000 0x4000 Data 6/4/2004 8:46 PM MSIMGSIZ.DAT 0x746F0000 0x2A000 Image Active IMM Server DLL 5.01.2600.2180 8/4/2004 12:56 AM msimtf.dll 0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM msjava.dll 0x746C0000 0x27000 Image Microsoft Line Services library file 3.10.0349.0000 8/23/2001 5:00 AM msls31.dll 0x77C70000 0x23000 Image Microsoft Authentication Package v1.0 5.01.2600.2180 8/4/2004 12:56 AM msv1_0.dll 0x7C340000 0x56000 Image Microsoft® C Runtime Library 7.10.3052.0004 9/25/2007 1:25 AM MSVCR71.dll 0x77C10000 0x58000 Image Windows NT CRT DLL 7.00.2600.2180 8/4/2004 12:56 AM msvcrt.dll 0x71A50000 0x3F000 Image Microsoft Windows Sockets 2.0 Service Provider 5.01.2600.2180 8/4/2004 12:56 AM mswsock.dll 0x5B860000 0x54000 Image Net Win32 API DLL 5.01.2600.2976 8/17/2006 5:28 AM NETAPI32.dll 0x7C900000 0xB0000 Image NT Layer DLL 5.01.2600.2180 8/4/2004 12:56 AM ntdll.dll 0x774E0000 0x13D000 Image Microsoft OLE for Windows 5.01.2600.2726 7/25/2005 9:39 PM ole32.dll 0x77120000 0x8B000 Image 5.01.2600.3139 5/17/2007 4:28 AM OLEAUT32.dll 0x5EDD0000 0x17000 Image 5.01.2600.2180 8/4/2004 12:56 AM olepro32.dll 0xFD0000 0x2F000 Image Orbitcth 2.02.0000.0001 9/20/2007 3:40 PM orbitcth.dll 0x5E310000 0xC000 Image IE PNG plugin image decoder 6.00.2900.3157 6/15/2007 1:12 AM pngfilt.dll 0x76BF0000 0xB000 Image Process Status Helper 5.01.2600.2180 8/4/2004 12:56 AM PSAPI.DLL 0x76FC0000 0x6000 Image Remote Access AutoDial Helper 5.01.2600.2938 6/26/2006 10:37 AM rasadhlp.dll 0x76EE0000 0x3C000 Image Remote Access API 5.01.2600.2180 8/4/2004 12:56 AM RASAPI32.DLL 0x76E90000 0x12000 Image Remote Access Connection Manager 5.01.2600.2180 8/4/2004 12:56 AM rasman.dll 0x77E70000 0x91000 Image Remote Procedure Call Runtime 5.01.2600.2180 8/4/2004 12:56 AM RPCRT4.dll 0xFFD0000 0x28000 Image Microsoft Enhanced Cryptographic Provider 5.01.2600.2161 8/3/2004 10:31 PM rsaenh.dll 0x76E80000 0xE000 Image Routing Utilities 5.01.2600.2180 8/4/2004 12:56 AM rtutils.dll 0x1080000 0x11A000 Image SBSD IE Protection 1.05.0000.0008 8/31/2007 4:46 PM SDHelper.dll 0x77FE0000 0x11000 Image Security Support Provider Interface 5.01.2600.2180 8/4/2004 12:56 AM Secur32.dll 0x722B0000 0x5000 Image SENS Connectivity API DLL 5.01.2600.2180 8/4/2004 12:56 AM sensapi.dll 0x77920000 0xF3000 Image Windows Setup API 5.01.2600.2180 8/4/2004 12:56 AM SETUPAPI.dll 0x1A10000 0x88000 Image Shell Doc Object and Control Library 6.00.2900.2180 8/4/2004 12:56 AM shdoclc.dll 0x7E290000 0x171000 Image Shell Doc Object and Control Library 6.00.2900.3157 6/15/2007 1:12 AM SHDOCVW.dll 0x7C9C0000 0x815000 Image Windows Shell Common Dll 6.00.2900.3051 12/19/2006 2:52 PM SHELL32.dll 0x77F60000 0x76000 Image Shell Light-weight Utility Library 6.00.2900.3157 6/15/2007 1:12 AM SHLWAPI.dll 0x2D0000 0x41000 Data 8/23/2001 5:00 AM sortkey.nls 0x320000 0x6000 Data 7/17/2004 11:48 AM sorttbls.nls 0x6D7C0000 0x79000 Image Java(TM) Platform SE binary 6.00.0030.0005 9/25/2007 1:11 AM ssv.dll 0x75E90000 0xB0000 Image Fusion 2.5 5.01.2600.3019 10/19/2006 6:56 AM SXS.DLL 0x76EB0000 0x2F000 Image Microsoft® Windows(TM) Telephony API Client DLL 5.01.2600.2180 8/4/2004 12:56 AM TAPI32.dll 0x270000 0x16000 Data 8/23/2001 5:00 AM unicode.nls 0x7E1E0000 0xA2000 Image OLE32 Extensions for Win32 6.00.2900.3157 6/15/2007 1:12 AM urlmon.dll 0x7E410000 0x90000 Image Windows XP USER API Client DLL 5.01.2600.3099 3/8/2007 8:36 AM USER32.dll 0x769C0000 0xB3000 Image Userenv 5.01.2600.2180 8/4/2004 12:56 AM USERENV.dll 0x74D90000 0x6B000 Image Uniscribe Unicode script processor 1.420.2600.2180 8/4/2004 12:56 AM USP10.dll 0x5AD70000 0x38000 Image Microsoft UxTheme Library 6.00.2900.2180 8/4/2004 12:56 AM uxtheme.dll 0x77C00000 0x8000 Image Version Checking and File Installation Libraries 5.01.2600.2180 8/4/2004 12:56 AM VERSION.dll 0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000 2/28/2003 6:26 PM VMHELPER.DLL 0x771B0000 0xAA000 Image Internet Extensions for Win32 6.00.2900.3164 6/26/2007 7:35 AM WININET.dll 0x76B40000 0x2D000 Image MCI API DLL 5.01.2600.2180 8/4/2004 12:56 AM WINMM.dll 0x76360000 0x10000 Image Winstation Library 5.01.2600.2180 8/4/2004 12:56 AM WINSTA.dll 0x76C30000 0x2E000 Image Microsoft Trust Verification APIs 5.131.2600.2180 8/4/2004 12:56 AM WINTRUST.dll 0x76F60000 0x2C000 Image Win32 LDAP API DLL 5.01.2600.2180 8/4/2004 12:56 AM WLDAP32.dll 0x71AB0000 0x17000 Image Windows Socket 2.0 32-Bit DLL 5.01.2600.2180 8/4/2004 12:56 AM WS2_32.dll 0x71AA0000 0x8000 Image Windows Socket 2.0 Helper for Windows NT 5.01.2600.2180 8/4/2004 12:56 AM WS2HELP.dll 0x71A90000 0x8000 Image Windows Sockets Helper DLL 5.01.2600.2180 8/4/2004 12:56 AM wshtcpip.dll 0x71AD0000 0x9000 Image Windows Socket 32-Bit DLL 5.01.2600.2180 8/4/2004 12:56 AM wsock32.dll 0x76F50000 0x8000 Image Windows Terminal Server SDK APIs 5.01.2600.2180 8/4/2004 12:56 AM WTSAPI32.dll 0x1420000 0x2C5000 Image Service Pack 2 Messages 5.01.2600.2180 8/4/2004 12:56 AM xpsp2res.dll As you can see, IE loaded its MS Java stuff: 0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM msjava.dll 0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000 2/28/2003 6:26 PM VMHELPER.DLL I also ran Process Monitor to log. I did a search and found these related to MS Java: 37243 08:27.6 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll 37244 08:27.6 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll 37245 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37269 08:27.6 iexplore.exe 960 RegQueryValue HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default) SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll 37270 08:27.6 iexplore.exe 960 RegQueryKey HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 SUCCESS Query: Name 37271 08:27.6 iexplore.exe 960 RegOpenKey HKCU\Software\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 NAME NOT FOUND Desired Access: Maximum Allowed 37272 08:27.6 iexplore.exe 960 RegQueryValue HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default) SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll 37273 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37274 08:27.6 iexplore.exe 960 RegQueryKey HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name 37339 08:27.7 iexplore.exe 960 RegQueryValue HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default) SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll 37340 08:27.7 iexplore.exe 960 RegCloseKey HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 SUCCESS 37341 08:27.7 iexplore.exe 960 RegQueryKey HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name 37385 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37386 08:27.7 iexplore.exe 960 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened 37387 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE 37388 08:27.7 iexplore.exe 960 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37389 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37390 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37391 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37392 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37393 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37394 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37395 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37396 08:27.7 iexplore.exe 960 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened 37397 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE 37398 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH C:\WINDOWS\system32\msjava.dll SUCCESS 37399 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_CC_FLUSH C:\WINDOWS\system32\msjava.dll SUCCESS 37400 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37401 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37402 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37403 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37404 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37405 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37406 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37407 08:27.7 iexplore.exe 960 Load Image C:\WINDOWS\system32\msjava.dll SUCCESS Image Base: 0x7c000000, Image Size: 0xea000 37408 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msjava.dll SUCCESS Desired Access: Read 37409 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msjava.dll\CheckAppHelp SUCCESS Type: REG_DWORD, Length: 4, Data: 1 37410 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msjava.dll SUCCESS 37428 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: MYBOX\bob, OpenResult: Opened 37429 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter: msjava.dll, 2: msjava.dll 37430 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS 37431 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS 37432 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37433 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\ SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: MYBOX\bob, OpenResult: Opened 37434 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS SUCCESS Type: QueryDirectory, Filter: WINDOWS, 2: WINDOWS 37435 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\ SUCCESS 37436 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\ SUCCESS 37437 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: MYBOX\bob, OpenResult: Opened 37438 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS\system32 SUCCESS Type: QueryDirectory, Filter: system32, 2: system32 37439 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS SUCCESS 37440 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS SUCCESS 37441 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, Impersonating: MYBOX\bob, OpenResult: Opened 37442 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter: msjava.dll, 2: msjava.dll 37443 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS 37444 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS 37445 08:27.7 csrss.exe 1560 RegOpenKey HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read, WOW64_64Key 37446 08:27.7 csrss.exe 1560 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll NAME NOT FOUND Length: 1,024 37447 08:27.7 csrss.exe 1560 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers SUCCESS 37448 08:27.7 csrss.exe 1560 RegOpenKey HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read, WOW64_64Key 37449 08:27.7 csrss.exe 1560 RegQueryValue HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll NAME NOT FOUND Length: 1,024 37450 08:27.7 csrss.exe 1560 RegCloseKey HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers SUCCESS 37451 08:27.7 csrss.exe 1560 RegOpenKey HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\msjava.dll NAME NOT FOUND Desired Access: Read, WOW64_64Key 37452 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37453 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37454 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: MYBOX\bob, OpenResult: Opened 37455 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE 37456 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37457 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37458 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37459 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37460 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37461 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37462 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37463 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37464 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: MYBOX\bob, OpenResult: Opened 37465 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY 37466 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37467 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37468 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37469 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37470 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37471 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37472 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37473 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37474 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: MYBOX\bob, OpenResult: Opened 37475 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE 37476 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37477 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37478 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37479 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37480 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37481 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37482 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37483 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a 37484 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: MYBOX\bob, OpenResult: Opened 37485 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY 37486 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37487 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37488 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37489 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37490 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37491 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37492 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37493 08:27.7 csrss.exe 1560 RegOpenKey HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS Desired Access: Read, WOW64_64Key 37494 08:27.7 csrss.exe 1560 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447} NAME NOT FOUND Length: 1,024 37495 08:27.7 csrss.exe 1560 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS 37496 08:27.7 csrss.exe 1560 RegOpenKey HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS Desired Access: Read, WOW64_64Key 37497 08:27.7 csrss.exe 1560 RegQueryValue HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447} NAME NOT FOUND Length: 1,024 37498 08:27.7 csrss.exe 1560 RegCloseKey HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS 37499 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS 37500 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS 37501 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37502 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\JUICERPATH NAME NOT FOUND Length: 144 37503 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37504 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\Program Files\Internet Explorer\VMHELPER.DLL NAME NOT FOUND 37505 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\vmhelper.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:26:27 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 12/25/2006 11:53:27 AM, AllocationSize: 290,816, EndOfFile: 286,992, FileAttributes: n/a 37506 08:27.7 iexplore.exe 960 IRP_MJ_CREATE C:\WINDOWS\system32\vmhelper.dll SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened 37507 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE 37508 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH C:\WINDOWS\system32\vmhelper.dll SUCCESS 37509 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_CC_FLUSH C:\WINDOWS\system32\vmhelper.dll SUCCESS 37510 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\vmhelper.dll SUCCESS 37511 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType: SyncTypeOther 37512 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\vmhelper.dll SUCCESS 37513 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\vmhelper.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\vmhelper.dll 37514 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP C:\WINDOWS\system32\vmhelper.dll SUCCESS 37515 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE C:\WINDOWS\system32\vmhelper.dll SUCCESS 37516 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\vmhelper.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\vmhelper.dll 37517 08:27.7 iexplore.exe 960 Load Image C:\WINDOWS\system32\vmhelper.dll SUCCESS Image Base: 0x7c520000, Image Size: 0x48000 37518 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\VMHELPER.DLL NAME NOT FOUND Desired Access: Read 37519 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37520 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\EnableFI NAME NOT FOUND Length: 144 37521 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37522 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37523 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\CPUType NAME NOT FOUND Length: 144 37524 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37525 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37526 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\EnableGCHeapCheck NAME NOT FOUND Length: 144 37527 08:27.7 Procmon.exe 2248 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened 37528 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37529 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37530 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\EnableGCHeapCheck NAME NOT FOUND Length: 144 37531 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37532 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37533 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\DisableGCClassCollection NAME NOT FOUND Length: 144 37534 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37535 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37536 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\InitStaticsEarly NAME NOT FOUND Length: 144 37537 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37538 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37539 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\EnableJIT SUCCESS Type: REG_BINARY, Length: 4, Data: 01 00 00 00 37540 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37541 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37542 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37543 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\DoNotJitList NAME NOT FOUND Length: 144 37544 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37545 08:27.7 Procmon.exe 2248 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY 37546 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, DeletePending: False, Directory: False 37547 08:27.7 Procmon.exe 2248 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37548 08:27.7 Procmon.exe 2248 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther 37549 08:27.7 Procmon.exe 2248 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll SUCCESS 37550 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37551 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\Verification NAME NOT FOUND Length: 144 37552 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37553 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37554 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\VerificationOptions NAME NOT FOUND Length: 144 37555 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37556 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37557 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\FileURLsAreTrusted NAME NOT FOUND Length: 144 37558 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 37559 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll 37560 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37561 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: C:\WINDOWS\java\classes;. 37562 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: C:\WINDOWS\java\classes;. 37563 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: C:\WINDOWS\java\classes;. 37564 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: C:\WINDOWS\java\classes;. 37565 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37566 08:27.7 Procmon.exe 2248 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll SUCCESS 37567 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\java\classes PATH NOT FOUND 37568 08:27.7 Procmon.exe 2248 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37569 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\Documents and Settings\bob\Desktop SUCCESS CreationTime: 1/19/2002 10:50:26 PM, LastAccessTime: 10/6/2007 9:42:36 AM, LastWriteTime: 10/6/2007 9:42:36 AM, ChangeTime: 10/6/2007 9:42:36 AM, AllocationSize: 0, EndOfFile: 0, FileAttributes: D 37570 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37571 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: 37572 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: 37573 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: 37574 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: 37575 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37576 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37577 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\LibsDirectory NAME NOT FOUND Length: 144 37578 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37579 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37580 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib 37581 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib 37582 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib 37583 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib 37584 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37585 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\java\trustlib PATH NOT FOUND 37586 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37587 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\SourcePath NAME NOT FOUND Length: 144 37588 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37589 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37590 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\DevClassPath NAME NOT FOUND Length: 144 37591 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37592 08:27.7 iexplore.exe 960 Thread Create SUCCESS Thread ID: 3528 37593 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37594 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\EnableContexts NAME NOT FOUND Length: 144 37595 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37596 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37597 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\FTMChecksDisabled NAME NOT FOUND Length: 144 37598 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37599 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 37600 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\FTMChecksDisabledForADO NAME NOT FOUND Length: 144 37601 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 37602 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM\Debug NAME NOT FOUND Desired Access: Query Value 37603 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM\MSDebug SUCCESS Desired Access: Query Value 37604 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM\MSDEBUG SUCCESS 37605 08:27.7 iexplore.exe 960 Thread Create SUCCESS Thread ID: 2844 42516 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM\ActiveXDebug NAME NOT FOUND Desired Access: Query Value 42517 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 42518 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java VM\DebuggingFlags NAME NOT FOUND Length: 144 42519 08:27.8 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM SUCCESS 42520 08:27.8 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value 42521 08:27.8 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java VM\EnableEventMonitors NAME NOT FOUND Length: 144 42522 08:27.8 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM SUCCESS 42523 08:27.8 iexplore.exe 960 RegCreateKey HKLM\Software\Microsoft\Code Store Database\Global Namespace\Java Packages SUCCESS Desired Access: Maximum Allowed 42524 08:27.8 iexplore.exe 960 RegCreateKey HKLM\Software\Microsoft\Code Store Database\Application Namespaces SUCCESS Desired Access: Maximum Allowed 42525 08:27.8 iexplore.exe 960 RegCreateKey HKLM\SOFTWARE\Microsoft\Code Store Database SUCCESS Desired Access: Maximum Allowed 42526 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages SUCCESS Desired Access: Maximum Allowed 42527 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM\Pending Deletions NAME NOT FOUND Desired Access: Maximum Allowed 42528 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang SUCCESS Desired Access: Maximum Allowed 42529 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42530 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42531 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42532 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42533 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42534 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49 PM, LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004 12:56:44 AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize: 294,912, EndOfFile: 294,400, FileAttributes: n/a 42535 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP 42536 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Info SUCCESS Type: REG_BINARY, Length: 12, Data: 00 00 05 00 E2 0E 00 00 1A 00 00 00 42537 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java Packages\java\lang\Info SUCCESS Type: REG_BINARY, Length: 12, Data: 00 00 05 00 E2 0E 00 00 1A 00 00 00 42538 08:27.8 iexplore.exe 960 IRP_MJ_CREATE C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP PATH NOT FOUND Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a 42539 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49 PM, LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004 12:56:44 AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize: 294,912, EndOfFile: 294,400, FileAttributes: n/a 42540 08:27.8 iexplore.exe 960 IRP_MJ_CREATE C:\Documents and Settings\bob\Desktop\java\lang\ PATH NOT FOUND Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a 42541 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM\Compatibility NAME NOT FOUND Desired Access: Query Value 42542 08:27.8 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM\Compatibility NAME NOT FOUND Desired Access: Query Value 42543 08:27.8 iexplore.exe 960 Thread Exit SUCCESS User Time: 0.0000000, Kernel Time: 0.0156250 44010 08:27.9 iexplore.exe 960 RegOpenKey HKCU\Software\Classes\MIME\Database\Content Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read 44011 08:27.9 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS Desired Access: Read 44012 08:27.9 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS Query: Name 44013 08:27.9 iexplore.exe 960 RegOpenKey HKCU\Software\Classes\MIME\Database\Content Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Maximum Allowed 44014 08:27.9 iexplore.exe 960 RegQueryValue HKCR\MIME\Database\Content Type\application/x-java-jnlp-file\Image Filter CLSID NAME NOT FOUND Length: 144 44015 08:27.9 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS 46361 08:28.0 iexplore.exe 960 RegOpenKey HKCU\Software\Classes\MIME\Database\Content Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read 46362 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS Desired Access: Read 46363 08:28.0 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS Query: Name 46364 08:28.0 iexplore.exe 960 RegOpenKey HKCU\Software\Classes\MIME\Database\Content Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read 46365 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read 46366 08:28.0 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content Type\application/x-java-jnlp-file SUCCESS -- "All good work is done the way ants do things: Little by little." --Lafcadio Hearn /\___/\ / /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site) | |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net \ _ / Remove ANT from e-mail address: philpi@earthlink.netANT ( ) or ANTant@zimage.com Ant is currently not listening to any songs on his home computer. |
| |||
| Re: MS' Java? (logs) "Ant" <philpi@earthlink.netANT> wrote in message news:OohPqhnCIHA.4712@TK2MSFTNGP04.phx.gbl... > On 10/7/2007 9:33 AM PT, Donald Anadell typed: > >> You might first make sure that "msjava.dll" is still located in the >> System32 >> folder. > > I do have it: v5.0.3810.0. Is this correct? Yes, if you click Start||Run and type "wjview" (without the quote marks) into the Run box and click OK, it should return a dialog box indicating that you have Version 5.00.3810 installed on your machine. This is the latest and most secure build of the MSJVM. > > >> If your installation of Windows XP Home||Pro predates SP1a then the MS >> Java Virtual Machine should be installed on your machine and that file >> should be located in the System32 folder. >> >> Then try reregistering that DLL file by clicking on Start||Run and typing >> the following into the Run box: >> regsvr32 Msjava.dll > > That didn't work after I got a successful message. > > >> The MS Java Virtual Machine and the Sun Java Virtual Machine can co-exist >> quite nicely on the same machine, and you should be able to switch >> between them. I have both virtual machines installed on three Windows XP >> machines here and have no problems with any of them using either the >> MSJVM or Sun. As long as you have the latest secure version of the >> MSJVM(build 3810) installed, you shouldn't have any problems using that >> Virtual Machinen. > > Yeah, that is what I am trying to do. Have both. Something is broken with > my Java. :( Is there a downloadable EXE file to reinstall it? While Microsoft does not offer the 3810 build of the MSJVM publicly any more but you should be able to retrieve a copy of the setup file at the following site: http://www.mvps.org/marksxp/WindowsXP/java.php You can try downloading and installing Build 3810 over top of your current installation of the MSJVM to see if that resolves your issue. If not, you may have to following the Uninstall procedure listed at that site to competely remove the MSJVM from your Machine first, and then reinstall it. If you do the Uninstall procedure for the MSJVM, you will have to download both files(Build 3805 and Build 3810) from that site. First downlaod and install build 3805 to reinstall the Virtual Machine, then download and install the Patch Build 3810 and install it. Build 3810 is only a Security Patch, so Build 3805 must be installed first. >Also, is disabling in control panel's Sun Java JRE v6.0 b3 options not run >in MSIE and VM enabled in IE6's options enough? Or did I miss other places? I've always used the small utility available here: http://www.jensign.com/JavaScience/S...JVM/index.html that allows you to switch between the MSJVM and the Sun JVM in IE on the fly. It will make the necessary Registry change to force IE to use on or the other of the JVMs, and indicate to you which one is currently being used. Good luck, Donald Anadell > > FYI if it even helps. I ran the latest Process Explorer on iexplore.exe: > Process PID CPU Description User Name Priority Handles Window Title > System Idle Process 0 92.36 NT AUTHORITY\SYSTEM 0 0 Interrupts n/a > Hardware Interrupts 0 0 DPCs n/a 0.69 Deferred Procedure Calls 0 0 System > 4 0.69 NT AUTHORITY\SYSTEM 8 632 smss.exe 1492 Windows NT Session Manager > NT AUTHORITY\SYSTEM 11 21 csrss.exe 1560 0.69 Client Server Runtime > Process NT AUTHORITY\SYSTEM 13 513 winlogon.exe 1584 Windows NT Logon > Application NT AUTHORITY\SYSTEM 13 584 services.exe 1628 0.69 Services and > Controller app NT AUTHORITY\SYSTEM 9 316 svchost.exe 1828 Generic Host > Process for Win32 Services NT AUTHORITY\SYSTEM 8 220 svchost.exe 1872 > Generic Host Process for Win32 Services NT AUTHORITY\NETWORK SERVICE 8 264 > svchost.exe 440 Generic Host Process for Win32 Services NT > AUTHORITY\SYSTEM 8 1,631 svchost.exe 616 Generic Host Process for Win32 > Services NT AUTHORITY\NETWORK SERVICE 8 98 spoolsv.exe 748 Spooler > SubSystem App NT AUTHORITY\SYSTEM 8 130 svchost.exe 952 Generic Host > Process for Win32 Services NT AUTHORITY\LOCAL SERVICE 8 173 cygrunsrv.exe > 972 MYBOX\SvcCOPSSH 8 81 nTuneService.exe 1044 NVIDIA Access Manager NT > AUTHORITY\SYSTEM 8 147 nvsvc32.exe 1060 NVIDIA Driver Helper Service, > Version 163.69 NT AUTHORITY\SYSTEM 8 139 PERSFW.exe 1064 Kerio Personal > Firewall Engine NT AUTHORITY\SYSTEM 8 73 HPZipm12.exe 376 PML Driver NT > AUTHORITY\SYSTEM 8 42 PnkBstrA.exe 392 NT AUTHORITY\SYSTEM 8 46 > PnkBstrB.exe 464 NT AUTHORITY\SYSTEM 8 58 tcpsvcs.exe 544 TCP/IP Services > Application NT AUTHORITY\SYSTEM 8 74 wdfmgr.exe 660 Windows User Mode > Driver Manager NT AUTHORITY\LOCAL SERVICE 8 66 vmware-authd.exe 1168 > VMware Authorization Service NT AUTHORITY\SYSTEM 8 138 vmnat.exe 1196 > VMware NAT Service NT AUTHORITY\SYSTEM 8 54 vmnetdhcp.exe 1324 VMware > VMnet DHCP service NT AUTHORITY\SYSTEM 8 29 alg.exe 252 Application Layer > Gateway Service NT AUTHORITY\LOCAL SERVICE 8 104 lsass.exe 1640 LSA Shell > (Export Version) NT AUTHORITY\SYSTEM 9 331 sshd.exe 1236 MYBOX\SvcCOPSSH 8 > 98 explorer.exe 996 Windows Explorer MYBOX\Bob 8 712 ul > TaskSwitch.exe 1824 MYBOX\Bob 8 35 CTHELPER.EXE 776 CtHelper Application > MYBOX\Bob 8 176 hpcmpmgr.exe 2412 HP Framework Component Manager Service > MYBOX\Bob 8 176 hpwuSchd2.exe 2452 Hewlett-Packard Product AssistBob > MYBOX\Bob 8 23 hphmon06.exe 2460 HPHmon06 MYBOX\Bob 8 101 rundll32.exe > 2500 Run a DLL as an App MYBOX\Bob 8 92 FreeShade.exe 2572 FreeShade > MYBOX\Bob 8 22 goScreen.exe 2584 Virtual multi-page monitor manager > MYBOX\Bob 8 98 goScreen > MCDTray.exe 2600 Media Changer Deluxe SysTray Launcher MYBOX\Bob 8 25 > Pickatag.exe 2608 MYBOX\Bob 8 22 PopTray.exe 2624 PopTray E-Mail Notifier > MYBOX\Bob 8 150 trillian.exe 788 Trillian MYBOX\Bob 8 340 Trillian > SecureCRT.EXE 3532 SecureCRT Application MYBOX\Bob 8 79 Bobian - > SecureCRT > SecureCRT.EXE 2044 SecureCRT Application MYBOX\Bob 8 153 > alpha.zimage.com - SecureCRT > notepad.exe 3888 Notepad MYBOX\Bob 8 31 seamonkey.exe 796 SeaMonkey > MYBOX\Bob 8 188 Compose: Re: MS' Java? > procexp.exe 2880 4.17 Sysinternals Process Explorer MYBOX\Bob 13 422 > Process Explorer - Sysinternals: www.sysinternals.com [MYBOX\Bob] > iexplore.exe 2800 0.69 Internet Explorer MYBOX\Bob 8 323 Java Tester - > What Version of Java Are You Running? - Microsoft Internet Explorer > > Process: iexplore.exe Pid: 2800 > > Base Size Mapping Description Version Time Name > 0x140000 0x3000 Data <Pagefile Backed> > 0x260000 0x3000 Data <Pagefile Backed> > 0x263000 0xD000 Data <Pagefile Backed> > 0x330000 0x2000 Data <Pagefile Backed> > 0x390000 0x2000 Data <Pagefile Backed> > 0x3A0000 0x2000 Data <Pagefile Backed> > 0x3B0000 0x2000 Data <Pagefile Backed> > 0x3C0000 0x2000 Data <Pagefile Backed> > 0x3E0000 0x2000 Data <Pagefile Backed> > 0x420000 0x5000 Data <Pagefile Backed> > 0x425000 0xBB000 Data <Pagefile Backed> > 0x4E0000 0x2000 Data <Pagefile Backed> > 0x4E2000 0x6000 Data <Pagefile Backed> > 0x4F0000 0x103000 Data <Pagefile Backed> > 0x600000 0x9C000 Data <Pagefile Backed> > 0x69C000 0x264000 Data <Pagefile Backed> > 0xA00000 0x51000 Data <Pagefile Backed> > 0xA70000 0xE000 Data <Pagefile Backed> > 0xB60000 0x2000 Data <Pagefile Backed> > 0xEE0000 0x2000 Data <Pagefile Backed> > 0x1000000 0x1000 Data <Pagefile Backed> > 0x1070000 0x2000 Data <Pagefile Backed> > 0x1A00000 0x1000 Data <Pagefile Backed> > 0x1B20000 0x2000 Data <Pagefile Backed> > 0x1B30000 0x2000 Data <Pagefile Backed> > 0x1E50000 0x1000 Data <Pagefile Backed> > 0x1F60000 0x1000 Data <Pagefile Backed> > 0x1F70000 0x2000 Data <Pagefile Backed> > 0x7F6F0000 0x7000 Data <Pagefile Backed> > 0x7F6F7000 0xF9000 Data <Pagefile Backed> > 0x7FFB0000 0x24000 Data <Pagefile Backed> > 0x77DD0000 0x9B000 Image Advanced Windows 32 Base API 5.01.2600.2180 > 8/4/2004 12:56 AM ADVAPI32.dll > 0x77B40000 0x22000 Image Application Compatibility Client Library > 5.01.2600.2180 8/4/2004 12:56 AM appHelp.dll > 0x20000000 0x12000 Image Shell Browser UI Library 6.00.2900.2180 8/4/2004 > 12:56 AM browselc.dll > 0x75F80000 0xFD000 Image Shell Browser UI Library 6.00.2900.3157 6/15/2007 > 1:12 AM BROWSEUI.dll > 0x76FD0000 0x7F000 Image 2001.12.4414.0308 7/25/2005 9:39 PM CLBCATQ.DLL > 0x773D0000 0x103000 Image User Experience Controls Library 6.00.2900.2982 > 8/25/2006 8:45 AM comctl32.dll > 0x5D090000 0x9A000 Image Common Controls Library 5.82.2900.2982 8/25/2006 > 8:45 AM comctl32.dll > 0x763B0000 0x49000 Image Common Dialogs DLL 6.00.2900.2180 8/4/2004 12:56 > AM comdlg32.dll > 0x77050000 0xC5000 Image 2001.12.4414.0258 8/4/2004 12:56 AM COMRes.dll > 0x77A80000 0x94000 Image Crypto API32 5.131.2600.2180 8/4/2004 12:56 AM > CRYPT32.dll > 0x754D0000 0x80000 Image Microsoft Trust UI Provider 5.131.2600.2180 > 8/4/2004 12:56 AM CRYPTUI.dll > 0x76600000 0x1D000 Image Offline Network Agent 5.01.2600.2180 8/4/2004 > 12:56 AM CSCDLL.dll > 0x77A20000 0x54000 Image Client Side Caching UI 5.01.2600.2180 8/4/2004 > 12:56 AM cscui.dll > 0x2000000 0x6000 Image ctagent 1.00.0000.0012 8/11/2006 2:56 PM > ctagent.dll > 0x350000 0x3000 Data 8/23/2001 5:00 AM ctype.nls > 0x76F20000 0x27000 Image DNS Client API DLL 5.01.2600.2938 6/26/2006 10:37 > AM DNSAPI.dll > 0x16000000 0x28000 Image Trillian Event Control 3.01.0007.0000 7/19/2007 > 12:00 AM events.dll > 0x69450000 0x16000 Image Windows Error Reporting 5.01.2600.2180 8/4/2004 > 12:56 AM faultrep.dll > 0x10000000 0x1A000 Image FreeShade 1.00.0000.0004 9/27/2001 1:16 AM > FreeShade.dll > 0x77F10000 0x47000 Image GDI Client DLL 5.01.2600.3159 6/19/2007 6:31 AM > GDI32.dll > 0x662B0000 0x58000 Image Home Networking Configuration Manager > 5.01.2600.2180 8/4/2004 12:56 AM hnetcfg.dll > 0x400000 0x19000 Image Internet Explorer 6.00.2900.2180 8/4/2004 12:56 AM > iexplore.exe > 0x76C90000 0x28000 Image Windows NT Image Helper 5.01.2600.2180 8/4/2004 > 12:56 AM IMAGEHLP.dll > 0x66880000 0xC000 Image IE plugin image decoder support DLL 6.00.2900.2180 > 8/4/2004 12:56 AM ImgUtil.dll > 0x76390000 0x1D000 Image Windows XP IMM32 API Client DLL 5.01.2600.2180 > 8/4/2004 12:56 AM IMM32.DLL > 0xB20000 0xC000 Data 10/9/2007 6:11 AM index.dat > 0xB70000 0x174000 Data 10/9/2007 6:11 AM index.dat > 0xCF0000 0x38000 Data 10/9/2007 6:11 AM index.dat > 0x2EB0000 0x8000 Data 10/9/2007 6:11 AM index.dat > 0x76D60000 0x19000 Image IP Helper API 5.01.2600.2912 5/19/2006 5:59 AM > iphlpapi.dll > 0x7C800000 0xF5000 Image Windows NT BASE API Client DLL 5.01.2600.3119 > 4/16/2007 8:52 AM kernel32.dll > 0x290000 0x3D000 Data 7/17/2004 11:48 AM locale.nls > 0x629C0000 0x9000 Image Language Pack 5.01.2600.2180 8/4/2004 12:56 AM > LPK.DLL > 0x2510000 0xA5000 Data 8/23/2001 5:00 AM mlang.dat > 0x75CF0000 0x91000 Image Multi Language Support DLL 6.00.2900.2180 > 8/4/2004 12:56 AM mlang.dll > 0x77B20000 0x12000 Image ASN.1 Runtime APIs 5.01.2600.2180 8/4/2004 12:56 > AM MSASN1.dll > 0x74720000 0x4B000 Image MSCTF Server DLL 5.01.2600.2180 8/4/2004 12:56 AM > MSCTF.dll > 0x755C0000 0x2E000 Image Microsoft Text Frame Work Service IME > 5.01.2600.2180 8/4/2004 12:56 AM msctfime.ime > 0x4AA00000 0x15000 Image Active Debugging Proxy/Stub 6.00.0000.8424 > 11/15/1999 10:46 AM MSDBG.DLL > 0x7DC30000 0x2F2000 Image Microsoft (R) HTML Viewer 6.00.2900.3157 > 6/15/2007 1:12 AM mshtml.dll > 0x7D1E0000 0x2BE000 Image Windows Installer 3.01.4000.4039 4/18/2007 9:12 > AM msi.dll > 0x76380000 0x5000 Image GDIEXT Client DLL 5.01.2600.2180 8/4/2004 12:56 AM > msimg32.dll > 0x2DC0000 0x4000 Data 6/4/2004 8:46 PM MSIMGSIZ.DAT > 0x746F0000 0x2A000 Image Active IMM Server DLL 5.01.2600.2180 8/4/2004 > 12:56 AM msimtf.dll > 0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM > msjava.dll > 0x746C0000 0x27000 Image Microsoft Line Services library file > 3.10.0349.0000 8/23/2001 5:00 AM msls31.dll > 0x77C70000 0x23000 Image Microsoft Authentication Package v1.0 > 5.01.2600.2180 8/4/2004 12:56 AM msv1_0.dll > 0x7C340000 0x56000 Image Microsoft® C Runtime Library 7.10.3052.0004 > 9/25/2007 1:25 AM MSVCR71.dll > 0x77C10000 0x58000 Image Windows NT CRT DLL 7.00.2600.2180 8/4/2004 12:56 > AM msvcrt.dll > 0x71A50000 0x3F000 Image Microsoft Windows Sockets 2.0 Service Provider > 5.01.2600.2180 8/4/2004 12:56 AM mswsock.dll > 0x5B860000 0x54000 Image Net Win32 API DLL 5.01.2600.2976 8/17/2006 5:28 > AM NETAPI32.dll > 0x7C900000 0xB0000 Image NT Layer DLL 5.01.2600.2180 8/4/2004 12:56 AM > ntdll.dll > 0x774E0000 0x13D000 Image Microsoft OLE for Windows 5.01.2600.2726 > 7/25/2005 9:39 PM ole32.dll > 0x77120000 0x8B000 Image 5.01.2600.3139 5/17/2007 4:28 AM OLEAUT32.dll > 0x5EDD0000 0x17000 Image 5.01.2600.2180 8/4/2004 12:56 AM olepro32.dll > 0xFD0000 0x2F000 Image Orbitcth 2.02.0000.0001 9/20/2007 3:40 PM > orbitcth.dll > 0x5E310000 0xC000 Image IE PNG plugin image decoder 6.00.2900.3157 > 6/15/2007 1:12 AM pngfilt.dll > 0x76BF0000 0xB000 Image Process Status Helper 5.01.2600.2180 8/4/2004 > 12:56 AM PSAPI.DLL > 0x76FC0000 0x6000 Image Remote Access AutoDial Helper 5.01.2600.2938 > 6/26/2006 10:37 AM rasadhlp.dll > 0x76EE0000 0x3C000 Image Remote Access API 5.01.2600.2180 8/4/2004 12:56 > AM RASAPI32.DLL > 0x76E90000 0x12000 Image Remote Access Connection Manager 5.01.2600.2180 > 8/4/2004 12:56 AM rasman.dll > 0x77E70000 0x91000 Image Remote Procedure Call Runtime 5.01.2600.2180 > 8/4/2004 12:56 AM RPCRT4.dll > 0xFFD0000 0x28000 Image Microsoft Enhanced Cryptographic Provider > 5.01.2600.2161 8/3/2004 10:31 PM rsaenh.dll > 0x76E80000 0xE000 Image Routing Utilities 5.01.2600.2180 8/4/2004 12:56 AM > rtutils.dll > 0x1080000 0x11A000 Image SBSD IE Protection 1.05.0000.0008 8/31/2007 4:46 > PM SDHelper.dll > 0x77FE0000 0x11000 Image Security Support Provider Interface > 5.01.2600.2180 8/4/2004 12:56 AM Secur32.dll > 0x722B0000 0x5000 Image SENS Connectivity API DLL 5.01.2600.2180 8/4/2004 > 12:56 AM sensapi.dll > 0x77920000 0xF3000 Image Windows Setup API 5.01.2600.2180 8/4/2004 12:56 > AM SETUPAPI.dll > 0x1A10000 0x88000 Image Shell Doc Object and Control Library > 6.00.2900.2180 8/4/2004 12:56 AM shdoclc.dll > 0x7E290000 0x171000 Image Shell Doc Object and Control Library > 6.00.2900.3157 6/15/2007 1:12 AM SHDOCVW.dll > 0x7C9C0000 0x815000 Image Windows Shell Common Dll 6.00.2900.3051 > 12/19/2006 2:52 PM SHELL32.dll > 0x77F60000 0x76000 Image Shell Light-weight Utility Library 6.00.2900.3157 > 6/15/2007 1:12 AM SHLWAPI.dll > 0x2D0000 0x41000 Data 8/23/2001 5:00 AM sortkey.nls > 0x320000 0x6000 Data 7/17/2004 11:48 AM sorttbls.nls > 0x6D7C0000 0x79000 Image Java(TM) Platform SE binary 6.00.0030.0005 > 9/25/2007 1:11 AM ssv.dll > 0x75E90000 0xB0000 Image Fusion 2.5 5.01.2600.3019 10/19/2006 6:56 AM > SXS.DLL > 0x76EB0000 0x2F000 Image Microsoft® Windows(TM) Telephony API Client DLL > 5.01.2600.2180 8/4/2004 12:56 AM TAPI32.dll > 0x270000 0x16000 Data 8/23/2001 5:00 AM unicode.nls > 0x7E1E0000 0xA2000 Image OLE32 Extensions for Win32 6.00.2900.3157 > 6/15/2007 1:12 AM urlmon.dll > 0x7E410000 0x90000 Image Windows XP USER API Client DLL 5.01.2600.3099 > 3/8/2007 8:36 AM USER32.dll > 0x769C0000 0xB3000 Image Userenv 5.01.2600.2180 8/4/2004 12:56 AM > USERENV.dll > 0x74D90000 0x6B000 Image Uniscribe Unicode script processor > 1.420.2600.2180 8/4/2004 12:56 AM USP10.dll > 0x5AD70000 0x38000 Image Microsoft UxTheme Library 6.00.2900.2180 8/4/2004 > 12:56 AM uxtheme.dll > 0x77C00000 0x8000 Image Version Checking and File Installation Libraries > 5.01.2600.2180 8/4/2004 12:56 AM VERSION.dll > 0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000 > 2/28/2003 6:26 PM VMHELPER.DLL > 0x771B0000 0xAA000 Image Internet Extensions for Win32 6.00.2900.3164 > 6/26/2007 7:35 AM WININET.dll > 0x76B40000 0x2D000 Image MCI API DLL 5.01.2600.2180 8/4/2004 12:56 AM > WINMM.dll > 0x76360000 0x10000 Image Winstation Library 5.01.2600.2180 8/4/2004 12:56 > AM WINSTA.dll > 0x76C30000 0x2E000 Image Microsoft Trust Verification APIs 5.131.2600.2180 > 8/4/2004 12:56 AM WINTRUST.dll > 0x76F60000 0x2C000 Image Win32 LDAP API DLL 5.01.2600.2180 8/4/2004 12:56 > AM WLDAP32.dll > 0x71AB0000 0x17000 Image Windows Socket 2.0 32-Bit DLL 5.01.2600.2180 > 8/4/2004 12:56 AM WS2_32.dll > 0x71AA0000 0x8000 Image Windows Socket 2.0 Helper for Windows NT > 5.01.2600.2180 8/4/2004 12:56 AM WS2HELP.dll > 0x71A90000 0x8000 Image Windows Sockets Helper DLL 5.01.2600.2180 8/4/2004 > 12:56 AM wshtcpip.dll > 0x71AD0000 0x9000 Image Windows Socket 32-Bit DLL 5.01.2600.2180 8/4/2004 > 12:56 AM wsock32.dll > 0x76F50000 0x8000 Image Windows Terminal Server SDK APIs 5.01.2600.2180 > 8/4/2004 12:56 AM WTSAPI32.dll > 0x1420000 0x2C5000 Image Service Pack 2 Messages 5.01.2600.2180 8/4/2004 > 12:56 AM xpsp2res.dll > > As you can see, IE loaded its MS Java stuff: > 0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM > msjava.dll > 0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000 > 2/28/2003 6:26 PM VMHELPER.DLL > > > I also ran Process Monitor to log. I did a search and found these related > to MS Java: > 37243 08:27.6 iexplore.exe 960 RegQueryValue > HKLM\SOFTWARE\Microsoft\Active Setup\Installed > Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS > Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll > 37244 08:27.6 iexplore.exe 960 RegQueryValue > HKLM\SOFTWARE\Microsoft\Active Setup\Installed > Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS > Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll > 37245 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN > C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, > LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 > PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: > 947,472, FileAttributes: n/a > 37269 08:27.6 iexplore.exe 960 RegQueryValue > HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default) > SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll > 37270 08:27.6 iexplore.exe 960 RegQueryKey > HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 SUCCESS > Query: Name > 37271 08:27.6 iexplore.exe 960 RegOpenKey > HKCU\Software\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 > NAME NOT FOUND Desired Access: Maximum Allowed > 37272 08:27.6 iexplore.exe 960 RegQueryValue > HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default) > SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll > 37273 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN > C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, > LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 > PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: > 947,472, FileAttributes: n/a > 37274 08:27.6 iexplore.exe 960 RegQueryKey > HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name > 37339 08:27.7 iexplore.exe 960 RegQueryValue > HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default) > SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll > 37340 08:27.7 iexplore.exe 960 RegCloseKey > HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 SUCCESS > 37341 08:27.7 iexplore.exe 960 RegQueryKey > HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name > 37385 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN > C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, > LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 > PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: > 947,472, FileAttributes: n/a > 37386 08:27.7 iexplore.exe 960 IRP_MJ_CREATE > C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse, > Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, > Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, > AllocationSize: n/a, OpenResult: Opened > 37387 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, > PageProtection: PAGE_EXECUTE > 37388 08:27.7 iexplore.exe 960 FASTIO_QUERY_INFORMATION > C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, > AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, > DeletePending: False, Directory: False > 37389 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37390 08:27.7 iexplore.exe 960 > FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll > SUCCESS SyncType: SyncTypeOther > 37391 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37392 08:27.7 iexplore.exe 960 > IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: > QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll > 37393 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP > C:\WINDOWS\system32\msjava.dll SUCCESS 37394 08:27.7 iexplore.exe 960 > IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37395 08:27.7 > iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll > SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 > 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 > 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: > n/a > 37396 08:27.7 iexplore.exe 960 IRP_MJ_CREATE > C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse, > Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, > Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, > AllocationSize: n/a, OpenResult: Opened > 37397 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, > PageProtection: PAGE_EXECUTE > 37398 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH > C:\WINDOWS\system32\msjava.dll SUCCESS 37399 08:27.7 iexplore.exe 960 > FASTIO_RELEASE_FOR_CC_FLUSH C:\WINDOWS\system32\msjava.dll SUCCESS 37400 > 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37401 08:27.7 iexplore.exe 960 > FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll > SUCCESS SyncType: SyncTypeOther > 37402 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37403 08:27.7 iexplore.exe 960 > IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: > QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll > 37404 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP > C:\WINDOWS\system32\msjava.dll SUCCESS 37405 08:27.7 iexplore.exe 960 > IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37406 08:27.7 > Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll > SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll > 37407 08:27.7 iexplore.exe 960 Load Image C:\WINDOWS\system32\msjava.dll > SUCCESS Image Base: 0x7c000000, Image Size: 0xea000 > 37408 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Windows > NT\CurrentVersion\Image File Execution Options\msjava.dll SUCCESS Desired > Access: Read > 37409 08:27.7 iexplore.exe 960 RegQueryValue > HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution > Options\msjava.dll\CheckAppHelp SUCCESS Type: REG_DWORD, Length: 4, Data: > 1 > 37410 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows > NT\CurrentVersion\Image File Execution Options\msjava.dll SUCCESS 37428 > 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS Desired > Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: > Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, > Write, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: > Opened > 37429 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL > C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter: > msjava.dll, 2: msjava.dll > 37430 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS > 37431 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS > 37432 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN > C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, > LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 > PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: > 947,472, FileAttributes: n/a > 37433 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\ SUCCESS Desired Access: > Read Data/List Directory, Synchronize, Disposition: Open, Options: > Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, > Write, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: > Opened > 37434 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS SUCCESS > Type: QueryDirectory, Filter: WINDOWS, 2: WINDOWS > 37435 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\ SUCCESS 37436 08:27.7 > csrss.exe 1560 IRP_MJ_CLOSE C:\ SUCCESS 37437 08:27.7 csrss.exe 1560 > IRP_MJ_CREATE C:\WINDOWS SUCCESS Desired Access: Read Data/List Directory, > Synchronize, Disposition: Open, Options: Directory, Synchronous IO > Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, > Impersonating: HARVESTER\Ant, OpenResult: Opened > 37438 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS\system32 > SUCCESS Type: QueryDirectory, Filter: system32, 2: system32 > 37439 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS SUCCESS 37440 > 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS SUCCESS 37441 08:27.7 > csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS Desired Access: > Read Data/List Directory, Synchronize, Disposition: Open, Options: > Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, > Write, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: > Opened > 37442 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL > C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter: > msjava.dll, 2: msjava.dll > 37443 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS > 37444 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS > 37445 08:27.7 csrss.exe 1560 RegOpenKey HKLM\Software\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read, > WOW64_64Key > 37446 08:27.7 csrss.exe 1560 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll > NAME NOT FOUND Length: 1,024 > 37447 08:27.7 csrss.exe 1560 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags\Layers SUCCESS 37448 08:27.7 csrss.exe > 1560 RegOpenKey HKCU\Software\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read, > WOW64_64Key > 37449 08:27.7 csrss.exe 1560 RegQueryValue HKCU\Software\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll > NAME NOT FOUND Length: 1,024 > 37450 08:27.7 csrss.exe 1560 RegCloseKey HKCU\Software\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags\Layers SUCCESS 37451 08:27.7 csrss.exe > 1560 RegOpenKey HKLM\Software\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags\Custom\msjava.dll NAME NOT FOUND Desired > Access: Read, WOW64_64Key > 37452 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN > C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, > LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 > PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: > 947,472, FileAttributes: n/a > 37453 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN > C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM, > LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 > PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile: > 947,472, FileAttributes: n/a > 37454 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll > SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, > Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, > ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: > HARVESTER\Ant, OpenResult: Opened > 37455 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, > PageProtection: PAGE_EXECUTE > 37456 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION > C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, > AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, > DeletePending: False, Directory: False > 37457 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37458 08:27.7 csrss.exe 1560 > FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll > SUCCESS SyncType: SyncTypeOther > 37459 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37460 08:27.7 csrss.exe 1560 > IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: > QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll > 37461 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll > SUCCESS 37462 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE > C:\WINDOWS\system32\msjava.dll SUCCESS 37463 08:27.7 csrss.exe 1560 > FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS > CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, > LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, > AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a > 37464 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll > SUCCESS Desired Access: Generic Read, Disposition: Open, Options: > Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: > Read, Delete, AllocationSize: n/a, Impersonating: HARVESTER\Ant, > OpenResult: Opened > 37465 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, > PageProtection: PAGE_READONLY > 37466 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION > C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, > AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, > DeletePending: False, Directory: False > 37467 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37468 08:27.7 csrss.exe 1560 > FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll > SUCCESS SyncType: SyncTypeOther > 37469 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37470 08:27.7 csrss.exe 1560 > IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: > QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll > 37471 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll > SUCCESS 37472 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE > C:\WINDOWS\system32\msjava.dll SUCCESS 37473 08:27.7 csrss.exe 1560 > FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS > CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, > LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, > AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a > 37474 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll > SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, > Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, > ShareMode: Read, Delete, AllocationSize: n/a, Impersonating: > HARVESTER\Ant, OpenResult: Opened > 37475 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, > PageProtection: PAGE_EXECUTE > 37476 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION > C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, > AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, > DeletePending: False, Directory: False > 37477 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37478 08:27.7 csrss.exe 1560 > FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll > SUCCESS SyncType: SyncTypeOther > 37479 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37480 08:27.7 csrss.exe 1560 > IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: > QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll > 37481 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll > SUCCESS 37482 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE > C:\WINDOWS\system32\msjava.dll SUCCESS 37483 08:27.7 csrss.exe 1560 > FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS > CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM, > LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, > AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a > 37484 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll > SUCCESS Desired Access: Generic Read, Disposition: Open, Options: > Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: > Read, Delete, AllocationSize: n/a, Impersonating: HARVESTER\Ant, > OpenResult: Opened > 37485 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection, > PageProtection: PAGE_READONLY > 37486 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION > C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, > AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, > DeletePending: False, Directory: False > 37487 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37488 08:27.7 csrss.exe 1560 > FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll > SUCCESS SyncType: SyncTypeOther > 37489 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37490 08:27.7 csrss.exe 1560 > IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type: > QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll > 37491 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll > SUCCESS 37492 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE > C:\WINDOWS\system32\msjava.dll SUCCESS 37493 08:27.7 csrss.exe 1560 > RegOpenKey HKLM\Software\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags SUCCESS Desired Access: Read, WOW64_64Key > 37494 08:27.7 csrss.exe 1560 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447} > NAME NOT FOUND Length: 1,024 > 37495 08:27.7 csrss.exe 1560 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags SUCCESS 37496 08:27.7 csrss.exe 1560 > RegOpenKey HKCU\Software\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags SUCCESS Desired Access: Read, WOW64_64Key > 37497 08:27.7 csrss.exe 1560 RegQueryValue HKCU\Software\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447} > NAME NOT FOUND Length: 1,024 > 37498 08:27.7 csrss.exe 1560 RegCloseKey HKCU\Software\Microsoft\Windows > NT\CurrentVersion\AppCompatFlags SUCCESS 37499 08:27.7 csrss.exe 1560 > IRP_MJ_CLEANUP C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS 37500 08:27.7 > csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS 37501 > 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM > SUCCESS Desired Access: Query Value > 37502 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\JUICERPATH NAME NOT FOUND Length: 144 > 37503 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37504 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN > C:\Program Files\Internet Explorer\VMHELPER.DLL NAME NOT FOUND 37505 > 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN > C:\WINDOWS\system32\vmhelper.dll SUCCESS CreationTime: 4/9/2003 7:59:36 > PM, LastAccessTime: 12/12/2005 5:26:27 AM, LastWriteTime: 2/28/2003 > 6:26:26 PM, ChangeTime: 12/25/2006 11:53:27 AM, AllocationSize: 290,816, > EndOfFile: 286,992, FileAttributes: n/a > 37506 08:27.7 iexplore.exe 960 IRP_MJ_CREATE > C:\WINDOWS\system32\vmhelper.dll SUCCESS Desired Access: Execute/Traverse, > Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, > Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, > AllocationSize: n/a, OpenResult: Opened > 37507 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType: SyncTypeCreateSection, > PageProtection: PAGE_EXECUTE > 37508 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH > C:\WINDOWS\system32\vmhelper.dll SUCCESS 37509 08:27.7 iexplore.exe 960 > FASTIO_RELEASE_FOR_CC_FLUSH C:\WINDOWS\system32\vmhelper.dll SUCCESS 37510 > 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\vmhelper.dll SUCCESS 37511 08:27.7 iexplore.exe 960 > FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType: SyncTypeOther > 37512 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\vmhelper.dll SUCCESS 37513 08:27.7 iexplore.exe 960 > IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\vmhelper.dll SUCCESS Type: > QueryNameInformationFile, Name: \WINDOWS\system32\vmhelper.dll > 37514 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP > C:\WINDOWS\system32\vmhelper.dll SUCCESS 37515 08:27.7 iexplore.exe 960 > IRP_MJ_CLOSE C:\WINDOWS\system32\vmhelper.dll SUCCESS 37516 08:27.7 > Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\vmhelper.dll > SUCCESS Type: QueryNameInformationFile, Name: > \WINDOWS\system32\vmhelper.dll > 37517 08:27.7 iexplore.exe 960 Load Image C:\WINDOWS\system32\vmhelper.dll > SUCCESS Image Base: 0x7c520000, Image Size: 0x48000 > 37518 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Windows > NT\CurrentVersion\Image File Execution Options\VMHELPER.DLL NAME NOT FOUND > Desired Access: Read > 37519 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM > SUCCESS Desired Access: Query Value > 37520 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java > VM\EnableFI NAME NOT FOUND Length: 144 > 37521 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM > SUCCESS 37522 08:27.7 iexplore.exe 960 RegOpenKey > HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37523 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java > VM\CPUType NAME NOT FOUND Length: 144 > 37524 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM > SUCCESS 37525 08:27.7 iexplore.exe 960 RegOpenKey > HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37526 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java > VM\EnableGCHeapCheck NAME NOT FOUND Length: 144 > 37527 08:27.7 Procmon.exe 2248 IRP_MJ_CREATE > C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read, > Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, > Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened > 37528 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM > SUCCESS 37529 08:27.7 iexplore.exe 960 RegOpenKey > HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37530 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\EnableGCHeapCheck NAME NOT FOUND Length: 144 > 37531 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37532 08:27.7 iexplore.exe 960 RegOpenKey > HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37533 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java > VM\DisableGCClassCollection NAME NOT FOUND Length: 144 > 37534 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM > SUCCESS 37535 08:27.7 iexplore.exe 960 RegOpenKey > HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37536 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java > VM\InitStaticsEarly NAME NOT FOUND Length: 144 > 37537 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM > SUCCESS 37538 08:27.7 iexplore.exe 960 RegOpenKey > HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37539 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java > VM\EnableJIT SUCCESS Type: REG_BINARY, Length: 4, Data: 01 00 00 00 > 37540 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM > SUCCESS 37541 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION > C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, > AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, > DeletePending: False, Directory: False > 37542 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM > SUCCESS Desired Access: Query Value > 37543 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\DoNotJitList NAME NOT FOUND Length: 144 > 37544 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37545 08:27.7 Procmon.exe 2248 > FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll > SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY > 37546 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION > C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile, > AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1, > DeletePending: False, Directory: False > 37547 08:27.7 Procmon.exe 2248 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37548 08:27.7 Procmon.exe 2248 > FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll > SUCCESS SyncType: SyncTypeOther > 37549 08:27.7 Procmon.exe 2248 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION > C:\WINDOWS\system32\msjava.dll SUCCESS 37550 08:27.7 iexplore.exe 960 > RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query > Value > 37551 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\Verification NAME NOT FOUND Length: 144 > 37552 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37553 08:27.7 iexplore.exe 960 RegOpenKey > HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37554 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\VerificationOptions NAME NOT FOUND Length: 144 > 37555 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37556 08:27.7 iexplore.exe 960 RegOpenKey > HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37557 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java > VM\FileURLsAreTrusted NAME NOT FOUND Length: 144 > 37558 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM > SUCCESS 37559 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION > C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile, > Name: \WINDOWS\system32\msjava.dll > 37560 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM > SUCCESS Desired Access: Query Value > 37561 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: > C:\WINDOWS\java\classes;. > 37562 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: > C:\WINDOWS\java\classes;. > 37563 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: > C:\WINDOWS\java\classes;. > 37564 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data: > C:\WINDOWS\java\classes;. > 37565 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37566 08:27.7 Procmon.exe 2248 IRP_MJ_CLEANUP > C:\WINDOWS\system32\msjava.dll SUCCESS 37567 08:27.7 iexplore.exe 960 > FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\java\classes PATH NOT FOUND 37568 > 08:27.7 Procmon.exe 2248 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll > SUCCESS 37569 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN > C:\Documents and Settings\Ant\Desktop SUCCESS CreationTime: 1/19/2002 > 10:50:26 PM, LastAccessTime: 10/6/2007 9:42:36 AM, LastWriteTime: > 10/6/2007 9:42:36 AM, ChangeTime: 10/6/2007 9:42:36 AM, AllocationSize: 0, > EndOfFile: 0, FileAttributes: D > 37570 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM > SUCCESS Desired Access: Query Value > 37571 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: > 37572 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: > 37573 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: > 37574 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data: > 37575 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37576 08:27.7 iexplore.exe 960 RegOpenKey > HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37577 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\LibsDirectory NAME NOT FOUND Length: 144 > 37578 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37579 08:27.7 iexplore.exe 960 RegOpenKey > HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37580 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: > C:\WINDOWS\java\trustlib > 37581 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: > C:\WINDOWS\java\trustlib > 37582 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: > C:\WINDOWS\java\trustlib > 37583 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data: > C:\WINDOWS\java\trustlib > 37584 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37585 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN > C:\WINDOWS\java\trustlib PATH NOT FOUND 37586 08:27.7 iexplore.exe 960 > RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query > Value > 37587 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\SourcePath NAME NOT FOUND Length: 144 > 37588 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37589 08:27.7 iexplore.exe 960 RegOpenKey > HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37590 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\DevClassPath NAME NOT FOUND Length: 144 > 37591 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37592 08:27.7 iexplore.exe 960 Thread Create SUCCESS Thread ID: > 3528 > 37593 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM > SUCCESS Desired Access: Query Value > 37594 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\EnableContexts NAME NOT FOUND Length: 144 > 37595 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37596 08:27.7 iexplore.exe 960 RegOpenKey > HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37597 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\FTMChecksDisabled NAME NOT FOUND Length: 144 > 37598 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37599 08:27.7 iexplore.exe 960 RegOpenKey > HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 37600 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\FTMChecksDisabledForADO NAME NOT FOUND Length: 144 > 37601 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 37602 08:27.7 iexplore.exe 960 RegOpenKey > HKLM\Software\Microsoft\Java VM\Debug NAME NOT FOUND Desired Access: Query > Value > 37603 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java > VM\MSDebug SUCCESS Desired Access: Query Value > 37604 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java > VM\MSDEBUG SUCCESS 37605 08:27.7 iexplore.exe 960 Thread Create SUCCESS > Thread ID: 2844 > 42516 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java > VM\ActiveXDebug NAME NOT FOUND Desired Access: Query Value > 42517 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM > SUCCESS Desired Access: Query Value > 42518 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java > VM\DebuggingFlags NAME NOT FOUND Length: 144 > 42519 08:27.8 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM > SUCCESS 42520 08:27.8 iexplore.exe 960 RegOpenKey > HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value > 42521 08:27.8 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java > VM\EnableEventMonitors NAME NOT FOUND Length: 144 > 42522 08:27.8 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM > SUCCESS 42523 08:27.8 iexplore.exe 960 RegCreateKey > HKLM\Software\Microsoft\Code Store Database\Global Namespace\Java Packages > SUCCESS Desired Access: Maximum Allowed > 42524 08:27.8 iexplore.exe 960 RegCreateKey HKLM\Software\Microsoft\Code > Store Database\Application Namespaces SUCCESS Desired Access: Maximum > Allowed > 42525 08:27.8 iexplore.exe 960 RegCreateKey HKLM\SOFTWARE\Microsoft\Code > Store Database SUCCESS Desired Access: Maximum Allowed > 42526 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code > Store Database\Global Namespace\Java Packages SUCCESS Desired Access: > Maximum Allowed > 42527 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java > VM\Pending Deletions NAME NOT FOUND Desired Access: Maximum Allowed > 42528 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code > Store Database\Global Namespace\Java Packages\java\lang SUCCESS Desired > Access: Maximum Allowed > 42529 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code > Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: > REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP > 42530 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code > Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: > REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP > 42531 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code > Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: > REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP > 42532 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code > Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: > REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP > 42533 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code > Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: > REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP > 42534 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN > C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49 PM, > LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004 12:56:44 > AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize: 294,912, > EndOfFile: 294,400, FileAttributes: n/a > 42535 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code > Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type: > REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP > 42536 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code > Store Database\Global Namespace\Java Packages\java\lang\Info SUCCESS Type: > REG_BINARY, Length: 12, Data: 00 00 05 00 E2 0E 00 00 1A 00 00 00 > 42537 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code > Store Database\Global Namespace\Java Packages\java\lang\Info SUCCESS Type: > REG_BINARY, Length: 12, Data: 00 00 05 00 E2 0E 00 00 1A 00 00 00 > 42538 08:27.8 iexplore.exe 960 IRP_MJ_CREATE > C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP PATH NOT FOUND Desired Access: > Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, > Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a > 42539 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN > C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49 PM, > LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004 12:56:44 > AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize: 294,912, > EndOfFile: 294,400, FileAttributes: n/a > 42540 08:27.8 iexplore.exe 960 IRP_MJ_CREATE C:\Documents and > Settings\Ant\Desktop\java\lang\ PATH NOT FOUND Desired Access: Read > Data/List Directory, Synchronize, Disposition: Open, Options: Directory, > Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, > AllocationSize: n/a > 42541 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java > VM\Compatibility NAME NOT FOUND Desired Access: Query Value > 42542 08:27.8 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java > VM\Compatibility NAME NOT FOUND Desired Access: Query Value > 42543 08:27.8 iexplore.exe 960 Thread Exit SUCCESS User Time: 0.0000000, > Kernel Time: 0.0156250 > 44010 08:27.9 iexplore.exe 960 RegOpenKey > HKCU\Software\Classes\MIME\Database\Content > Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read > 44011 08:27.9 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content > Type\application/x-java-jnlp-file SUCCESS Desired Access: Read > 44012 08:27.9 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content > Type\application/x-java-jnlp-file SUCCESS Query: Name > 44013 08:27.9 iexplore.exe 960 RegOpenKey > HKCU\Software\Classes\MIME\Database\Content > Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Maximum > Allowed > 44014 08:27.9 iexplore.exe 960 RegQueryValue HKCR\MIME\Database\Content > Type\application/x-java-jnlp-file\Image Filter CLSID NAME NOT FOUND > Length: 144 > 44015 08:27.9 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content > Type\application/x-java-jnlp-file SUCCESS 46361 08:28.0 iexplore.exe 960 > RegOpenKey HKCU\Software\Classes\MIME\Database\Content > Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read > 46362 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content > Type\application/x-java-jnlp-file SUCCESS Desired Access: Read > 46363 08:28.0 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content > Type\application/x-java-jnlp-file SUCCESS Query: Name > 46364 08:28.0 iexplore.exe 960 RegOpenKey > HKCU\Software\Classes\MIME\Database\Content > Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read > 46365 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content > Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read > 46366 08:28.0 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content > Type\application/x-java-jnlp-file SUCCESS > I hope that helped. > -- > "We're all ants. I'm a glittery little ant." --Alanis Morissette > /\___/\ > / /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site) > | |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net > \ _ / Remove ANT from e-mail address: philpi@earthlink.netANT > ( ) or ANTant@zimage.com > Ant is currently not listening to any songs on his home computer. |
| |||
| Re: MS' Java? (logs) On 10/9/2007 7:55 AM PT, Donald Anadell typed: >>> You might first make sure that "msjava.dll" is still located in the >>> System32 >>> folder. >> >> I do have it: v5.0.3810.0. Is this correct? > > Yes, if you click Start||Run and type "wjview" (without the quote marks) > into the Run box and click OK, it should return a dialog box indicating > that you have Version 5.00.3810 installed on your machine. This is the > latest and most secure build of the MSJVM. It says 5.00.3810 so that is fine. >>> If your installation of Windows XP Home||Pro predates SP1a then the MS >>> Java Virtual Machine should be installed on your machine and that file >>> should be located in the System32 folder. >>> >>> Then try reregistering that DLL file by clicking on Start||Run and typing >>> the following into the Run box: >>> regsvr32 Msjava.dll >> That didn't work after I got a successful message. >> >> >>> The MS Java Virtual Machine and the Sun Java Virtual Machine can co-exist >>> quite nicely on the same machine, and you should be able to switch >>> between them. I have both virtual machines installed on three Windows XP >>> machines here and have no problems with any of them using either the >>> MSJVM or Sun. As long as you have the latest secure version of the >>> MSJVM(build 3810) installed, you shouldn't have any problems using that >>>>> Virtual Machinen. >> Yeah, that is what I am trying to do. Have both. Something is broken with >> my Java. :( Is there a downloadable EXE file to reinstall it? > > While Microsoft does not offer the 3810 build of the MSJVM publicly any more > but you should be able to retrieve a copy of the setup file at the following > site: > http://www.mvps.org/marksxp/WindowsXP/java.php Do you happen to know if this is safe to install over an updated XP Pro. SP2? > You can try downloading and installing Build 3810 over top of your current > installation of the MSJVM to see if that resolves your issue. If not, you > may have to following the Uninstall procedure listed at that site to > competely remove the MSJVM from your Machine first, and then reinstall it. OK. > If you do the Uninstall procedure for the MSJVM, you will have to download > both files(Build 3805 and Build 3810) from that site. First downlaod and > install build 3805 to reinstall the Virtual Machine, then download and > install the Patch Build 3810 and install it. Build 3810 is only a Security > Patch, so Build 3805 must be installed first. OK. Actually, doesn't Windows Update detect the patches that need to install? >> Also, is disabling in control panel's Sun Java JRE v6.0 b3 options not run >> in MSIE and VM enabled in IE6's options enough? Or did I miss other places? > > I've always used the small utility available here: > http://www.jensign.com/JavaScience/S...JVM/index.html > that allows you to switch between the MSJVM and the Sun JVM in IE on the > fly. It will make the necessary Registry change to force IE to use on or > the other of the JVMs, and indicate to you which one is currently being > used. Interesting. Thanks as usual. :) -- "I am afraid that I am convinced that a community of human beings is a far more useful thing than a community of ants, and that if the human being is condemned and restricted to perform the same functions over and over again, he will not even be a good ant, not to mention a good human being." --Norbert Wiener /\___/\ / /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site) | |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net \ _ / Remove ANT from e-mail address: philpi@earthlink.netANT ( ) or ANTant@zimage.com Ant is currently not listening to any songs on his home computer. |
| Bookmarks |
| Thread Tools | |
| |
| | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| java | Kizzme007 | Internet Explorer | 2 | 06-24-2007 01:40 PM |
| RE: HELP Java/java script errors/Flash since IE7 installed | Ifyouhavetoask | Internet Explorer | 0 | 05-07-2007 06:40 AM |
| Microsoft Java? Is it available in Vista? (not sun java!) | Jacob2000 | Windows Vista | 13 | 05-05-2007 12:55 PM |
| java | JRS | Microsoft Office | 2 | 01-15-2007 11:55 AM |
| To have or not to have Java | Walter R. | Windows XP | 3 | 01-04-2007 04:29 AM |
| New To Technology Questions? | Do You Need Help with Your Computer or Device? | Do You Need Help with this site? |