Technology Questions

Go Back   Technology Questions > Software Questions > Internet > Internet Explorer

Internet Explorer Discuss IE7 or any other IE version.

Reply
 
LinkBack Thread Tools
  #1 (permalink)  
Old 10-05-2007, 11:20 AM
Phillip Pi
Newsgroup Contributor
 
Posts: n/a
MS' Java?

Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently?
I noticed my Java doesn't seem to work anymore.

Thank you in advance. :)
--
Phillip Pi
Senior Software Quality Assurance Analyst
ISP/Symantec Online Services, Consumer Business Unit
Symantec Corporation
www.symantec.com
-----------------------------------------------------
Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail)
-----------------------------------------------------
Please do NOT e-mail me for technical support. DISCLAIMER: The views
expressed in this posting are mine, and do not necessarily reflect the
views of my employer. Thank you.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

 
Old 10-05-2007, 11:20 AM
  #2 (permalink)  
Old 10-05-2007, 01:10 PM
Tom [Pepper] Willett
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java?

It was removed quite some time ago.

"Phillip Pi" <phillip_pi@symantec.comSYMC> wrote in message
news:upOXmo3BIHA.5228@TK2MSFTNGP05.phx.gbl...
| Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently?
| I noticed my Java doesn't seem to work anymore.
|
| Thank you in advance. :)
| --
| Phillip Pi
| Senior Software Quality Assurance Analyst
| ISP/Symantec Online Services, Consumer Business Unit
| Symantec Corporation
| www.symantec.com
| -----------------------------------------------------
| Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail)
| -----------------------------------------------------
| Please do NOT e-mail me for technical support. DISCLAIMER: The views
| expressed in this posting are mine, and do not necessarily reflect the
| views of my employer. Thank you.


Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #3 (permalink)  
Old 10-05-2007, 01:40 PM
ANONYMOUS
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java?

Ms never owned Java. It had the license to bundle it with its IE6 but
since SP1 this was stopped. MS was forced to reissue SP1a in which Java
was unbundled. If you really need Java then try this link:

http://java.sun.com/javase/downloads/index.jsp

Hope this proves useful.


Phillip Pi wrote:
>
> Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently?
> I noticed my Java doesn't seem to work anymore.
>
> Thank you in advance. :)
> --
> Phillip Pi
> Senior Software Quality Assurance Analyst
> ISP/Symantec Online Services, Consumer Business Unit
> Symantec Corporation
> www.symantec.com
> -----------------------------------------------------
> Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail)
> -----------------------------------------------------
> Please do NOT e-mail me for technical support. DISCLAIMER: The views
> expressed in this posting are mine, and do not necessarily reflect the
> views of my employer. Thank you.

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #4 (permalink)  
Old 10-05-2007, 04:30 PM
Phillip Pi
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java?

Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I
wonder if MS did something to remove it?


On 10/5/2007 1:28 PM PT, ANONYMOUS wrote:

> Ms never owned Java. It had the license to bundle it with its IE6 but
> since SP1 this was stopped. MS was forced to reissue SP1a in which Java
> was unbundled. If you really need Java then try this link:
>
> http://java.sun.com/javase/downloads/index.jsp
>
> Hope this proves useful.
>
>
> Phillip Pi wrote:
>> Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently?
>> I noticed my Java doesn't seem to work anymore.
>>
>> Thank you in advance. :)

--
Phillip Pi
Senior Software Quality Assurance Analyst
ISP/Symantec Online Services, Consumer Business Unit
Symantec Corporation
www.symantec.com
-----------------------------------------------------
Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail)
-----------------------------------------------------
Please do NOT e-mail me for technical support. DISCLAIMER: The views
expressed in this posting are mine, and do not necessarily reflect the
views of my employer. Thank you.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #5 (permalink)  
Old 10-05-2007, 04:40 PM
Phillip Pi
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java?

Hmm, when did MS release a hotfix to remove it? I have had this XP Pro.
installation since about 2002 and had its licensed Java worked in IE6.0
SP2 (didn't have Sun Java installed).


On 10/5/2007 12:57 PM PT, Tom [Pepper] Willett wrote:

> It was removed quite some time ago.
>
> "Phillip Pi" <phillip_pi@symantec.comSYMC> wrote in message
> news:upOXmo3BIHA.5228@TK2MSFTNGP05.phx.gbl...
> | Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently?
> | I noticed my Java doesn't seem to work anymore.
> |
> | Thank you in advance. :)

--
Phillip Pi
Senior Software Quality Assurance Analyst
ISP/Symantec Online Services, Consumer Business Unit
Symantec Corporation
www.symantec.com
-----------------------------------------------------
Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail)
-----------------------------------------------------
Please do NOT e-mail me for technical support. DISCLAIMER: The views
expressed in this posting are mine, and do not necessarily reflect the
views of my employer. Thank you.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #6 (permalink)  
Old 10-05-2007, 06:00 PM
Jon Kennedy
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java?

For more information about MS and Sun re Java, and if you need MS's JavaVM,
see this site:
http://inetexplorer.mvps.org/answers/14.html

--

Jon Kennedy, MS MVP/IE
Charlotte, NC, USA
jkennedy2@carolina.rr.com


"Phillip Pi" <phillip_pi@symantec.comSYMC> wrote in message
news:uflATZ6BIHA.2324@TK2MSFTNGP03.phx.gbl...
> Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I
> wonder if MS did something to remove it?
>
>
> On 10/5/2007 1:28 PM PT, ANONYMOUS wrote:
>
>> Ms never owned Java. It had the license to bundle it with its IE6 but
>> since SP1 this was stopped. MS was forced to reissue SP1a in which Java
>> was unbundled. If you really need Java then try this link:
>>
>> http://java.sun.com/javase/downloads/index.jsp
>>
>> Hope this proves useful.
>>
>>
>> Phillip Pi wrote:
>>> Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently?
>>> I noticed my Java doesn't seem to work anymore.
>>>
>>> Thank you in advance. :)

> --
> Phillip Pi
> Senior Software Quality Assurance Analyst
> ISP/Symantec Online Services, Consumer Business Unit
> Symantec Corporation
> www.symantec.com
> -----------------------------------------------------
> Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail)
> -----------------------------------------------------
> Please do NOT e-mail me for technical support. DISCLAIMER: The views
> expressed in this posting are mine, and do not necessarily reflect the
> views of my employer. Thank you.



Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #7 (permalink)  
Old 10-06-2007, 03:00 PM
ANONYMOUS
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java?

Phillip Pi wrote:

> Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I
> wonder if MS did something to remove it?
>
>


Yes. Read this article:

http://support.microsoft.com/?kbid=813926

Hope this helps.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #8 (permalink)  
Old 10-06-2007, 10:10 PM
CB
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java?



"Phillip Pi" wrote:

> Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I
> wonder if MS did something to remove it?
>
>
> On 10/5/2007 1:28 PM PT, ANONYMOUS wrote:
>
> > Ms never owned Java. It had the license to bundle it with its IE6 but
> > since SP1 this was stopped. MS was forced to reissue SP1a in which Java
> > was unbundled. If you really need Java then try this link:
> >
> > http://java.sun.com/javase/downloads/index.jsp
> >
> > Hope this proves useful.
> >
> >
> > Phillip Pi wrote:
> >> Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently?
> >> I noticed my Java doesn't seem to work anymore.
> >>
> >> Thank you in advance. :)

> --
> Phillip Pi
> Senior Software Quality Assurance Analyst
> ISP/Symantec Online Services, Consumer Business Unit
> Symantec Corporation
> www.symantec.com
> -----------------------------------------------------
> Email: phillip_pi@symantec.comSYMC (remove SYMC to reply by e-mail)
> -----------------------------------------------------
> Please do NOT e-mail me for technical support. DISCLAIMER: The views
> expressed in this posting are mine, and do not necessarily reflect the
> views of my employer. Thank you.
>



Microsoft was forced to remove their version of Java because
Microsoft and Sun could not come to terms on a license agreement. However,
you can download and install the Java Runtime Environment from Sun's website
at no charge.

Have a nice day.

C.B.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #9 (permalink)  
Old 10-07-2007, 07:30 AM
Ant
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java?

On 10/5/2007 5:56 PM PT, Jon Kennedy typed:

> For more information about MS and Sun re Java, and if you need MS's JavaVM,
> see this site:
> http://inetexplorer.mvps.org/answers/14.html


Thanks. I do have MS' Java installed since I installed this XP Pro. back
in 2002 or so. Also in IE's options, I see options for Java VM:

C:\>jview
Microsoft (R) Command-line Loader for Java Version 5.00.3810
Copyright (C) Microsoft Corp 1996-2000. All rights reserved.

Usage: JView [options] <classname> [arguments]

Options:
/? displays usage text
/cp <classpath> set class path
/cp:p <path> prepend path to class path
/cp:a <path> append path to class path
/n <namespace> namespace in which to run
/p pauses before terminating if an error occurs
/v verify all classes
/d:<name>=<value> define system property
/a execute AppletViewer
/vst print verbose stack traces (requires debug classes)
/prof[:options] enable profiling (/prof:? for help)

Classname:
.CLASS file to be executed.

Arguments:
command-line arguments to be passed on to the class file


Anyways, when I try to run Java applets from Internet Web sites like on
ezboard.com, www.javatester.org/version.html , etc. show an empty box
with the infamous red square with a red X. Screen shot:
http://img443.imageshack.us/img443/1...pprosp2ff1.gif ...

I can use Sun's JRE just fine if I enable it for IE6.0 SP2. I don't know
why the old one from MS doesn't work anymore. :(
--
"When you have seen one ant, one bird, one tree, you have not seen them
all." --Edward O. Wilson, 1992
/\___/\
/ /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
| |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
\ _ / Remove ANT from e-mail address: philpi@earthlink.netANT
( ) or ANTant@zimage.com
Ant is currently not listening to any songs on his home computer.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #10 (permalink)  
Old 10-07-2007, 07:30 AM
Ant
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java?

On 10/6/2007 9:58 PM PT, CB typed:

>> Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I
>> wonder if MS did something to remove it?
>>
>>
>> On 10/5/2007 1:28 PM PT, ANONYMOUS wrote:
>>
>>> Ms never owned Java. It had the license to bundle it with its IE6 but
>>> since SP1 this was stopped. MS was forced to reissue SP1a in which Java
>>> was unbundled. If you really need Java then try this link:
>>>
>>> http://java.sun.com/javase/downloads/index.jsp
>>>
>>> Hope this proves useful.
>>>
>>>
>>> Phillip Pi wrote:
>>>> Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2 recently?
>>>> I noticed my Java doesn't seem to work anymore.
>>>>
>>>> Thank you in advance. :)

>
> Microsoft was forced to remove their version of Java because
> Microsoft and Sun could not come to terms on a license agreement. However,
> you can download and install the Java Runtime Environment from Sun's website
> at no charge.


Right, but I still have its old Java VM installed since I installed it
from 2002 or so before MS yanked it from its Web site.

Sun JRE works fine, but if I tell it to disable for IE6.0 SP2 and use
old MS Java VM, then it doesn't work. Screen shot:
http://img443.imageshack.us/img443/1...pprosp2ff1.gif
--
/\___/\
/ /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
| |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
\ _ / Remove ANT from e-mail address: philpi@earthlink.netANT
( ) or ANTant@zimage.com
Ant is currently not listening to any songs on his home computer.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #11 (permalink)  
Old 10-07-2007, 10:00 AM
Donald Anadell
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java?

Hi,

You might first make sure that "msjava.dll" is still located in the System32
folder.

If your installation of Windows XP Home||Pro predates SP1a then the MS Java
Virtual Machine should be installed on your machine and that file should be
located in the System32 folder.

Then try reregistering that DLL file by clicking on Start||Run and typing
the following into the Run box:
regsvr32 Msjava.dll

The MS Java Virtual Machine and the Sun Java Virtual Machine can co-exist
quite nicely on the same machine, and you should be able to switch between
them. I have both virtual machines installed on three Windows XP machines
here and have no problems with any of them using either the MSJVM or Sun.
As long as you have the latest secure version of the MSJVM(build 3810)
installed, you shouldn't have any problems using that Virtual Machinen.

Good luck,

Donald Anadell


"Ant" <philpi@earthlink.netANT> wrote in message
news:%23CVKwwOCIHA.5044@TK2MSFTNGP03.phx.gbl...
> On 10/6/2007 9:58 PM PT, CB typed:
>
>>> Right, I had MS' leased(?) Java in my old XP Pro. (from 2002) before. I
>>> wonder if MS did something to remove it?
>>>
>>>
>>> On 10/5/2007 1:28 PM PT, ANONYMOUS wrote:
>>>
>>>> Ms never owned Java. It had the license to bundle it with its IE6 but
>>>> since SP1 this was stopped. MS was forced to reissue SP1a in which
>>>> Java
>>>> was unbundled. If you really need Java then try this link:
>>>>
>>>> http://java.sun.com/javase/downloads/index.jsp
>>>>
>>>> Hope this proves useful.
>>>>
>>>>
>>>> Phillip Pi wrote:
>>>>> Did MS remove its non-Sun Java from its Windows XP's IE6.0 SP2
>>>>> recently?
>>>>> I noticed my Java doesn't seem to work anymore.
>>>>>
>>>>> Thank you in advance. :)

> >
>> Microsoft was forced to remove their version of Java because
>> Microsoft and Sun could not come to terms on a license agreement.
>> However, you can download and install the Java Runtime Environment from
>> Sun's website at no charge.

>
> Right, but I still have its old Java VM installed since I installed it
> from 2002 or so before MS yanked it from its Web site.
>
> Sun JRE works fine, but if I tell it to disable for IE6.0 SP2 and use old
> MS Java VM, then it doesn't work. Screen shot:
> http://img443.imageshack.us/img443/1...pprosp2ff1.gif
> --
> /\___/\
> / /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
> | |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
> \ _ / Remove ANT from e-mail address: philpi@earthlink.netANT
> ( ) or ANTant@zimage.com
> Ant is currently not listening to any songs on his home computer.




Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #12 (permalink)  
Old 10-09-2007, 06:40 AM
Ant
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java? (logs)

On 10/7/2007 9:33 AM PT, Donald Anadell typed:

> You might first make sure that "msjava.dll" is still located in the System32
> folder.


I do have it: v5.0.3810.0. Is this correct?


> If your installation of Windows XP Home||Pro predates SP1a then the MS Java
> Virtual Machine should be installed on your machine and that file should be
> located in the System32 folder.
>
> Then try reregistering that DLL file by clicking on Start||Run and typing
> the following into the Run box:
> regsvr32 Msjava.dll


That didn't work after I got a successful message.


> The MS Java Virtual Machine and the Sun Java Virtual Machine can co-exist
> quite nicely on the same machine, and you should be able to switch between
> them. I have both virtual machines installed on three Windows XP machines
> here and have no problems with any of them using either the MSJVM or Sun.
> As long as you have the latest secure version of the MSJVM(build 3810)
> installed, you shouldn't have any problems using that Virtual Machinen.


Yeah, that is what I am trying to do. Have both. Something is broken
with my Java. :( Is there a downloadable EXE file to reinstall it? Also,
is disabling in control panel's Sun Java JRE v6.0 b3 options not run in
MSIE and VM enabled in IE6's options enough? Or did I miss other places?

FYI if it even helps. I ran the latest Process Explorer on iexplore.exe:
Process PID CPU Description User Name Priority Handles Window Title
System Idle Process 0 92.36 NT AUTHORITY\SYSTEM 0 0
Interrupts n/a Hardware Interrupts 0 0
DPCs n/a 0.69 Deferred Procedure Calls 0 0
System 4 0.69 NT AUTHORITY\SYSTEM 8 632
smss.exe 1492 Windows NT Session Manager NT AUTHORITY\SYSTEM 11 21
csrss.exe 1560 0.69 Client Server Runtime Process NT
AUTHORITY\SYSTEM 13 513
winlogon.exe 1584 Windows NT Logon Application NT
AUTHORITY\SYSTEM 13 584
services.exe 1628 0.69 Services and Controller app NT
AUTHORITY\SYSTEM 9 316
svchost.exe 1828 Generic Host Process for Win32 Services NT
AUTHORITY\SYSTEM 8 220
svchost.exe 1872 Generic Host Process for Win32 Services NT
AUTHORITY\NETWORK SERVICE 8 264
svchost.exe 440 Generic Host Process for Win32 Services NT
AUTHORITY\SYSTEM 8 1,631
svchost.exe 616 Generic Host Process for Win32 Services NT
AUTHORITY\NETWORK SERVICE 8 98
spoolsv.exe 748 Spooler SubSystem App NT AUTHORITY\SYSTEM 8 130
svchost.exe 952 Generic Host Process for Win32 Services NT
AUTHORITY\LOCAL SERVICE 8 173
cygrunsrv.exe 972 MYBOX\SvcCOPSSH 8 81
nTuneService.exe 1044 NVIDIA Access Manager NT
AUTHORITY\SYSTEM 8 147
nvsvc32.exe 1060 NVIDIA Driver Helper Service, Version 163.69
NT AUTHORITY\SYSTEM 8 139
PERSFW.exe 1064 Kerio Personal Firewall Engine NT
AUTHORITY\SYSTEM 8 73
HPZipm12.exe 376 PML Driver NT AUTHORITY\SYSTEM 8 42
PnkBstrA.exe 392 NT AUTHORITY\SYSTEM 8 46
PnkBstrB.exe 464 NT AUTHORITY\SYSTEM 8 58
tcpsvcs.exe 544 TCP/IP Services Application NT AUTHORITY\SYSTEM 8 74
wdfmgr.exe 660 Windows User Mode Driver Manager NT
AUTHORITY\LOCAL SERVICE 8 66
vmware-authd.exe 1168 VMware Authorization Service NT
AUTHORITY\SYSTEM 8 138
vmnat.exe 1196 VMware NAT Service NT AUTHORITY\SYSTEM 8 54
vmnetdhcp.exe 1324 VMware VMnet DHCP service NT
AUTHORITY\SYSTEM 8 29
alg.exe 252 Application Layer Gateway Service NT
AUTHORITY\LOCAL SERVICE 8 104
lsass.exe 1640 LSA Shell (Export Version) NT AUTHORITY\SYSTEM 9 331
sshd.exe 1236 MYBOX\SvcCOPSSH 8 98
explorer.exe 996 Windows Explorer MYBOX\Bob 8 712 ul
TaskSwitch.exe 1824 MYBOX\Bob 8 35
CTHELPER.EXE 776 CtHelper Application MYBOX\Bob 8 176
hpcmpmgr.exe 2412 HP Framework Component Manager Service MYBOX\Bob 8 176
hpwuSchd2.exe 2452 Hewlett-Packard Product AssistBob MYBOX\Bob 8 23
hphmon06.exe 2460 HPHmon06 MYBOX\Bob 8 101
rundll32.exe 2500 Run a DLL as an App MYBOX\Bob 8 92
FreeShade.exe 2572 FreeShade MYBOX\Bob 8 22
goScreen.exe 2584 Virtual multi-page monitor manager MYBOX\Bob 8 98
goScreen
MCDTray.exe 2600 Media Changer Deluxe SysTray Launcher MYBOX\Bob 8 25
Pickatag.exe 2608 MYBOX\Bob 8 22
PopTray.exe 2624 PopTray E-Mail Notifier MYBOX\Bob 8 150
trillian.exe 788 Trillian MYBOX\Bob 8 340 Trillian
SecureCRT.EXE 3532 SecureCRT Application MYBOX\Bob 8 79 Bobian -
SecureCRT
SecureCRT.EXE 2044 SecureCRT Application MYBOX\Bob 8 153
alpha.zimage.com - SecureCRT
notepad.exe 3888 Notepad MYBOX\Bob 8 31
seamonkey.exe 796 SeaMonkey MYBOX\Bob 8 188 Compose: Re: MS' Java?
procexp.exe 2880 4.17 Sysinternals Process Explorer MYBOX\Bob 13 422
Process Explorer - Sysinternals: www.sysinternals.com [MYBOX\Bob]
iexplore.exe 2800 0.69 Internet Explorer MYBOX\Bob 8 323 Java Tester -
What Version of Java Are You Running? - Microsoft Internet Explorer

Process: iexplore.exe Pid: 2800

Base Size Mapping Description Version Time Name
0x140000 0x3000 Data <Pagefile Backed>
0x260000 0x3000 Data <Pagefile Backed>
0x263000 0xD000 Data <Pagefile Backed>
0x330000 0x2000 Data <Pagefile Backed>
0x390000 0x2000 Data <Pagefile Backed>
0x3A0000 0x2000 Data <Pagefile Backed>
0x3B0000 0x2000 Data <Pagefile Backed>
0x3C0000 0x2000 Data <Pagefile Backed>
0x3E0000 0x2000 Data <Pagefile Backed>
0x420000 0x5000 Data <Pagefile Backed>
0x425000 0xBB000 Data <Pagefile Backed>
0x4E0000 0x2000 Data <Pagefile Backed>
0x4E2000 0x6000 Data <Pagefile Backed>
0x4F0000 0x103000 Data <Pagefile Backed>
0x600000 0x9C000 Data <Pagefile Backed>
0x69C000 0x264000 Data <Pagefile Backed>
0xA00000 0x51000 Data <Pagefile Backed>
0xA70000 0xE000 Data <Pagefile Backed>
0xB60000 0x2000 Data <Pagefile Backed>
0xEE0000 0x2000 Data <Pagefile Backed>
0x1000000 0x1000 Data <Pagefile Backed>
0x1070000 0x2000 Data <Pagefile Backed>
0x1A00000 0x1000 Data <Pagefile Backed>
0x1B20000 0x2000 Data <Pagefile Backed>
0x1B30000 0x2000 Data <Pagefile Backed>
0x1E50000 0x1000 Data <Pagefile Backed>
0x1F60000 0x1000 Data <Pagefile Backed>
0x1F70000 0x2000 Data <Pagefile Backed>
0x7F6F0000 0x7000 Data <Pagefile Backed>
0x7F6F7000 0xF9000 Data <Pagefile Backed>
0x7FFB0000 0x24000 Data <Pagefile Backed>
0x77DD0000 0x9B000 Image Advanced Windows 32 Base API 5.01.2600.2180
8/4/2004 12:56 AM ADVAPI32.dll
0x77B40000 0x22000 Image Application Compatibility Client Library
5.01.2600.2180 8/4/2004 12:56 AM appHelp.dll
0x20000000 0x12000 Image Shell Browser UI Library 6.00.2900.2180
8/4/2004 12:56 AM browselc.dll
0x75F80000 0xFD000 Image Shell Browser UI Library 6.00.2900.3157
6/15/2007 1:12 AM BROWSEUI.dll
0x76FD0000 0x7F000 Image 2001.12.4414.0308 7/25/2005 9:39 PM CLBCATQ.DLL
0x773D0000 0x103000 Image User Experience Controls Library
6.00.2900.2982 8/25/2006 8:45 AM comctl32.dll
0x5D090000 0x9A000 Image Common Controls Library 5.82.2900.2982
8/25/2006 8:45 AM comctl32.dll
0x763B0000 0x49000 Image Common Dialogs DLL 6.00.2900.2180 8/4/2004
12:56 AM comdlg32.dll
0x77050000 0xC5000 Image 2001.12.4414.0258 8/4/2004 12:56 AM COMRes.dll
0x77A80000 0x94000 Image Crypto API32 5.131.2600.2180 8/4/2004 12:56 AM
CRYPT32.dll
0x754D0000 0x80000 Image Microsoft Trust UI Provider 5.131.2600.2180
8/4/2004 12:56 AM CRYPTUI.dll
0x76600000 0x1D000 Image Offline Network Agent 5.01.2600.2180 8/4/2004
12:56 AM CSCDLL.dll
0x77A20000 0x54000 Image Client Side Caching UI 5.01.2600.2180 8/4/2004
12:56 AM cscui.dll
0x2000000 0x6000 Image ctagent 1.00.0000.0012 8/11/2006 2:56 PM ctagent.dll
0x350000 0x3000 Data 8/23/2001 5:00 AM ctype.nls
0x76F20000 0x27000 Image DNS Client API DLL 5.01.2600.2938 6/26/2006
10:37 AM DNSAPI.dll
0x16000000 0x28000 Image Trillian Event Control 3.01.0007.0000 7/19/2007
12:00 AM events.dll
0x69450000 0x16000 Image Windows Error Reporting 5.01.2600.2180 8/4/2004
12:56 AM faultrep.dll
0x10000000 0x1A000 Image FreeShade 1.00.0000.0004 9/27/2001 1:16 AM
FreeShade.dll
0x77F10000 0x47000 Image GDI Client DLL 5.01.2600.3159 6/19/2007 6:31
AM GDI32.dll
0x662B0000 0x58000 Image Home Networking Configuration Manager
5.01.2600.2180 8/4/2004 12:56 AM hnetcfg.dll
0x400000 0x19000 Image Internet Explorer 6.00.2900.2180 8/4/2004 12:56
AM iexplore.exe
0x76C90000 0x28000 Image Windows NT Image Helper 5.01.2600.2180 8/4/2004
12:56 AM IMAGEHLP.dll
0x66880000 0xC000 Image IE plugin image decoder support DLL
6.00.2900.2180 8/4/2004 12:56 AM ImgUtil.dll
0x76390000 0x1D000 Image Windows XP IMM32 API Client DLL 5.01.2600.2180
8/4/2004 12:56 AM IMM32.DLL
0xB20000 0xC000 Data 10/9/2007 6:11 AM index.dat
0xB70000 0x174000 Data 10/9/2007 6:11 AM index.dat
0xCF0000 0x38000 Data 10/9/2007 6:11 AM index.dat
0x2EB0000 0x8000 Data 10/9/2007 6:11 AM index.dat
0x76D60000 0x19000 Image IP Helper API 5.01.2600.2912 5/19/2006 5:59 AM
iphlpapi.dll
0x7C800000 0xF5000 Image Windows NT BASE API Client DLL 5.01.2600.3119
4/16/2007 8:52 AM kernel32.dll
0x290000 0x3D000 Data 7/17/2004 11:48 AM locale.nls
0x629C0000 0x9000 Image Language Pack 5.01.2600.2180 8/4/2004 12:56 AM
LPK.DLL
0x2510000 0xA5000 Data 8/23/2001 5:00 AM mlang.dat
0x75CF0000 0x91000 Image Multi Language Support DLL 6.00.2900.2180
8/4/2004 12:56 AM mlang.dll
0x77B20000 0x12000 Image ASN.1 Runtime APIs 5.01.2600.2180 8/4/2004
12:56 AM MSASN1.dll
0x74720000 0x4B000 Image MSCTF Server DLL 5.01.2600.2180 8/4/2004
12:56 AM MSCTF.dll
0x755C0000 0x2E000 Image Microsoft Text Frame Work Service IME
5.01.2600.2180 8/4/2004 12:56 AM msctfime.ime
0x4AA00000 0x15000 Image Active Debugging Proxy/Stub 6.00.0000.8424
11/15/1999 10:46 AM MSDBG.DLL
0x7DC30000 0x2F2000 Image Microsoft (R) HTML Viewer 6.00.2900.3157
6/15/2007 1:12 AM mshtml.dll
0x7D1E0000 0x2BE000 Image Windows Installer 3.01.4000.4039 4/18/2007
9:12 AM msi.dll
0x76380000 0x5000 Image GDIEXT Client DLL 5.01.2600.2180 8/4/2004
12:56 AM msimg32.dll
0x2DC0000 0x4000 Data 6/4/2004 8:46 PM MSIMGSIZ.DAT
0x746F0000 0x2A000 Image Active IMM Server DLL 5.01.2600.2180 8/4/2004
12:56 AM msimtf.dll
0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM
msjava.dll
0x746C0000 0x27000 Image Microsoft Line Services library file
3.10.0349.0000 8/23/2001 5:00 AM msls31.dll
0x77C70000 0x23000 Image Microsoft Authentication Package v1.0
5.01.2600.2180 8/4/2004 12:56 AM msv1_0.dll
0x7C340000 0x56000 Image Microsoft® C Runtime Library 7.10.3052.0004
9/25/2007 1:25 AM MSVCR71.dll
0x77C10000 0x58000 Image Windows NT CRT DLL 7.00.2600.2180 8/4/2004
12:56 AM msvcrt.dll
0x71A50000 0x3F000 Image Microsoft Windows Sockets 2.0 Service
Provider 5.01.2600.2180 8/4/2004 12:56 AM mswsock.dll
0x5B860000 0x54000 Image Net Win32 API DLL 5.01.2600.2976 8/17/2006
5:28 AM NETAPI32.dll
0x7C900000 0xB0000 Image NT Layer DLL 5.01.2600.2180 8/4/2004 12:56 AM
ntdll.dll
0x774E0000 0x13D000 Image Microsoft OLE for Windows 5.01.2600.2726
7/25/2005 9:39 PM ole32.dll
0x77120000 0x8B000 Image 5.01.2600.3139 5/17/2007 4:28 AM OLEAUT32.dll
0x5EDD0000 0x17000 Image 5.01.2600.2180 8/4/2004 12:56 AM olepro32.dll
0xFD0000 0x2F000 Image Orbitcth 2.02.0000.0001 9/20/2007 3:40 PM
orbitcth.dll
0x5E310000 0xC000 Image IE PNG plugin image decoder 6.00.2900.3157
6/15/2007 1:12 AM pngfilt.dll
0x76BF0000 0xB000 Image Process Status Helper 5.01.2600.2180 8/4/2004
12:56 AM PSAPI.DLL
0x76FC0000 0x6000 Image Remote Access AutoDial Helper 5.01.2600.2938
6/26/2006 10:37 AM rasadhlp.dll
0x76EE0000 0x3C000 Image Remote Access API 5.01.2600.2180 8/4/2004
12:56 AM RASAPI32.DLL
0x76E90000 0x12000 Image Remote Access Connection Manager
5.01.2600.2180 8/4/2004 12:56 AM rasman.dll
0x77E70000 0x91000 Image Remote Procedure Call Runtime 5.01.2600.2180
8/4/2004 12:56 AM RPCRT4.dll
0xFFD0000 0x28000 Image Microsoft Enhanced Cryptographic Provider
5.01.2600.2161 8/3/2004 10:31 PM rsaenh.dll
0x76E80000 0xE000 Image Routing Utilities 5.01.2600.2180 8/4/2004
12:56 AM rtutils.dll
0x1080000 0x11A000 Image SBSD IE Protection 1.05.0000.0008 8/31/2007
4:46 PM SDHelper.dll
0x77FE0000 0x11000 Image Security Support Provider Interface
5.01.2600.2180 8/4/2004 12:56 AM Secur32.dll
0x722B0000 0x5000 Image SENS Connectivity API DLL 5.01.2600.2180
8/4/2004 12:56 AM sensapi.dll
0x77920000 0xF3000 Image Windows Setup API 5.01.2600.2180 8/4/2004
12:56 AM SETUPAPI.dll
0x1A10000 0x88000 Image Shell Doc Object and Control Library
6.00.2900.2180 8/4/2004 12:56 AM shdoclc.dll
0x7E290000 0x171000 Image Shell Doc Object and Control Library
6.00.2900.3157 6/15/2007 1:12 AM SHDOCVW.dll
0x7C9C0000 0x815000 Image Windows Shell Common Dll 6.00.2900.3051
12/19/2006 2:52 PM SHELL32.dll
0x77F60000 0x76000 Image Shell Light-weight Utility Library
6.00.2900.3157 6/15/2007 1:12 AM SHLWAPI.dll
0x2D0000 0x41000 Data 8/23/2001 5:00 AM sortkey.nls
0x320000 0x6000 Data 7/17/2004 11:48 AM sorttbls.nls
0x6D7C0000 0x79000 Image Java(TM) Platform SE binary 6.00.0030.0005
9/25/2007 1:11 AM ssv.dll
0x75E90000 0xB0000 Image Fusion 2.5 5.01.2600.3019 10/19/2006 6:56 AM
SXS.DLL
0x76EB0000 0x2F000 Image Microsoft® Windows(TM) Telephony API Client
DLL 5.01.2600.2180 8/4/2004 12:56 AM TAPI32.dll
0x270000 0x16000 Data 8/23/2001 5:00 AM unicode.nls
0x7E1E0000 0xA2000 Image OLE32 Extensions for Win32 6.00.2900.3157
6/15/2007 1:12 AM urlmon.dll
0x7E410000 0x90000 Image Windows XP USER API Client DLL 5.01.2600.3099
3/8/2007 8:36 AM USER32.dll
0x769C0000 0xB3000 Image Userenv 5.01.2600.2180 8/4/2004 12:56 AM
USERENV.dll
0x74D90000 0x6B000 Image Uniscribe Unicode script processor
1.420.2600.2180 8/4/2004 12:56 AM USP10.dll
0x5AD70000 0x38000 Image Microsoft UxTheme Library 6.00.2900.2180
8/4/2004 12:56 AM uxtheme.dll
0x77C00000 0x8000 Image Version Checking and File Installation
Libraries 5.01.2600.2180 8/4/2004 12:56 AM VERSION.dll
0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000
2/28/2003 6:26 PM VMHELPER.DLL
0x771B0000 0xAA000 Image Internet Extensions for Win32 6.00.2900.3164
6/26/2007 7:35 AM WININET.dll
0x76B40000 0x2D000 Image MCI API DLL 5.01.2600.2180 8/4/2004 12:56 AM
WINMM.dll
0x76360000 0x10000 Image Winstation Library 5.01.2600.2180 8/4/2004
12:56 AM WINSTA.dll
0x76C30000 0x2E000 Image Microsoft Trust Verification APIs
5.131.2600.2180 8/4/2004 12:56 AM WINTRUST.dll
0x76F60000 0x2C000 Image Win32 LDAP API DLL 5.01.2600.2180 8/4/2004
12:56 AM WLDAP32.dll
0x71AB0000 0x17000 Image Windows Socket 2.0 32-Bit DLL 5.01.2600.2180
8/4/2004 12:56 AM WS2_32.dll
0x71AA0000 0x8000 Image Windows Socket 2.0 Helper for Windows NT
5.01.2600.2180 8/4/2004 12:56 AM WS2HELP.dll
0x71A90000 0x8000 Image Windows Sockets Helper DLL 5.01.2600.2180
8/4/2004 12:56 AM wshtcpip.dll
0x71AD0000 0x9000 Image Windows Socket 32-Bit DLL 5.01.2600.2180
8/4/2004 12:56 AM wsock32.dll
0x76F50000 0x8000 Image Windows Terminal Server SDK APIs 5.01.2600.2180
8/4/2004 12:56 AM WTSAPI32.dll
0x1420000 0x2C5000 Image Service Pack 2 Messages 5.01.2600.2180 8/4/2004
12:56 AM xpsp2res.dll

As you can see, IE loaded its MS Java stuff:
0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM
msjava.dll
0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000
2/28/2003 6:26 PM VMHELPER.DLL


I also ran Process Monitor to log. I did a search and found these
related to MS Java:
37243 08:27.6 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Active Setup\Installed
Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS
Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll
37244 08:27.6 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Active Setup\Installed
Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS
Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll
37245 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37269 08:27.6 iexplore.exe 960 RegQueryValue
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default)
SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll
37270 08:27.6 iexplore.exe 960 RegQueryKey
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32
SUCCESS Query: Name
37271 08:27.6 iexplore.exe 960 RegOpenKey
HKCU\Software\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32
NAME NOT FOUND Desired Access: Maximum Allowed
37272 08:27.6 iexplore.exe 960 RegQueryValue
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default)
SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll
37273 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37274 08:27.6 iexplore.exe 960 RegQueryKey
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name
37339 08:27.7 iexplore.exe 960 RegQueryValue
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default)
SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll
37340 08:27.7 iexplore.exe 960 RegCloseKey
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 SUCCESS
37341 08:27.7 iexplore.exe 960 RegQueryKey
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name
37385 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37386 08:27.7 iexplore.exe 960 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse,
Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
AllocationSize: n/a, OpenResult: Opened
37387 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_EXECUTE
37388 08:27.7 iexplore.exe 960 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37389 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37390 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37391 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37392 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37393 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37394 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37395 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37396 08:27.7 iexplore.exe 960 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse,
Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
AllocationSize: n/a, OpenResult: Opened
37397 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_EXECUTE
37398 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH
C:\WINDOWS\system32\msjava.dll SUCCESS
37399 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_CC_FLUSH
C:\WINDOWS\system32\msjava.dll SUCCESS
37400 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37401 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37402 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37403 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37404 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37405 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37406 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37407 08:27.7 iexplore.exe 960 Load Image
C:\WINDOWS\system32\msjava.dll SUCCESS Image Base: 0x7c000000, Image
Size: 0xea000
37408 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\msjava.dll SUCCESS Desired Access: Read
37409 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\msjava.dll\CheckAppHelp SUCCESS Type: REG_DWORD, Length: 4, Data: 1
37410 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\msjava.dll SUCCESS
37428 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS
Desired Access: Read Data/List Directory, Synchronize, Disposition:
Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, AllocationSize: n/a, Impersonating:
HARVESTER\Ant, OpenResult: Opened
37429 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter:
msjava.dll, 2: msjava.dll
37430 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS
37431 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS
37432 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37433 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\ SUCCESS Desired Access:
Read Data/List Directory, Synchronize, Disposition: Open, Options:
Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read,
Write, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: Opened
37434 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS
SUCCESS Type: QueryDirectory, Filter: WINDOWS, 2: WINDOWS
37435 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\ SUCCESS
37436 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\ SUCCESS
37437 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS SUCCESS Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open,
Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, AllocationSize: n/a, Impersonating:
HARVESTER\Ant, OpenResult: Opened
37438 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL
C:\WINDOWS\system32 SUCCESS Type: QueryDirectory, Filter: system32, 2:
system32
37439 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS SUCCESS
37440 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS SUCCESS
37441 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS
Desired Access: Read Data/List Directory, Synchronize, Disposition:
Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, AllocationSize: n/a, Impersonating:
HARVESTER\Ant, OpenResult: Opened
37442 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter:
msjava.dll, 2: msjava.dll
37443 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS
37444 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS
37445 08:27.7 csrss.exe 1560 RegOpenKey
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read,
WOW64_64Key
37446 08:27.7 csrss.exe 1560 RegQueryValue
HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll
NAME NOT FOUND Length: 1,024
37447 08:27.7 csrss.exe 1560 RegCloseKey
HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers SUCCESS
37448 08:27.7 csrss.exe 1560 RegOpenKey
HKCU\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read,
WOW64_64Key
37449 08:27.7 csrss.exe 1560 RegQueryValue
HKCU\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll
NAME NOT FOUND Length: 1,024
37450 08:27.7 csrss.exe 1560 RegCloseKey
HKCU\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers SUCCESS
37451 08:27.7 csrss.exe 1560 RegOpenKey
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Custom\msjava.dll NAME NOT FOUND
Desired Access: Read, WOW64_64Key
37452 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37453 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37454 08:27.7 csrss.exe 1560 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse,
Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: Opened
37455 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_EXECUTE
37456 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37457 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37458 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37459 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37460 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37461 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37462 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37463 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37464 08:27.7 csrss.exe 1560 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read,
Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory
File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a,
Impersonating: HARVESTER\Ant, OpenResult: Opened
37465 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_READONLY
37466 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37467 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37468 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37469 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37470 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37471 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37472 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37473 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37474 08:27.7 csrss.exe 1560 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse,
Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult: Opened
37475 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_EXECUTE
37476 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37477 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37478 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37479 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37480 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37481 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37482 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37483 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37484 08:27.7 csrss.exe 1560 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read,
Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory
File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a,
Impersonating: HARVESTER\Ant, OpenResult: Opened
37485 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_READONLY
37486 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37487 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37488 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37489 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37490 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37491 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37492 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37493 08:27.7 csrss.exe 1560 RegOpenKey
HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
SUCCESS Desired Access: Read, WOW64_64Key
37494 08:27.7 csrss.exe 1560 RegQueryValue
HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447}
NAME NOT FOUND Length: 1,024
37495 08:27.7 csrss.exe 1560 RegCloseKey
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS
37496 08:27.7 csrss.exe 1560 RegOpenKey
HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
SUCCESS Desired Access: Read, WOW64_64Key
37497 08:27.7 csrss.exe 1560 RegQueryValue
HKCU\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447}
NAME NOT FOUND Length: 1,024
37498 08:27.7 csrss.exe 1560 RegCloseKey
HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS
37499 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP
C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS
37500 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS
37501 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37502 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\JUICERPATH NAME NOT FOUND Length: 144
37503 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37504 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\Program
Files\Internet Explorer\VMHELPER.DLL NAME NOT FOUND
37505 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\vmhelper.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:26:27 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 12/25/2006 11:53:27 AM, AllocationSize: 290,816,
EndOfFile: 286,992, FileAttributes: n/a
37506 08:27.7 iexplore.exe 960 IRP_MJ_CREATE
C:\WINDOWS\system32\vmhelper.dll SUCCESS Desired Access:
Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous
IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read,
Delete, AllocationSize: n/a, OpenResult: Opened
37507 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType:
SyncTypeCreateSection, PageProtection: PAGE_EXECUTE
37508 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37509 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_CC_FLUSH
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37510 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37511 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType: SyncTypeOther
37512 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37513 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\vmhelper.dll
37514 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37515 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37516 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\vmhelper.dll
37517 08:27.7 iexplore.exe 960 Load Image
C:\WINDOWS\system32\vmhelper.dll SUCCESS Image Base: 0x7c520000, Image
Size: 0x48000
37518 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\VMHELPER.DLL NAME NOT FOUND Desired Access: Read
37519 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37520 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\EnableFI NAME NOT FOUND Length: 144
37521 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37522 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37523 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\CPUType NAME NOT FOUND Length: 144
37524 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37525 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37526 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\EnableGCHeapCheck NAME NOT FOUND Length: 144
37527 08:27.7 Procmon.exe 2248 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read,
Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory
File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult:
Opened
37528 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37529 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37530 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\EnableGCHeapCheck NAME NOT FOUND Length: 144
37531 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37532 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37533 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\DisableGCClassCollection NAME NOT FOUND
Length: 144
37534 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37535 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37536 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\InitStaticsEarly NAME NOT FOUND Length: 144
37537 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37538 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37539 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\EnableJIT SUCCESS Type: REG_BINARY,
Length: 4, Data: 01 00 00 00
37540 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37541 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37542 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37543 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\DoNotJitList NAME NOT FOUND Length: 144
37544 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37545 08:27.7 Procmon.exe 2248
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_READONLY
37546 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37547 08:27.7 Procmon.exe 2248
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37548 08:27.7 Procmon.exe 2248
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37549 08:27.7 Procmon.exe 2248
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37550 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37551 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\Verification NAME NOT FOUND Length: 144
37552 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37553 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37554 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\VerificationOptions NAME NOT FOUND
Length: 144
37555 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37556 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37557 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\FileURLsAreTrusted NAME NOT FOUND
Length: 144
37558 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37559 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37560 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37561 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length:
52, Data: C:\WINDOWS\java\classes;.
37562 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length:
52, Data: C:\WINDOWS\java\classes;.
37563 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length:
52, Data: C:\WINDOWS\java\classes;.
37564 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length:
52, Data: C:\WINDOWS\java\classes;.
37565 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37566 08:27.7 Procmon.exe 2248 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37567 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\java\classes PATH NOT FOUND
37568 08:27.7 Procmon.exe 2248 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37569 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\Documents
and Settings\Ant\Desktop SUCCESS CreationTime: 1/19/2002 10:50:26 PM,
LastAccessTime: 10/6/2007 9:42:36 AM, LastWriteTime: 10/6/2007 9:42:36
AM, ChangeTime: 10/6/2007 9:42:36 AM, AllocationSize: 0, EndOfFile: 0,
FileAttributes: D
37570 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37571 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ,
Length: 2, Data:
37572 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ,
Length: 2, Data:
37573 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ,
Length: 2, Data:
37574 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ,
Length: 2, Data:
37575 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37576 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37577 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\LibsDirectory NAME NOT FOUND Length: 144
37578 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37579 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37580 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type:
REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib
37581 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type:
REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib
37582 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type:
REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib
37583 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type:
REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib
37584 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37585 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\java\trustlib PATH NOT FOUND
37586 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37587 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\SourcePath NAME NOT FOUND Length: 144
37588 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37589 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37590 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\DevClassPath NAME NOT FOUND Length: 144
37591 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37592 08:27.7 iexplore.exe 960 Thread Create SUCCESS Thread ID: 3528
37593 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37594 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\EnableContexts NAME NOT FOUND Length: 144
37595 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37596 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37597 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\FTMChecksDisabled NAME NOT FOUND Length: 144
37598 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37599 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37600 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\FTMChecksDisabledForADO NAME NOT FOUND
Length: 144
37601 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37602 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
VM\Debug NAME NOT FOUND Desired Access: Query Value
37603 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
VM\MSDebug SUCCESS Desired Access: Query Value
37604 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM\MSDEBUG SUCCESS
37605 08:27.7 iexplore.exe 960 Thread Create SUCCESS Thread ID: 2844
42516 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
VM\ActiveXDebug NAME NOT FOUND Desired Access: Query Value
42517 08:27.8 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
42518 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\DebuggingFlags NAME NOT FOUND Length: 144
42519 08:27.8 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
42520 08:27.8 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
42521 08:27.8 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\EnableEventMonitors NAME NOT FOUND
Length: 144
42522 08:27.8 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
42523 08:27.8 iexplore.exe 960 RegCreateKey HKLM\Software\Microsoft\Code
Store Database\Global Namespace\Java Packages SUCCESS Desired Access:
Maximum Allowed
42524 08:27.8 iexplore.exe 960 RegCreateKey HKLM\Software\Microsoft\Code
Store Database\Application Namespaces SUCCESS Desired Access: Maximum
Allowed
42525 08:27.8 iexplore.exe 960 RegCreateKey HKLM\SOFTWARE\Microsoft\Code
Store Database SUCCESS Desired Access: Maximum Allowed
42526 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code
Store Database\Global Namespace\Java Packages SUCCESS Desired Access:
Maximum Allowed
42527 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
VM\Pending Deletions NAME NOT FOUND Desired Access: Maximum Allowed
42528 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code
Store Database\Global Namespace\Java Packages\java\lang SUCCESS Desired
Access: Maximum Allowed
42529 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42530 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42531 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42532 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42533 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42534 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49
PM, LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004
12:56:44 AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize:
294,912, EndOfFile: 294,400, FileAttributes: n/a
42535 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42536 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Info SUCCESS Type: REG_BINARY, Length: 12, Data: 00
00 05 00 E2 0E 00 00 1A 00 00 00
42537 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Info SUCCESS Type: REG_BINARY, Length: 12, Data: 00
00 05 00 E2 0E 00 00 1A 00 00 00
42538 08:27.8 iexplore.exe 960 IRP_MJ_CREATE
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP PATH NOT FOUND Desired Access:
Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a
42539 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49
PM, LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004
12:56:44 AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize:
294,912, EndOfFile: 294,400, FileAttributes: n/a
42540 08:27.8 iexplore.exe 960 IRP_MJ_CREATE C:\Documents and
Settings\Ant\Desktop\java\lang\ PATH NOT FOUND Desired Access: Read
Data/List Directory, Synchronize, Disposition: Open, Options: Directory,
Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write,
AllocationSize: n/a
42541 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
VM\Compatibility NAME NOT FOUND Desired Access: Query Value
42542 08:27.8 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java
VM\Compatibility NAME NOT FOUND Desired Access: Query Value
42543 08:27.8 iexplore.exe 960 Thread Exit SUCCESS User Time:
0.0000000, Kernel Time: 0.0156250
44010 08:27.9 iexplore.exe 960 RegOpenKey
HKCU\Software\Classes\MIME\Database\Content
Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read
44011 08:27.9 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS Desired Access: Read
44012 08:27.9 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS Query: Name
44013 08:27.9 iexplore.exe 960 RegOpenKey
HKCU\Software\Classes\MIME\Database\Content
Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Maximum
Allowed
44014 08:27.9 iexplore.exe 960 RegQueryValue HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file\Image Filter CLSID NAME NOT FOUND
Length: 144
44015 08:27.9 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS
46361 08:28.0 iexplore.exe 960 RegOpenKey
HKCU\Software\Classes\MIME\Database\Content
Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read
46362 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS Desired Access: Read
46363 08:28.0 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS Query: Name
46364 08:28.0 iexplore.exe 960 RegOpenKey
HKCU\Software\Classes\MIME\Database\Content
Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read
46365 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read
46366 08:28.0 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS

I hope that helped.
--
"We're all ants. I'm a glittery little ant." --Alanis Morissette
/\___/\
/ /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
| |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
\ _ / Remove ANT from e-mail address: philpi@earthlink.netANT
( ) or ANTant@zimage.com
Ant is currently not listening to any songs on his home computer.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #13 (permalink)  
Old 10-09-2007, 06:50 AM
Ant
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java?

On 10/7/2007 9:33 AM PT, Donald Anadell typed:

> You might first make sure that "msjava.dll" is still located in the System32
> folder.


I do have it: v5.0.3810.0. Is this correct?


> If your installation of Windows XP Home||Pro predates SP1a then the MS Java
> Virtual Machine should be installed on your machine and that file should be
> located in the System32 folder.
>
> Then try reregistering that DLL file by clicking on Start||Run and typing
> the following into the Run box:
> regsvr32 Msjava.dll


That didn't fix the problem after I got a successful message.


> The MS Java Virtual Machine and the Sun Java Virtual Machine can co-exist
> quite nicely on the same machine, and you should be able to switch between
> them. I have both virtual machines installed on three Windows XP machines
> here and have no problems with any of them using either the MSJVM or Sun.
> As long as you have the latest secure version of the MSJVM(build 3810)
> installed, you shouldn't have any problems using that Virtual Machinen.


Yeah, that is what I am trying to do. Have both. Something is broken
with my Java. :(

Is there a downloadable EXE file to reinstall it? Also, is disabling in
control panel's Sun Java JRE v6.0 b3 options not run in MSIE and VM
enabled in IE6's options enough? Or did I miss other places?

Logs if they help. I ran the latest Process Explorer on iexplore.exe:
Process PID CPU Description User Name Priority Handles Window Title
System Idle Process 0 92.36 NT AUTHORITY\SYSTEM 0 0
Interrupts n/a Hardware Interrupts 0 0
DPCs n/a 0.69 Deferred Procedure Calls 0 0
System 4 0.69 NT AUTHORITY\SYSTEM 8 632
smss.exe 1492 Windows NT Session Manager NT AUTHORITY\SYSTEM 11 21
csrss.exe 1560 0.69 Client Server Runtime Process NT
AUTHORITY\SYSTEM 13 513
winlogon.exe 1584 Windows NT Logon Application NT
AUTHORITY\SYSTEM 13 584
services.exe 1628 0.69 Services and Controller app NT
AUTHORITY\SYSTEM 9 316
svchost.exe 1828 Generic Host Process for Win32 Services NT
AUTHORITY\SYSTEM 8 220
svchost.exe 1872 Generic Host Process for Win32 Services NT
AUTHORITY\NETWORK SERVICE 8 264
svchost.exe 440 Generic Host Process for Win32 Services NT
AUTHORITY\SYSTEM 8 1,631
svchost.exe 616 Generic Host Process for Win32 Services NT
AUTHORITY\NETWORK SERVICE 8 98
spoolsv.exe 748 Spooler SubSystem App NT AUTHORITY\SYSTEM 8 130
svchost.exe 952 Generic Host Process for Win32 Services NT
AUTHORITY\LOCAL SERVICE 8 173
cygrunsrv.exe 972 MYBOX\SvcCOPSSH 8 81
nTuneService.exe 1044 NVIDIA Access Manager NT
AUTHORITY\SYSTEM 8 147
nvsvc32.exe 1060 NVIDIA Driver Helper Service, Version 163.69
NT AUTHORITY\SYSTEM 8 139
PERSFW.exe 1064 Kerio Personal Firewall Engine NT
AUTHORITY\SYSTEM 8 73
HPZipm12.exe 376 PML Driver NT AUTHORITY\SYSTEM 8 42
PnkBstrA.exe 392 NT AUTHORITY\SYSTEM 8 46
PnkBstrB.exe 464 NT AUTHORITY\SYSTEM 8 58
tcpsvcs.exe 544 TCP/IP Services Application NT AUTHORITY\SYSTEM 8 74
wdfmgr.exe 660 Windows User Mode Driver Manager NT
AUTHORITY\LOCAL SERVICE 8 66
vmware-authd.exe 1168 VMware Authorization Service NT
AUTHORITY\SYSTEM 8 138
vmnat.exe 1196 VMware NAT Service NT AUTHORITY\SYSTEM 8 54
vmnetdhcp.exe 1324 VMware VMnet DHCP service NT
AUTHORITY\SYSTEM 8 29
alg.exe 252 Application Layer Gateway Service NT
AUTHORITY\LOCAL SERVICE 8 104
lsass.exe 1640 LSA Shell (Export Version) NT AUTHORITY\SYSTEM 9 331
sshd.exe 1236 MYBOX\SvcCOPSSH 8 98
explorer.exe 996 Windows Explorer MYBOX\Bob 8 712 ul
TaskSwitch.exe 1824 MYBOX\Bob 8 35
CTHELPER.EXE 776 CtHelper Application MYBOX\Bob 8 176
hpcmpmgr.exe 2412 HP Framework Component Manager Service MYBOX\Bob 8 176
hpwuSchd2.exe 2452 Hewlett-Packard Product AssistBob MYBOX\Bob 8 23
hphmon06.exe 2460 HPHmon06 MYBOX\Bob 8 101
rundll32.exe 2500 Run a DLL as an App MYBOX\Bob 8 92
FreeShade.exe 2572 FreeShade MYBOX\Bob 8 22
goScreen.exe 2584 Virtual multi-page monitor manager MYBOX\Bob 8 98
goScreen
MCDTray.exe 2600 Media Changer Deluxe SysTray Launcher MYBOX\Bob 8 25
Pickatag.exe 2608 MYBOX\Bob 8 22
PopTray.exe 2624 PopTray E-Mail Notifier MYBOX\Bob 8 150
trillian.exe 788 Trillian MYBOX\Bob 8 340 Trillian
SecureCRT.EXE 3532 SecureCRT Application MYBOX\Bob 8 79 Bobian -
SecureCRT
SecureCRT.EXE 2044 SecureCRT Application MYBOX\Bob 8 153
alpha.zimage.com - SecureCRT
notepad.exe 3888 Notepad MYBOX\Bob 8 31
seamonkey.exe 796 SeaMonkey MYBOX\Bob 8 188 Compose: Re: MS' Java?
procexp.exe 2880 4.17 Sysinternals Process Explorer MYBOX\Bob 13 422
Process Explorer - Sysinternals: www.sysinternals.com [MYBOX\Bob]
iexplore.exe 2800 0.69 Internet Explorer MYBOX\Bob 8 323 Java Tester -
What Version of Java Are You Running? - Microsoft Internet Explorer

Process: iexplore.exe Pid: 2800

Base Size Mapping Description Version Time Name
0x140000 0x3000 Data <Pagefile Backed>
0x260000 0x3000 Data <Pagefile Backed>
0x263000 0xD000 Data <Pagefile Backed>
0x330000 0x2000 Data <Pagefile Backed>
0x390000 0x2000 Data <Pagefile Backed>
0x3A0000 0x2000 Data <Pagefile Backed>
0x3B0000 0x2000 Data <Pagefile Backed>
0x3C0000 0x2000 Data <Pagefile Backed>
0x3E0000 0x2000 Data <Pagefile Backed>
0x420000 0x5000 Data <Pagefile Backed>
0x425000 0xBB000 Data <Pagefile Backed>
0x4E0000 0x2000 Data <Pagefile Backed>
0x4E2000 0x6000 Data <Pagefile Backed>
0x4F0000 0x103000 Data <Pagefile Backed>
0x600000 0x9C000 Data <Pagefile Backed>
0x69C000 0x264000 Data <Pagefile Backed>
0xA00000 0x51000 Data <Pagefile Backed>
0xA70000 0xE000 Data <Pagefile Backed>
0xB60000 0x2000 Data <Pagefile Backed>
0xEE0000 0x2000 Data <Pagefile Backed>
0x1000000 0x1000 Data <Pagefile Backed>
0x1070000 0x2000 Data <Pagefile Backed>
0x1A00000 0x1000 Data <Pagefile Backed>
0x1B20000 0x2000 Data <Pagefile Backed>
0x1B30000 0x2000 Data <Pagefile Backed>
0x1E50000 0x1000 Data <Pagefile Backed>
0x1F60000 0x1000 Data <Pagefile Backed>
0x1F70000 0x2000 Data <Pagefile Backed>
0x7F6F0000 0x7000 Data <Pagefile Backed>
0x7F6F7000 0xF9000 Data <Pagefile Backed>
0x7FFB0000 0x24000 Data <Pagefile Backed>
0x77DD0000 0x9B000 Image Advanced Windows 32 Base API 5.01.2600.2180
8/4/2004 12:56 AM ADVAPI32.dll
0x77B40000 0x22000 Image Application Compatibility Client Library
5.01.2600.2180 8/4/2004 12:56 AM appHelp.dll
0x20000000 0x12000 Image Shell Browser UI Library 6.00.2900.2180
8/4/2004 12:56 AM browselc.dll
0x75F80000 0xFD000 Image Shell Browser UI Library 6.00.2900.3157
6/15/2007 1:12 AM BROWSEUI.dll
0x76FD0000 0x7F000 Image 2001.12.4414.0308 7/25/2005 9:39 PM CLBCATQ.DLL
0x773D0000 0x103000 Image User Experience Controls Library
6.00.2900.2982 8/25/2006 8:45 AM comctl32.dll
0x5D090000 0x9A000 Image Common Controls Library 5.82.2900.2982
8/25/2006 8:45 AM comctl32.dll
0x763B0000 0x49000 Image Common Dialogs DLL 6.00.2900.2180 8/4/2004
12:56 AM comdlg32.dll
0x77050000 0xC5000 Image 2001.12.4414.0258 8/4/2004 12:56 AM COMRes.dll
0x77A80000 0x94000 Image Crypto API32 5.131.2600.2180 8/4/2004 12:56 AM
CRYPT32.dll
0x754D0000 0x80000 Image Microsoft Trust UI Provider 5.131.2600.2180
8/4/2004 12:56 AM CRYPTUI.dll
0x76600000 0x1D000 Image Offline Network Agent 5.01.2600.2180 8/4/2004
12:56 AM CSCDLL.dll
0x77A20000 0x54000 Image Client Side Caching UI 5.01.2600.2180 8/4/2004
12:56 AM cscui.dll
0x2000000 0x6000 Image ctagent 1.00.0000.0012 8/11/2006 2:56 PM ctagent.dll
0x350000 0x3000 Data 8/23/2001 5:00 AM ctype.nls
0x76F20000 0x27000 Image DNS Client API DLL 5.01.2600.2938 6/26/2006
10:37 AM DNSAPI.dll
0x16000000 0x28000 Image Trillian Event Control 3.01.0007.0000 7/19/2007
12:00 AM events.dll
0x69450000 0x16000 Image Windows Error Reporting 5.01.2600.2180 8/4/2004
12:56 AM faultrep.dll
0x10000000 0x1A000 Image FreeShade 1.00.0000.0004 9/27/2001 1:16 AM
FreeShade.dll
0x77F10000 0x47000 Image GDI Client DLL 5.01.2600.3159 6/19/2007 6:31
AM GDI32.dll
0x662B0000 0x58000 Image Home Networking Configuration Manager
5.01.2600.2180 8/4/2004 12:56 AM hnetcfg.dll
0x400000 0x19000 Image Internet Explorer 6.00.2900.2180 8/4/2004 12:56
AM iexplore.exe
0x76C90000 0x28000 Image Windows NT Image Helper 5.01.2600.2180 8/4/2004
12:56 AM IMAGEHLP.dll
0x66880000 0xC000 Image IE plugin image decoder support DLL
6.00.2900.2180 8/4/2004 12:56 AM ImgUtil.dll
0x76390000 0x1D000 Image Windows XP IMM32 API Client DLL 5.01.2600.2180
8/4/2004 12:56 AM IMM32.DLL
0xB20000 0xC000 Data 10/9/2007 6:11 AM index.dat
0xB70000 0x174000 Data 10/9/2007 6:11 AM index.dat
0xCF0000 0x38000 Data 10/9/2007 6:11 AM index.dat
0x2EB0000 0x8000 Data 10/9/2007 6:11 AM index.dat
0x76D60000 0x19000 Image IP Helper API 5.01.2600.2912 5/19/2006 5:59 AM
iphlpapi.dll
0x7C800000 0xF5000 Image Windows NT BASE API Client DLL 5.01.2600.3119
4/16/2007 8:52 AM kernel32.dll
0x290000 0x3D000 Data 7/17/2004 11:48 AM locale.nls
0x629C0000 0x9000 Image Language Pack 5.01.2600.2180 8/4/2004 12:56 AM
LPK.DLL
0x2510000 0xA5000 Data 8/23/2001 5:00 AM mlang.dat
0x75CF0000 0x91000 Image Multi Language Support DLL 6.00.2900.2180
8/4/2004 12:56 AM mlang.dll
0x77B20000 0x12000 Image ASN.1 Runtime APIs 5.01.2600.2180 8/4/2004
12:56 AM MSASN1.dll
0x74720000 0x4B000 Image MSCTF Server DLL 5.01.2600.2180 8/4/2004
12:56 AM MSCTF.dll
0x755C0000 0x2E000 Image Microsoft Text Frame Work Service IME
5.01.2600.2180 8/4/2004 12:56 AM msctfime.ime
0x4AA00000 0x15000 Image Active Debugging Proxy/Stub 6.00.0000.8424
11/15/1999 10:46 AM MSDBG.DLL
0x7DC30000 0x2F2000 Image Microsoft (R) HTML Viewer 6.00.2900.3157
6/15/2007 1:12 AM mshtml.dll
0x7D1E0000 0x2BE000 Image Windows Installer 3.01.4000.4039 4/18/2007
9:12 AM msi.dll
0x76380000 0x5000 Image GDIEXT Client DLL 5.01.2600.2180 8/4/2004
12:56 AM msimg32.dll
0x2DC0000 0x4000 Data 6/4/2004 8:46 PM MSIMGSIZ.DAT
0x746F0000 0x2A000 Image Active IMM Server DLL 5.01.2600.2180 8/4/2004
12:56 AM msimtf.dll
0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM
msjava.dll
0x746C0000 0x27000 Image Microsoft Line Services library file
3.10.0349.0000 8/23/2001 5:00 AM msls31.dll
0x77C70000 0x23000 Image Microsoft Authentication Package v1.0
5.01.2600.2180 8/4/2004 12:56 AM msv1_0.dll
0x7C340000 0x56000 Image Microsoft® C Runtime Library 7.10.3052.0004
9/25/2007 1:25 AM MSVCR71.dll
0x77C10000 0x58000 Image Windows NT CRT DLL 7.00.2600.2180 8/4/2004
12:56 AM msvcrt.dll
0x71A50000 0x3F000 Image Microsoft Windows Sockets 2.0 Service
Provider 5.01.2600.2180 8/4/2004 12:56 AM mswsock.dll
0x5B860000 0x54000 Image Net Win32 API DLL 5.01.2600.2976 8/17/2006
5:28 AM NETAPI32.dll
0x7C900000 0xB0000 Image NT Layer DLL 5.01.2600.2180 8/4/2004 12:56 AM
ntdll.dll
0x774E0000 0x13D000 Image Microsoft OLE for Windows 5.01.2600.2726
7/25/2005 9:39 PM ole32.dll
0x77120000 0x8B000 Image 5.01.2600.3139 5/17/2007 4:28 AM OLEAUT32.dll
0x5EDD0000 0x17000 Image 5.01.2600.2180 8/4/2004 12:56 AM olepro32.dll
0xFD0000 0x2F000 Image Orbitcth 2.02.0000.0001 9/20/2007 3:40 PM
orbitcth.dll
0x5E310000 0xC000 Image IE PNG plugin image decoder 6.00.2900.3157
6/15/2007 1:12 AM pngfilt.dll
0x76BF0000 0xB000 Image Process Status Helper 5.01.2600.2180 8/4/2004
12:56 AM PSAPI.DLL
0x76FC0000 0x6000 Image Remote Access AutoDial Helper 5.01.2600.2938
6/26/2006 10:37 AM rasadhlp.dll
0x76EE0000 0x3C000 Image Remote Access API 5.01.2600.2180 8/4/2004
12:56 AM RASAPI32.DLL
0x76E90000 0x12000 Image Remote Access Connection Manager
5.01.2600.2180 8/4/2004 12:56 AM rasman.dll
0x77E70000 0x91000 Image Remote Procedure Call Runtime 5.01.2600.2180
8/4/2004 12:56 AM RPCRT4.dll
0xFFD0000 0x28000 Image Microsoft Enhanced Cryptographic Provider
5.01.2600.2161 8/3/2004 10:31 PM rsaenh.dll
0x76E80000 0xE000 Image Routing Utilities 5.01.2600.2180 8/4/2004
12:56 AM rtutils.dll
0x1080000 0x11A000 Image SBSD IE Protection 1.05.0000.0008 8/31/2007
4:46 PM SDHelper.dll
0x77FE0000 0x11000 Image Security Support Provider Interface
5.01.2600.2180 8/4/2004 12:56 AM Secur32.dll
0x722B0000 0x5000 Image SENS Connectivity API DLL 5.01.2600.2180
8/4/2004 12:56 AM sensapi.dll
0x77920000 0xF3000 Image Windows Setup API 5.01.2600.2180 8/4/2004
12:56 AM SETUPAPI.dll
0x1A10000 0x88000 Image Shell Doc Object and Control Library
6.00.2900.2180 8/4/2004 12:56 AM shdoclc.dll
0x7E290000 0x171000 Image Shell Doc Object and Control Library
6.00.2900.3157 6/15/2007 1:12 AM SHDOCVW.dll
0x7C9C0000 0x815000 Image Windows Shell Common Dll 6.00.2900.3051
12/19/2006 2:52 PM SHELL32.dll
0x77F60000 0x76000 Image Shell Light-weight Utility Library
6.00.2900.3157 6/15/2007 1:12 AM SHLWAPI.dll
0x2D0000 0x41000 Data 8/23/2001 5:00 AM sortkey.nls
0x320000 0x6000 Data 7/17/2004 11:48 AM sorttbls.nls
0x6D7C0000 0x79000 Image Java(TM) Platform SE binary 6.00.0030.0005
9/25/2007 1:11 AM ssv.dll
0x75E90000 0xB0000 Image Fusion 2.5 5.01.2600.3019 10/19/2006 6:56 AM
SXS.DLL
0x76EB0000 0x2F000 Image Microsoft® Windows(TM) Telephony API Client
DLL 5.01.2600.2180 8/4/2004 12:56 AM TAPI32.dll
0x270000 0x16000 Data 8/23/2001 5:00 AM unicode.nls
0x7E1E0000 0xA2000 Image OLE32 Extensions for Win32 6.00.2900.3157
6/15/2007 1:12 AM urlmon.dll
0x7E410000 0x90000 Image Windows XP USER API Client DLL 5.01.2600.3099
3/8/2007 8:36 AM USER32.dll
0x769C0000 0xB3000 Image Userenv 5.01.2600.2180 8/4/2004 12:56 AM
USERENV.dll
0x74D90000 0x6B000 Image Uniscribe Unicode script processor
1.420.2600.2180 8/4/2004 12:56 AM USP10.dll
0x5AD70000 0x38000 Image Microsoft UxTheme Library 6.00.2900.2180
8/4/2004 12:56 AM uxtheme.dll
0x77C00000 0x8000 Image Version Checking and File Installation
Libraries 5.01.2600.2180 8/4/2004 12:56 AM VERSION.dll
0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000
2/28/2003 6:26 PM VMHELPER.DLL
0x771B0000 0xAA000 Image Internet Extensions for Win32 6.00.2900.3164
6/26/2007 7:35 AM WININET.dll
0x76B40000 0x2D000 Image MCI API DLL 5.01.2600.2180 8/4/2004 12:56 AM
WINMM.dll
0x76360000 0x10000 Image Winstation Library 5.01.2600.2180 8/4/2004
12:56 AM WINSTA.dll
0x76C30000 0x2E000 Image Microsoft Trust Verification APIs
5.131.2600.2180 8/4/2004 12:56 AM WINTRUST.dll
0x76F60000 0x2C000 Image Win32 LDAP API DLL 5.01.2600.2180 8/4/2004
12:56 AM WLDAP32.dll
0x71AB0000 0x17000 Image Windows Socket 2.0 32-Bit DLL 5.01.2600.2180
8/4/2004 12:56 AM WS2_32.dll
0x71AA0000 0x8000 Image Windows Socket 2.0 Helper for Windows NT
5.01.2600.2180 8/4/2004 12:56 AM WS2HELP.dll
0x71A90000 0x8000 Image Windows Sockets Helper DLL 5.01.2600.2180
8/4/2004 12:56 AM wshtcpip.dll
0x71AD0000 0x9000 Image Windows Socket 32-Bit DLL 5.01.2600.2180
8/4/2004 12:56 AM wsock32.dll
0x76F50000 0x8000 Image Windows Terminal Server SDK APIs 5.01.2600.2180
8/4/2004 12:56 AM WTSAPI32.dll
0x1420000 0x2C5000 Image Service Pack 2 Messages 5.01.2600.2180 8/4/2004
12:56 AM xpsp2res.dll

As you can see, IE loaded its MS Java stuff:
0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM
msjava.dll
0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000
2/28/2003 6:26 PM VMHELPER.DLL


I also ran Process Monitor to log. I did a search and found these
related to MS Java:
37243 08:27.6 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Active Setup\Installed
Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS
Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll
37244 08:27.6 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Active Setup\Installed
Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS
Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll
37245 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37269 08:27.6 iexplore.exe 960 RegQueryValue
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default)
SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll
37270 08:27.6 iexplore.exe 960 RegQueryKey
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32
SUCCESS Query: Name
37271 08:27.6 iexplore.exe 960 RegOpenKey
HKCU\Software\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32
NAME NOT FOUND Desired Access: Maximum Allowed
37272 08:27.6 iexplore.exe 960 RegQueryValue
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default)
SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll
37273 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37274 08:27.6 iexplore.exe 960 RegQueryKey
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name
37339 08:27.7 iexplore.exe 960 RegQueryValue
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default)
SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll
37340 08:27.7 iexplore.exe 960 RegCloseKey
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 SUCCESS
37341 08:27.7 iexplore.exe 960 RegQueryKey
HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name
37385 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37386 08:27.7 iexplore.exe 960 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse,
Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
AllocationSize: n/a, OpenResult: Opened
37387 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_EXECUTE
37388 08:27.7 iexplore.exe 960 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37389 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37390 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37391 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37392 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37393 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37394 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37395 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37396 08:27.7 iexplore.exe 960 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse,
Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
AllocationSize: n/a, OpenResult: Opened
37397 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_EXECUTE
37398 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH
C:\WINDOWS\system32\msjava.dll SUCCESS
37399 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_CC_FLUSH
C:\WINDOWS\system32\msjava.dll SUCCESS
37400 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37401 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37402 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37403 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37404 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37405 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37406 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37407 08:27.7 iexplore.exe 960 Load Image
C:\WINDOWS\system32\msjava.dll SUCCESS Image Base: 0x7c000000, Image
Size: 0xea000
37408 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\msjava.dll SUCCESS Desired Access: Read
37409 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\msjava.dll\CheckAppHelp SUCCESS Type: REG_DWORD, Length: 4, Data: 1
37410 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\msjava.dll SUCCESS
37428 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS
Desired Access: Read Data/List Directory, Synchronize, Disposition:
Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, AllocationSize: n/a, Impersonating: MYBOX\bob,
OpenResult: Opened
37429 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter:
msjava.dll, 2: msjava.dll
37430 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS
37431 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS
37432 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37433 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\ SUCCESS Desired Access:
Read Data/List Directory, Synchronize, Disposition: Open, Options:
Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read,
Write, AllocationSize: n/a, Impersonating: MYBOX\bob, OpenResult: Opened
37434 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS
SUCCESS Type: QueryDirectory, Filter: WINDOWS, 2: WINDOWS
37435 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\ SUCCESS
37436 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\ SUCCESS
37437 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS SUCCESS Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open,
Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, AllocationSize: n/a, Impersonating: MYBOX\bob,
OpenResult: Opened
37438 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL
C:\WINDOWS\system32 SUCCESS Type: QueryDirectory, Filter: system32, 2:
system32
37439 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS SUCCESS
37440 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS SUCCESS
37441 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS
Desired Access: Read Data/List Directory, Synchronize, Disposition:
Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a,
ShareMode: Read, Write, AllocationSize: n/a, Impersonating: MYBOX\bob,
OpenResult: Opened
37442 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter:
msjava.dll, 2: msjava.dll
37443 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS
37444 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS
37445 08:27.7 csrss.exe 1560 RegOpenKey
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read,
WOW64_64Key
37446 08:27.7 csrss.exe 1560 RegQueryValue
HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll
NAME NOT FOUND Length: 1,024
37447 08:27.7 csrss.exe 1560 RegCloseKey
HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers SUCCESS
37448 08:27.7 csrss.exe 1560 RegOpenKey
HKCU\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read,
WOW64_64Key
37449 08:27.7 csrss.exe 1560 RegQueryValue
HKCU\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll
NAME NOT FOUND Length: 1,024
37450 08:27.7 csrss.exe 1560 RegCloseKey
HKCU\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Layers SUCCESS
37451 08:27.7 csrss.exe 1560 RegOpenKey
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\Custom\msjava.dll NAME NOT FOUND
Desired Access: Read, WOW64_64Key
37452 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37453 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37454 08:27.7 csrss.exe 1560 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse,
Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
AllocationSize: n/a, Impersonating: MYBOX\bob, OpenResult: Opened
37455 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_EXECUTE
37456 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37457 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37458 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37459 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37460 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37461 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37462 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37463 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37464 08:27.7 csrss.exe 1560 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read,
Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory
File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a,
Impersonating: MYBOX\bob, OpenResult: Opened
37465 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_READONLY
37466 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37467 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37468 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37469 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37470 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37471 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37472 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37473 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37474 08:27.7 csrss.exe 1560 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse,
Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
AllocationSize: n/a, Impersonating: MYBOX\bob, OpenResult: Opened
37475 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_EXECUTE
37476 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37477 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37478 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37479 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37480 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37481 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37482 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37483 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272,
EndOfFile: 947,472, FileAttributes: n/a
37484 08:27.7 csrss.exe 1560 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read,
Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory
File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a,
Impersonating: MYBOX\bob, OpenResult: Opened
37485 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_READONLY
37486 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37487 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37488 08:27.7 csrss.exe 1560
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37489 08:27.7 csrss.exe 1560
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37490 08:27.7 csrss.exe 1560 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37491 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37492 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37493 08:27.7 csrss.exe 1560 RegOpenKey
HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
SUCCESS Desired Access: Read, WOW64_64Key
37494 08:27.7 csrss.exe 1560 RegQueryValue
HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447}
NAME NOT FOUND Length: 1,024
37495 08:27.7 csrss.exe 1560 RegCloseKey
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS
37496 08:27.7 csrss.exe 1560 RegOpenKey
HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
SUCCESS Desired Access: Read, WOW64_64Key
37497 08:27.7 csrss.exe 1560 RegQueryValue
HKCU\Software\Microsoft\Windows
NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447}
NAME NOT FOUND Length: 1,024
37498 08:27.7 csrss.exe 1560 RegCloseKey
HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags SUCCESS
37499 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP
C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS
37500 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS
37501 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37502 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\JUICERPATH NAME NOT FOUND Length: 144
37503 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37504 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\Program
Files\Internet Explorer\VMHELPER.DLL NAME NOT FOUND
37505 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\vmhelper.dll SUCCESS CreationTime: 4/9/2003 7:59:36
PM, LastAccessTime: 12/12/2005 5:26:27 AM, LastWriteTime: 2/28/2003
6:26:26 PM, ChangeTime: 12/25/2006 11:53:27 AM, AllocationSize: 290,816,
EndOfFile: 286,992, FileAttributes: n/a
37506 08:27.7 iexplore.exe 960 IRP_MJ_CREATE
C:\WINDOWS\system32\vmhelper.dll SUCCESS Desired Access:
Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous
IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read,
Delete, AllocationSize: n/a, OpenResult: Opened
37507 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType:
SyncTypeCreateSection, PageProtection: PAGE_EXECUTE
37508 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37509 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_CC_FLUSH
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37510 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37511 08:27.7 iexplore.exe 960
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType: SyncTypeOther
37512 08:27.7 iexplore.exe 960
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37513 08:27.7 iexplore.exe 960 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\vmhelper.dll
37514 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37515 08:27.7 iexplore.exe 960 IRP_MJ_CLOSE
C:\WINDOWS\system32\vmhelper.dll SUCCESS
37516 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\vmhelper.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\vmhelper.dll
37517 08:27.7 iexplore.exe 960 Load Image
C:\WINDOWS\system32\vmhelper.dll SUCCESS Image Base: 0x7c520000, Image
Size: 0x48000
37518 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\VMHELPER.DLL NAME NOT FOUND Desired Access: Read
37519 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37520 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\EnableFI NAME NOT FOUND Length: 144
37521 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37522 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37523 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\CPUType NAME NOT FOUND Length: 144
37524 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37525 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37526 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\EnableGCHeapCheck NAME NOT FOUND Length: 144
37527 08:27.7 Procmon.exe 2248 IRP_MJ_CREATE
C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read,
Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory
File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult:
Opened
37528 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37529 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37530 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\EnableGCHeapCheck NAME NOT FOUND Length: 144
37531 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37532 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37533 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\DisableGCClassCollection NAME NOT FOUND
Length: 144
37534 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37535 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37536 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\InitStaticsEarly NAME NOT FOUND Length: 144
37537 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37538 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37539 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\EnableJIT SUCCESS Type: REG_BINARY,
Length: 4, Data: 01 00 00 00
37540 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37541 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37542 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37543 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\DoNotJitList NAME NOT FOUND Length: 144
37544 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37545 08:27.7 Procmon.exe 2248
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
PageProtection: PAGE_READONLY
37546 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type:
QueryStandardInformationFile, AllocationSize: 950,272, EndOfFile:
947,472, NumberOfLinks: 1, DeletePending: False, Directory: False
37547 08:27.7 Procmon.exe 2248
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37548 08:27.7 Procmon.exe 2248
FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeOther
37549 08:27.7 Procmon.exe 2248
FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
C:\WINDOWS\system32\msjava.dll SUCCESS
37550 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37551 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\Verification NAME NOT FOUND Length: 144
37552 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37553 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37554 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\VerificationOptions NAME NOT FOUND
Length: 144
37555 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37556 08:27.7 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37557 08:27.7 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\FileURLsAreTrusted NAME NOT FOUND
Length: 144
37558 08:27.7 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
37559 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION
C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
Name: \WINDOWS\system32\msjava.dll
37560 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37561 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length:
52, Data: C:\WINDOWS\java\classes;.
37562 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length:
52, Data: C:\WINDOWS\java\classes;.
37563 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length:
52, Data: C:\WINDOWS\java\classes;.
37564 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\ClassPath SUCCESS Type: REG_SZ, Length:
52, Data: C:\WINDOWS\java\classes;.
37565 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37566 08:27.7 Procmon.exe 2248 IRP_MJ_CLEANUP
C:\WINDOWS\system32\msjava.dll SUCCESS
37567 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\java\classes PATH NOT FOUND
37568 08:27.7 Procmon.exe 2248 IRP_MJ_CLOSE
C:\WINDOWS\system32\msjava.dll SUCCESS
37569 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\Documents
and Settings\bob\Desktop SUCCESS CreationTime: 1/19/2002 10:50:26 PM,
LastAccessTime: 10/6/2007 9:42:36 AM, LastWriteTime: 10/6/2007 9:42:36
AM, ChangeTime: 10/6/2007 9:42:36 AM, AllocationSize: 0, EndOfFile: 0,
FileAttributes: D
37570 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37571 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ,
Length: 2, Data:
37572 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ,
Length: 2, Data:
37573 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ,
Length: 2, Data:
37574 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedClassPath SUCCESS Type: REG_SZ,
Length: 2, Data:
37575 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37576 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37577 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\LibsDirectory NAME NOT FOUND Length: 144
37578 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37579 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37580 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type:
REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib
37581 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type:
REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib
37582 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type:
REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib
37583 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\TrustedLibsDirectory SUCCESS Type:
REG_SZ, Length: 50, Data: C:\WINDOWS\java\trustlib
37584 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37585 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\java\trustlib PATH NOT FOUND
37586 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37587 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\SourcePath NAME NOT FOUND Length: 144
37588 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37589 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37590 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\DevClassPath NAME NOT FOUND Length: 144
37591 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37592 08:27.7 iexplore.exe 960 Thread Create SUCCESS Thread ID: 3528
37593 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37594 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\EnableContexts NAME NOT FOUND Length: 144
37595 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37596 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37597 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\FTMChecksDisabled NAME NOT FOUND Length: 144
37598 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37599 08:27.7 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
37600 08:27.7 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\FTMChecksDisabledForADO NAME NOT FOUND
Length: 144
37601 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
37602 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
VM\Debug NAME NOT FOUND Desired Access: Query Value
37603 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
VM\MSDebug SUCCESS Desired Access: Query Value
37604 08:27.7 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM\MSDEBUG SUCCESS
37605 08:27.7 iexplore.exe 960 Thread Create SUCCESS Thread ID: 2844
42516 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
VM\ActiveXDebug NAME NOT FOUND Desired Access: Query Value
42517 08:27.8 iexplore.exe 960 RegOpenKey
HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
42518 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Java VM\DebuggingFlags NAME NOT FOUND Length: 144
42519 08:27.8 iexplore.exe 960 RegCloseKey
HKLM\SOFTWARE\Microsoft\Java VM SUCCESS
42520 08:27.8 iexplore.exe 960 RegOpenKey
HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
42521 08:27.8 iexplore.exe 960 RegQueryValue
HKCU\Software\Microsoft\Java VM\EnableEventMonitors NAME NOT FOUND
Length: 144
42522 08:27.8 iexplore.exe 960 RegCloseKey
HKCU\Software\Microsoft\Java VM SUCCESS
42523 08:27.8 iexplore.exe 960 RegCreateKey HKLM\Software\Microsoft\Code
Store Database\Global Namespace\Java Packages SUCCESS Desired Access:
Maximum Allowed
42524 08:27.8 iexplore.exe 960 RegCreateKey HKLM\Software\Microsoft\Code
Store Database\Application Namespaces SUCCESS Desired Access: Maximum
Allowed
42525 08:27.8 iexplore.exe 960 RegCreateKey HKLM\SOFTWARE\Microsoft\Code
Store Database SUCCESS Desired Access: Maximum Allowed
42526 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code
Store Database\Global Namespace\Java Packages SUCCESS Desired Access:
Maximum Allowed
42527 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
VM\Pending Deletions NAME NOT FOUND Desired Access: Maximum Allowed
42528 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code
Store Database\Global Namespace\Java Packages\java\lang SUCCESS Desired
Access: Maximum Allowed
42529 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42530 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42531 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42532 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42533 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42534 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49
PM, LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004
12:56:44 AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize:
294,912, EndOfFile: 294,400, FileAttributes: n/a
42535 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Path SUCCESS Type: REG_SZ, Length: 76, Data:
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
42536 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Info SUCCESS Type: REG_BINARY, Length: 12, Data: 00
00 05 00 E2 0E 00 00 1A 00 00 00
42537 08:27.8 iexplore.exe 960 RegQueryValue
HKLM\SOFTWARE\Microsoft\Code Store Database\Global Namespace\Java
Packages\java\lang\Info SUCCESS Type: REG_BINARY, Length: 12, Data: 00
00 05 00 E2 0E 00 00 1A 00 00 00
42538 08:27.8 iexplore.exe 960 IRP_MJ_CREATE
C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP PATH NOT FOUND Desired Access:
Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert,
Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a
42539 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49
PM, LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004
12:56:44 AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize:
294,912, EndOfFile: 294,400, FileAttributes: n/a
42540 08:27.8 iexplore.exe 960 IRP_MJ_CREATE C:\Documents and
Settings\bob\Desktop\java\lang\ PATH NOT FOUND Desired Access: Read
Data/List Directory, Synchronize, Disposition: Open, Options: Directory,
Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write,
AllocationSize: n/a
42541 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
VM\Compatibility NAME NOT FOUND Desired Access: Query Value
42542 08:27.8 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java
VM\Compatibility NAME NOT FOUND Desired Access: Query Value
42543 08:27.8 iexplore.exe 960 Thread Exit SUCCESS User Time:
0.0000000, Kernel Time: 0.0156250
44010 08:27.9 iexplore.exe 960 RegOpenKey
HKCU\Software\Classes\MIME\Database\Content
Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read
44011 08:27.9 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS Desired Access: Read
44012 08:27.9 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS Query: Name
44013 08:27.9 iexplore.exe 960 RegOpenKey
HKCU\Software\Classes\MIME\Database\Content
Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Maximum
Allowed
44014 08:27.9 iexplore.exe 960 RegQueryValue HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file\Image Filter CLSID NAME NOT FOUND
Length: 144
44015 08:27.9 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS
46361 08:28.0 iexplore.exe 960 RegOpenKey
HKCU\Software\Classes\MIME\Database\Content
Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read
46362 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS Desired Access: Read
46363 08:28.0 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS Query: Name
46364 08:28.0 iexplore.exe 960 RegOpenKey
HKCU\Software\Classes\MIME\Database\Content
Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read
46365 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read
46366 08:28.0 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content
Type\application/x-java-jnlp-file SUCCESS
--
"All good work is done the way ants do things: Little by little."
--Lafcadio Hearn
/\___/\
/ /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
| |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
\ _ / Remove ANT from e-mail address: philpi@earthlink.netANT
( ) or ANTant@zimage.com
Ant is currently not listening to any songs on his home computer.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #14 (permalink)  
Old 10-09-2007, 08:10 AM
Donald Anadell
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java? (logs)


"Ant" <philpi@earthlink.netANT> wrote in message
news:OohPqhnCIHA.4712@TK2MSFTNGP04.phx.gbl...
> On 10/7/2007 9:33 AM PT, Donald Anadell typed:
>
>> You might first make sure that "msjava.dll" is still located in the
>> System32
>> folder.

>
> I do have it: v5.0.3810.0. Is this correct?


Yes, if you click Start||Run and type "wjview" (without the quote marks)
into the Run box and click OK, it should return a dialog box indicating
that you have Version 5.00.3810 installed on your machine. This is the
latest and most secure build of the MSJVM.
>
>
>> If your installation of Windows XP Home||Pro predates SP1a then the MS
>> Java Virtual Machine should be installed on your machine and that file
>> should be located in the System32 folder.
>>
>> Then try reregistering that DLL file by clicking on Start||Run and typing
>> the following into the Run box:
>> regsvr32 Msjava.dll

>
> That didn't work after I got a successful message.
>
>
>> The MS Java Virtual Machine and the Sun Java Virtual Machine can co-exist
>> quite nicely on the same machine, and you should be able to switch
>> between them. I have both virtual machines installed on three Windows XP
>> machines here and have no problems with any of them using either the
>> MSJVM or Sun. As long as you have the latest secure version of the
>> MSJVM(build 3810) installed, you shouldn't have any problems using that
>> Virtual Machinen.

>
> Yeah, that is what I am trying to do. Have both. Something is broken with
> my Java. :( Is there a downloadable EXE file to reinstall it?


While Microsoft does not offer the 3810 build of the MSJVM publicly any more
but you should be able to retrieve a copy of the setup file at the following
site:
http://www.mvps.org/marksxp/WindowsXP/java.php

You can try downloading and installing Build 3810 over top of your current
installation of the MSJVM to see if that resolves your issue. If not, you
may have to following the Uninstall procedure listed at that site to
competely remove the MSJVM from your Machine first, and then reinstall it.

If you do the Uninstall procedure for the MSJVM, you will have to download
both files(Build 3805 and Build 3810) from that site. First downlaod and
install build 3805 to reinstall the Virtual Machine, then download and
install the Patch Build 3810 and install it. Build 3810 is only a Security
Patch, so Build 3805 must be installed first.

>Also, is disabling in control panel's Sun Java JRE v6.0 b3 options not run
>in MSIE and VM enabled in IE6's options enough? Or did I miss other places?


I've always used the small utility available here:
http://www.jensign.com/JavaScience/S...JVM/index.html
that allows you to switch between the MSJVM and the Sun JVM in IE on the
fly. It will make the necessary Registry change to force IE to use on or
the other of the JVMs, and indicate to you which one is currently being
used.

Good luck,


Donald Anadell


>
> FYI if it even helps. I ran the latest Process Explorer on iexplore.exe:
> Process PID CPU Description User Name Priority Handles Window Title
> System Idle Process 0 92.36 NT AUTHORITY\SYSTEM 0 0 Interrupts n/a
> Hardware Interrupts 0 0 DPCs n/a 0.69 Deferred Procedure Calls 0 0 System
> 4 0.69 NT AUTHORITY\SYSTEM 8 632 smss.exe 1492 Windows NT Session Manager
> NT AUTHORITY\SYSTEM 11 21 csrss.exe 1560 0.69 Client Server Runtime
> Process NT AUTHORITY\SYSTEM 13 513 winlogon.exe 1584 Windows NT Logon
> Application NT AUTHORITY\SYSTEM 13 584 services.exe 1628 0.69 Services and
> Controller app NT AUTHORITY\SYSTEM 9 316 svchost.exe 1828 Generic Host
> Process for Win32 Services NT AUTHORITY\SYSTEM 8 220 svchost.exe 1872
> Generic Host Process for Win32 Services NT AUTHORITY\NETWORK SERVICE 8 264
> svchost.exe 440 Generic Host Process for Win32 Services NT
> AUTHORITY\SYSTEM 8 1,631 svchost.exe 616 Generic Host Process for Win32
> Services NT AUTHORITY\NETWORK SERVICE 8 98 spoolsv.exe 748 Spooler
> SubSystem App NT AUTHORITY\SYSTEM 8 130 svchost.exe 952 Generic Host
> Process for Win32 Services NT AUTHORITY\LOCAL SERVICE 8 173 cygrunsrv.exe
> 972 MYBOX\SvcCOPSSH 8 81 nTuneService.exe 1044 NVIDIA Access Manager NT
> AUTHORITY\SYSTEM 8 147 nvsvc32.exe 1060 NVIDIA Driver Helper Service,
> Version 163.69 NT AUTHORITY\SYSTEM 8 139 PERSFW.exe 1064 Kerio Personal
> Firewall Engine NT AUTHORITY\SYSTEM 8 73 HPZipm12.exe 376 PML Driver NT
> AUTHORITY\SYSTEM 8 42 PnkBstrA.exe 392 NT AUTHORITY\SYSTEM 8 46
> PnkBstrB.exe 464 NT AUTHORITY\SYSTEM 8 58 tcpsvcs.exe 544 TCP/IP Services
> Application NT AUTHORITY\SYSTEM 8 74 wdfmgr.exe 660 Windows User Mode
> Driver Manager NT AUTHORITY\LOCAL SERVICE 8 66 vmware-authd.exe 1168
> VMware Authorization Service NT AUTHORITY\SYSTEM 8 138 vmnat.exe 1196
> VMware NAT Service NT AUTHORITY\SYSTEM 8 54 vmnetdhcp.exe 1324 VMware
> VMnet DHCP service NT AUTHORITY\SYSTEM 8 29 alg.exe 252 Application Layer
> Gateway Service NT AUTHORITY\LOCAL SERVICE 8 104 lsass.exe 1640 LSA Shell
> (Export Version) NT AUTHORITY\SYSTEM 9 331 sshd.exe 1236 MYBOX\SvcCOPSSH 8
> 98 explorer.exe 996 Windows Explorer MYBOX\Bob 8 712 ul
> TaskSwitch.exe 1824 MYBOX\Bob 8 35 CTHELPER.EXE 776 CtHelper Application
> MYBOX\Bob 8 176 hpcmpmgr.exe 2412 HP Framework Component Manager Service
> MYBOX\Bob 8 176 hpwuSchd2.exe 2452 Hewlett-Packard Product AssistBob
> MYBOX\Bob 8 23 hphmon06.exe 2460 HPHmon06 MYBOX\Bob 8 101 rundll32.exe
> 2500 Run a DLL as an App MYBOX\Bob 8 92 FreeShade.exe 2572 FreeShade
> MYBOX\Bob 8 22 goScreen.exe 2584 Virtual multi-page monitor manager
> MYBOX\Bob 8 98 goScreen
> MCDTray.exe 2600 Media Changer Deluxe SysTray Launcher MYBOX\Bob 8 25
> Pickatag.exe 2608 MYBOX\Bob 8 22 PopTray.exe 2624 PopTray E-Mail Notifier
> MYBOX\Bob 8 150 trillian.exe 788 Trillian MYBOX\Bob 8 340 Trillian
> SecureCRT.EXE 3532 SecureCRT Application MYBOX\Bob 8 79 Bobian -
> SecureCRT
> SecureCRT.EXE 2044 SecureCRT Application MYBOX\Bob 8 153
> alpha.zimage.com - SecureCRT
> notepad.exe 3888 Notepad MYBOX\Bob 8 31 seamonkey.exe 796 SeaMonkey
> MYBOX\Bob 8 188 Compose: Re: MS' Java?
> procexp.exe 2880 4.17 Sysinternals Process Explorer MYBOX\Bob 13 422
> Process Explorer - Sysinternals: www.sysinternals.com [MYBOX\Bob]
> iexplore.exe 2800 0.69 Internet Explorer MYBOX\Bob 8 323 Java Tester -
> What Version of Java Are You Running? - Microsoft Internet Explorer
>
> Process: iexplore.exe Pid: 2800
>
> Base Size Mapping Description Version Time Name
> 0x140000 0x3000 Data <Pagefile Backed>
> 0x260000 0x3000 Data <Pagefile Backed>
> 0x263000 0xD000 Data <Pagefile Backed>
> 0x330000 0x2000 Data <Pagefile Backed>
> 0x390000 0x2000 Data <Pagefile Backed>
> 0x3A0000 0x2000 Data <Pagefile Backed>
> 0x3B0000 0x2000 Data <Pagefile Backed>
> 0x3C0000 0x2000 Data <Pagefile Backed>
> 0x3E0000 0x2000 Data <Pagefile Backed>
> 0x420000 0x5000 Data <Pagefile Backed>
> 0x425000 0xBB000 Data <Pagefile Backed>
> 0x4E0000 0x2000 Data <Pagefile Backed>
> 0x4E2000 0x6000 Data <Pagefile Backed>
> 0x4F0000 0x103000 Data <Pagefile Backed>
> 0x600000 0x9C000 Data <Pagefile Backed>
> 0x69C000 0x264000 Data <Pagefile Backed>
> 0xA00000 0x51000 Data <Pagefile Backed>
> 0xA70000 0xE000 Data <Pagefile Backed>
> 0xB60000 0x2000 Data <Pagefile Backed>
> 0xEE0000 0x2000 Data <Pagefile Backed>
> 0x1000000 0x1000 Data <Pagefile Backed>
> 0x1070000 0x2000 Data <Pagefile Backed>
> 0x1A00000 0x1000 Data <Pagefile Backed>
> 0x1B20000 0x2000 Data <Pagefile Backed>
> 0x1B30000 0x2000 Data <Pagefile Backed>
> 0x1E50000 0x1000 Data <Pagefile Backed>
> 0x1F60000 0x1000 Data <Pagefile Backed>
> 0x1F70000 0x2000 Data <Pagefile Backed>
> 0x7F6F0000 0x7000 Data <Pagefile Backed>
> 0x7F6F7000 0xF9000 Data <Pagefile Backed>
> 0x7FFB0000 0x24000 Data <Pagefile Backed>
> 0x77DD0000 0x9B000 Image Advanced Windows 32 Base API 5.01.2600.2180
> 8/4/2004 12:56 AM ADVAPI32.dll
> 0x77B40000 0x22000 Image Application Compatibility Client Library
> 5.01.2600.2180 8/4/2004 12:56 AM appHelp.dll
> 0x20000000 0x12000 Image Shell Browser UI Library 6.00.2900.2180 8/4/2004
> 12:56 AM browselc.dll
> 0x75F80000 0xFD000 Image Shell Browser UI Library 6.00.2900.3157 6/15/2007
> 1:12 AM BROWSEUI.dll
> 0x76FD0000 0x7F000 Image 2001.12.4414.0308 7/25/2005 9:39 PM CLBCATQ.DLL
> 0x773D0000 0x103000 Image User Experience Controls Library 6.00.2900.2982
> 8/25/2006 8:45 AM comctl32.dll
> 0x5D090000 0x9A000 Image Common Controls Library 5.82.2900.2982 8/25/2006
> 8:45 AM comctl32.dll
> 0x763B0000 0x49000 Image Common Dialogs DLL 6.00.2900.2180 8/4/2004 12:56
> AM comdlg32.dll
> 0x77050000 0xC5000 Image 2001.12.4414.0258 8/4/2004 12:56 AM COMRes.dll
> 0x77A80000 0x94000 Image Crypto API32 5.131.2600.2180 8/4/2004 12:56 AM
> CRYPT32.dll
> 0x754D0000 0x80000 Image Microsoft Trust UI Provider 5.131.2600.2180
> 8/4/2004 12:56 AM CRYPTUI.dll
> 0x76600000 0x1D000 Image Offline Network Agent 5.01.2600.2180 8/4/2004
> 12:56 AM CSCDLL.dll
> 0x77A20000 0x54000 Image Client Side Caching UI 5.01.2600.2180 8/4/2004
> 12:56 AM cscui.dll
> 0x2000000 0x6000 Image ctagent 1.00.0000.0012 8/11/2006 2:56 PM
> ctagent.dll
> 0x350000 0x3000 Data 8/23/2001 5:00 AM ctype.nls
> 0x76F20000 0x27000 Image DNS Client API DLL 5.01.2600.2938 6/26/2006 10:37
> AM DNSAPI.dll
> 0x16000000 0x28000 Image Trillian Event Control 3.01.0007.0000 7/19/2007
> 12:00 AM events.dll
> 0x69450000 0x16000 Image Windows Error Reporting 5.01.2600.2180 8/4/2004
> 12:56 AM faultrep.dll
> 0x10000000 0x1A000 Image FreeShade 1.00.0000.0004 9/27/2001 1:16 AM
> FreeShade.dll
> 0x77F10000 0x47000 Image GDI Client DLL 5.01.2600.3159 6/19/2007 6:31 AM
> GDI32.dll
> 0x662B0000 0x58000 Image Home Networking Configuration Manager
> 5.01.2600.2180 8/4/2004 12:56 AM hnetcfg.dll
> 0x400000 0x19000 Image Internet Explorer 6.00.2900.2180 8/4/2004 12:56 AM
> iexplore.exe
> 0x76C90000 0x28000 Image Windows NT Image Helper 5.01.2600.2180 8/4/2004
> 12:56 AM IMAGEHLP.dll
> 0x66880000 0xC000 Image IE plugin image decoder support DLL 6.00.2900.2180
> 8/4/2004 12:56 AM ImgUtil.dll
> 0x76390000 0x1D000 Image Windows XP IMM32 API Client DLL 5.01.2600.2180
> 8/4/2004 12:56 AM IMM32.DLL
> 0xB20000 0xC000 Data 10/9/2007 6:11 AM index.dat
> 0xB70000 0x174000 Data 10/9/2007 6:11 AM index.dat
> 0xCF0000 0x38000 Data 10/9/2007 6:11 AM index.dat
> 0x2EB0000 0x8000 Data 10/9/2007 6:11 AM index.dat
> 0x76D60000 0x19000 Image IP Helper API 5.01.2600.2912 5/19/2006 5:59 AM
> iphlpapi.dll
> 0x7C800000 0xF5000 Image Windows NT BASE API Client DLL 5.01.2600.3119
> 4/16/2007 8:52 AM kernel32.dll
> 0x290000 0x3D000 Data 7/17/2004 11:48 AM locale.nls
> 0x629C0000 0x9000 Image Language Pack 5.01.2600.2180 8/4/2004 12:56 AM
> LPK.DLL
> 0x2510000 0xA5000 Data 8/23/2001 5:00 AM mlang.dat
> 0x75CF0000 0x91000 Image Multi Language Support DLL 6.00.2900.2180
> 8/4/2004 12:56 AM mlang.dll
> 0x77B20000 0x12000 Image ASN.1 Runtime APIs 5.01.2600.2180 8/4/2004 12:56
> AM MSASN1.dll
> 0x74720000 0x4B000 Image MSCTF Server DLL 5.01.2600.2180 8/4/2004 12:56 AM
> MSCTF.dll
> 0x755C0000 0x2E000 Image Microsoft Text Frame Work Service IME
> 5.01.2600.2180 8/4/2004 12:56 AM msctfime.ime
> 0x4AA00000 0x15000 Image Active Debugging Proxy/Stub 6.00.0000.8424
> 11/15/1999 10:46 AM MSDBG.DLL
> 0x7DC30000 0x2F2000 Image Microsoft (R) HTML Viewer 6.00.2900.3157
> 6/15/2007 1:12 AM mshtml.dll
> 0x7D1E0000 0x2BE000 Image Windows Installer 3.01.4000.4039 4/18/2007 9:12
> AM msi.dll
> 0x76380000 0x5000 Image GDIEXT Client DLL 5.01.2600.2180 8/4/2004 12:56 AM
> msimg32.dll
> 0x2DC0000 0x4000 Data 6/4/2004 8:46 PM MSIMGSIZ.DAT
> 0x746F0000 0x2A000 Image Active IMM Server DLL 5.01.2600.2180 8/4/2004
> 12:56 AM msimtf.dll
> 0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM
> msjava.dll
> 0x746C0000 0x27000 Image Microsoft Line Services library file
> 3.10.0349.0000 8/23/2001 5:00 AM msls31.dll
> 0x77C70000 0x23000 Image Microsoft Authentication Package v1.0
> 5.01.2600.2180 8/4/2004 12:56 AM msv1_0.dll
> 0x7C340000 0x56000 Image Microsoft® C Runtime Library 7.10.3052.0004
> 9/25/2007 1:25 AM MSVCR71.dll
> 0x77C10000 0x58000 Image Windows NT CRT DLL 7.00.2600.2180 8/4/2004 12:56
> AM msvcrt.dll
> 0x71A50000 0x3F000 Image Microsoft Windows Sockets 2.0 Service Provider
> 5.01.2600.2180 8/4/2004 12:56 AM mswsock.dll
> 0x5B860000 0x54000 Image Net Win32 API DLL 5.01.2600.2976 8/17/2006 5:28
> AM NETAPI32.dll
> 0x7C900000 0xB0000 Image NT Layer DLL 5.01.2600.2180 8/4/2004 12:56 AM
> ntdll.dll
> 0x774E0000 0x13D000 Image Microsoft OLE for Windows 5.01.2600.2726
> 7/25/2005 9:39 PM ole32.dll
> 0x77120000 0x8B000 Image 5.01.2600.3139 5/17/2007 4:28 AM OLEAUT32.dll
> 0x5EDD0000 0x17000 Image 5.01.2600.2180 8/4/2004 12:56 AM olepro32.dll
> 0xFD0000 0x2F000 Image Orbitcth 2.02.0000.0001 9/20/2007 3:40 PM
> orbitcth.dll
> 0x5E310000 0xC000 Image IE PNG plugin image decoder 6.00.2900.3157
> 6/15/2007 1:12 AM pngfilt.dll
> 0x76BF0000 0xB000 Image Process Status Helper 5.01.2600.2180 8/4/2004
> 12:56 AM PSAPI.DLL
> 0x76FC0000 0x6000 Image Remote Access AutoDial Helper 5.01.2600.2938
> 6/26/2006 10:37 AM rasadhlp.dll
> 0x76EE0000 0x3C000 Image Remote Access API 5.01.2600.2180 8/4/2004 12:56
> AM RASAPI32.DLL
> 0x76E90000 0x12000 Image Remote Access Connection Manager 5.01.2600.2180
> 8/4/2004 12:56 AM rasman.dll
> 0x77E70000 0x91000 Image Remote Procedure Call Runtime 5.01.2600.2180
> 8/4/2004 12:56 AM RPCRT4.dll
> 0xFFD0000 0x28000 Image Microsoft Enhanced Cryptographic Provider
> 5.01.2600.2161 8/3/2004 10:31 PM rsaenh.dll
> 0x76E80000 0xE000 Image Routing Utilities 5.01.2600.2180 8/4/2004 12:56 AM
> rtutils.dll
> 0x1080000 0x11A000 Image SBSD IE Protection 1.05.0000.0008 8/31/2007 4:46
> PM SDHelper.dll
> 0x77FE0000 0x11000 Image Security Support Provider Interface
> 5.01.2600.2180 8/4/2004 12:56 AM Secur32.dll
> 0x722B0000 0x5000 Image SENS Connectivity API DLL 5.01.2600.2180 8/4/2004
> 12:56 AM sensapi.dll
> 0x77920000 0xF3000 Image Windows Setup API 5.01.2600.2180 8/4/2004 12:56
> AM SETUPAPI.dll
> 0x1A10000 0x88000 Image Shell Doc Object and Control Library
> 6.00.2900.2180 8/4/2004 12:56 AM shdoclc.dll
> 0x7E290000 0x171000 Image Shell Doc Object and Control Library
> 6.00.2900.3157 6/15/2007 1:12 AM SHDOCVW.dll
> 0x7C9C0000 0x815000 Image Windows Shell Common Dll 6.00.2900.3051
> 12/19/2006 2:52 PM SHELL32.dll
> 0x77F60000 0x76000 Image Shell Light-weight Utility Library 6.00.2900.3157
> 6/15/2007 1:12 AM SHLWAPI.dll
> 0x2D0000 0x41000 Data 8/23/2001 5:00 AM sortkey.nls
> 0x320000 0x6000 Data 7/17/2004 11:48 AM sorttbls.nls
> 0x6D7C0000 0x79000 Image Java(TM) Platform SE binary 6.00.0030.0005
> 9/25/2007 1:11 AM ssv.dll
> 0x75E90000 0xB0000 Image Fusion 2.5 5.01.2600.3019 10/19/2006 6:56 AM
> SXS.DLL
> 0x76EB0000 0x2F000 Image Microsoft® Windows(TM) Telephony API Client DLL
> 5.01.2600.2180 8/4/2004 12:56 AM TAPI32.dll
> 0x270000 0x16000 Data 8/23/2001 5:00 AM unicode.nls
> 0x7E1E0000 0xA2000 Image OLE32 Extensions for Win32 6.00.2900.3157
> 6/15/2007 1:12 AM urlmon.dll
> 0x7E410000 0x90000 Image Windows XP USER API Client DLL 5.01.2600.3099
> 3/8/2007 8:36 AM USER32.dll
> 0x769C0000 0xB3000 Image Userenv 5.01.2600.2180 8/4/2004 12:56 AM
> USERENV.dll
> 0x74D90000 0x6B000 Image Uniscribe Unicode script processor
> 1.420.2600.2180 8/4/2004 12:56 AM USP10.dll
> 0x5AD70000 0x38000 Image Microsoft UxTheme Library 6.00.2900.2180 8/4/2004
> 12:56 AM uxtheme.dll
> 0x77C00000 0x8000 Image Version Checking and File Installation Libraries
> 5.01.2600.2180 8/4/2004 12:56 AM VERSION.dll
> 0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000
> 2/28/2003 6:26 PM VMHELPER.DLL
> 0x771B0000 0xAA000 Image Internet Extensions for Win32 6.00.2900.3164
> 6/26/2007 7:35 AM WININET.dll
> 0x76B40000 0x2D000 Image MCI API DLL 5.01.2600.2180 8/4/2004 12:56 AM
> WINMM.dll
> 0x76360000 0x10000 Image Winstation Library 5.01.2600.2180 8/4/2004 12:56
> AM WINSTA.dll
> 0x76C30000 0x2E000 Image Microsoft Trust Verification APIs 5.131.2600.2180
> 8/4/2004 12:56 AM WINTRUST.dll
> 0x76F60000 0x2C000 Image Win32 LDAP API DLL 5.01.2600.2180 8/4/2004 12:56
> AM WLDAP32.dll
> 0x71AB0000 0x17000 Image Windows Socket 2.0 32-Bit DLL 5.01.2600.2180
> 8/4/2004 12:56 AM WS2_32.dll
> 0x71AA0000 0x8000 Image Windows Socket 2.0 Helper for Windows NT
> 5.01.2600.2180 8/4/2004 12:56 AM WS2HELP.dll
> 0x71A90000 0x8000 Image Windows Sockets Helper DLL 5.01.2600.2180 8/4/2004
> 12:56 AM wshtcpip.dll
> 0x71AD0000 0x9000 Image Windows Socket 32-Bit DLL 5.01.2600.2180 8/4/2004
> 12:56 AM wsock32.dll
> 0x76F50000 0x8000 Image Windows Terminal Server SDK APIs 5.01.2600.2180
> 8/4/2004 12:56 AM WTSAPI32.dll
> 0x1420000 0x2C5000 Image Service Pack 2 Messages 5.01.2600.2180 8/4/2004
> 12:56 AM xpsp2res.dll
>
> As you can see, IE loaded its MS Java stuff:
> 0x7C000000 0xEA000 Image Microsoft® VM 5.00.3810.0000 2/28/2003 6:26 PM
> msjava.dll
> 0x7C520000 0x48000 Image Microsoft® VM Helper Library 5.00.3810.0000
> 2/28/2003 6:26 PM VMHELPER.DLL
>
>
> I also ran Process Monitor to log. I did a search and found these related
> to MS Java:
> 37243 08:27.6 iexplore.exe 960 RegQueryValue
> HKLM\SOFTWARE\Microsoft\Active Setup\Installed
> Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS
> Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll
> 37244 08:27.6 iexplore.exe 960 RegQueryValue
> HKLM\SOFTWARE\Microsoft\Active Setup\Installed
> Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}\KeyFileName SUCCESS
> Type: REG_SZ, Length: 62, Data: C:\WINDOWS\System32\msjava.dll
> 37245 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
> C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM,
> LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26
> PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile:
> 947,472, FileAttributes: n/a
> 37269 08:27.6 iexplore.exe 960 RegQueryValue
> HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default)
> SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll
> 37270 08:27.6 iexplore.exe 960 RegQueryKey
> HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 SUCCESS
> Query: Name
> 37271 08:27.6 iexplore.exe 960 RegOpenKey
> HKCU\Software\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32
> NAME NOT FOUND Desired Access: Maximum Allowed
> 37272 08:27.6 iexplore.exe 960 RegQueryValue
> HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default)
> SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll
> 37273 08:27.6 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
> C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM,
> LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26
> PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile:
> 947,472, FileAttributes: n/a
> 37274 08:27.6 iexplore.exe 960 RegQueryKey
> HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name
> 37339 08:27.7 iexplore.exe 960 RegQueryValue
> HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32\(Default)
> SUCCESS Type: REG_SZ, Length: 62, Data: C:\WINDOWS\system32\msjava.dll
> 37340 08:27.7 iexplore.exe 960 RegCloseKey
> HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\InprocServer32 SUCCESS
> 37341 08:27.7 iexplore.exe 960 RegQueryKey
> HKCR\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} SUCCESS Query: Name
> 37385 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
> C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM,
> LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26
> PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile:
> 947,472, FileAttributes: n/a
> 37386 08:27.7 iexplore.exe 960 IRP_MJ_CREATE
> C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse,
> Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
> Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
> AllocationSize: n/a, OpenResult: Opened
> 37387 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
> PageProtection: PAGE_EXECUTE
> 37388 08:27.7 iexplore.exe 960 FASTIO_QUERY_INFORMATION
> C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile,
> AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1,
> DeletePending: False, Directory: False
> 37389 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37390 08:27.7 iexplore.exe 960
> FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll
> SUCCESS SyncType: SyncTypeOther
> 37391 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37392 08:27.7 iexplore.exe 960
> IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type:
> QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll
> 37393 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP
> C:\WINDOWS\system32\msjava.dll SUCCESS 37394 08:27.7 iexplore.exe 960
> IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37395 08:27.7
> iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll
> SUCCESS CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005
> 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007
> 12:39:21 AM, AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes:
> n/a
> 37396 08:27.7 iexplore.exe 960 IRP_MJ_CREATE
> C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Execute/Traverse,
> Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
> Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
> AllocationSize: n/a, OpenResult: Opened
> 37397 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
> PageProtection: PAGE_EXECUTE
> 37398 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH
> C:\WINDOWS\system32\msjava.dll SUCCESS 37399 08:27.7 iexplore.exe 960
> FASTIO_RELEASE_FOR_CC_FLUSH C:\WINDOWS\system32\msjava.dll SUCCESS 37400
> 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37401 08:27.7 iexplore.exe 960
> FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll
> SUCCESS SyncType: SyncTypeOther
> 37402 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37403 08:27.7 iexplore.exe 960
> IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type:
> QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll
> 37404 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP
> C:\WINDOWS\system32\msjava.dll SUCCESS 37405 08:27.7 iexplore.exe 960
> IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll SUCCESS 37406 08:27.7
> Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll
> SUCCESS Type: QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll
> 37407 08:27.7 iexplore.exe 960 Load Image C:\WINDOWS\system32\msjava.dll
> SUCCESS Image Base: 0x7c000000, Image Size: 0xea000
> 37408 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Windows
> NT\CurrentVersion\Image File Execution Options\msjava.dll SUCCESS Desired
> Access: Read
> 37409 08:27.7 iexplore.exe 960 RegQueryValue
> HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution
> Options\msjava.dll\CheckAppHelp SUCCESS Type: REG_DWORD, Length: 4, Data:
> 1
> 37410 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\Image File Execution Options\msjava.dll SUCCESS 37428
> 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS Desired
> Access: Read Data/List Directory, Synchronize, Disposition: Open, Options:
> Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read,
> Write, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult:
> Opened
> 37429 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL
> C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter:
> msjava.dll, 2: msjava.dll
> 37430 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS
> 37431 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS
> 37432 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
> C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM,
> LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26
> PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile:
> 947,472, FileAttributes: n/a
> 37433 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\ SUCCESS Desired Access:
> Read Data/List Directory, Synchronize, Disposition: Open, Options:
> Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read,
> Write, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult:
> Opened
> 37434 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS SUCCESS
> Type: QueryDirectory, Filter: WINDOWS, 2: WINDOWS
> 37435 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\ SUCCESS 37436 08:27.7
> csrss.exe 1560 IRP_MJ_CLOSE C:\ SUCCESS 37437 08:27.7 csrss.exe 1560
> IRP_MJ_CREATE C:\WINDOWS SUCCESS Desired Access: Read Data/List Directory,
> Synchronize, Disposition: Open, Options: Directory, Synchronous IO
> Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a,
> Impersonating: HARVESTER\Ant, OpenResult: Opened
> 37438 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL C:\WINDOWS\system32
> SUCCESS Type: QueryDirectory, Filter: system32, 2: system32
> 37439 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS SUCCESS 37440
> 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS SUCCESS 37441 08:27.7
> csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32 SUCCESS Desired Access:
> Read Data/List Directory, Synchronize, Disposition: Open, Options:
> Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read,
> Write, AllocationSize: n/a, Impersonating: HARVESTER\Ant, OpenResult:
> Opened
> 37442 08:27.7 csrss.exe 1560 IRP_MJ_DIRECTORY_CONTROL
> C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryDirectory, Filter:
> msjava.dll, 2: msjava.dll
> 37443 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32 SUCCESS
> 37444 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\system32 SUCCESS
> 37445 08:27.7 csrss.exe 1560 RegOpenKey HKLM\Software\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read,
> WOW64_64Key
> 37446 08:27.7 csrss.exe 1560 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll
> NAME NOT FOUND Length: 1,024
> 37447 08:27.7 csrss.exe 1560 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags\Layers SUCCESS 37448 08:27.7 csrss.exe
> 1560 RegOpenKey HKCU\Software\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags\Layers SUCCESS Desired Access: Read,
> WOW64_64Key
> 37449 08:27.7 csrss.exe 1560 RegQueryValue HKCU\Software\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags\Layers\C:\WINDOWS \system32\msjava.dll
> NAME NOT FOUND Length: 1,024
> 37450 08:27.7 csrss.exe 1560 RegCloseKey HKCU\Software\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags\Layers SUCCESS 37451 08:27.7 csrss.exe
> 1560 RegOpenKey HKLM\Software\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags\Custom\msjava.dll NAME NOT FOUND Desired
> Access: Read, WOW64_64Key
> 37452 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
> C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM,
> LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26
> PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile:
> 947,472, FileAttributes: n/a
> 37453 08:27.7 csrss.exe 1560 FASTIO_NETWORK_QUERY_OPEN
> C:\WINDOWS\system32\msjava.dll SUCCESS CreationTime: 4/9/2003 7:59:36 PM,
> LastAccessTime: 12/12/2005 5:25:20 AM, LastWriteTime: 2/28/2003 6:26:26
> PM, ChangeTime: 8/31/2007 12:39:21 AM, AllocationSize: 950,272, EndOfFile:
> 947,472, FileAttributes: n/a
> 37454 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll
> SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open,
> Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
> ShareMode: Read, Delete, AllocationSize: n/a, Impersonating:
> HARVESTER\Ant, OpenResult: Opened
> 37455 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
> PageProtection: PAGE_EXECUTE
> 37456 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
> C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile,
> AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1,
> DeletePending: False, Directory: False
> 37457 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37458 08:27.7 csrss.exe 1560
> FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll
> SUCCESS SyncType: SyncTypeOther
> 37459 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37460 08:27.7 csrss.exe 1560
> IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type:
> QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll
> 37461 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll
> SUCCESS 37462 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
> C:\WINDOWS\system32\msjava.dll SUCCESS 37463 08:27.7 csrss.exe 1560
> FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS
> CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM,
> LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM,
> AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a
> 37464 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll
> SUCCESS Desired Access: Generic Read, Disposition: Open, Options:
> Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode:
> Read, Delete, AllocationSize: n/a, Impersonating: HARVESTER\Ant,
> OpenResult: Opened
> 37465 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
> PageProtection: PAGE_READONLY
> 37466 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
> C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile,
> AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1,
> DeletePending: False, Directory: False
> 37467 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37468 08:27.7 csrss.exe 1560
> FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll
> SUCCESS SyncType: SyncTypeOther
> 37469 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37470 08:27.7 csrss.exe 1560
> IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type:
> QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll
> 37471 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll
> SUCCESS 37472 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
> C:\WINDOWS\system32\msjava.dll SUCCESS 37473 08:27.7 csrss.exe 1560
> FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS
> CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM,
> LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM,
> AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a
> 37474 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll
> SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open,
> Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a,
> ShareMode: Read, Delete, AllocationSize: n/a, Impersonating:
> HARVESTER\Ant, OpenResult: Opened
> 37475 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
> PageProtection: PAGE_EXECUTE
> 37476 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
> C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile,
> AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1,
> DeletePending: False, Directory: False
> 37477 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37478 08:27.7 csrss.exe 1560
> FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll
> SUCCESS SyncType: SyncTypeOther
> 37479 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37480 08:27.7 csrss.exe 1560
> IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type:
> QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll
> 37481 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll
> SUCCESS 37482 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
> C:\WINDOWS\system32\msjava.dll SUCCESS 37483 08:27.7 csrss.exe 1560
> FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\system32\msjava.dll SUCCESS
> CreationTime: 4/9/2003 7:59:36 PM, LastAccessTime: 12/12/2005 5:25:20 AM,
> LastWriteTime: 2/28/2003 6:26:26 PM, ChangeTime: 8/31/2007 12:39:21 AM,
> AllocationSize: 950,272, EndOfFile: 947,472, FileAttributes: n/a
> 37484 08:27.7 csrss.exe 1560 IRP_MJ_CREATE C:\WINDOWS\system32\msjava.dll
> SUCCESS Desired Access: Generic Read, Disposition: Open, Options:
> Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode:
> Read, Delete, AllocationSize: n/a, Impersonating: HARVESTER\Ant,
> OpenResult: Opened
> 37485 08:27.7 csrss.exe 1560 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS SyncType: SyncTypeCreateSection,
> PageProtection: PAGE_READONLY
> 37486 08:27.7 csrss.exe 1560 FASTIO_QUERY_INFORMATION
> C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile,
> AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1,
> DeletePending: False, Directory: False
> 37487 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37488 08:27.7 csrss.exe 1560
> FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll
> SUCCESS SyncType: SyncTypeOther
> 37489 08:27.7 csrss.exe 1560 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37490 08:27.7 csrss.exe 1560
> IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\msjava.dll SUCCESS Type:
> QueryNameInformationFile, Name: \WINDOWS\system32\msjava.dll
> 37491 08:27.7 csrss.exe 1560 IRP_MJ_CLEANUP C:\WINDOWS\system32\msjava.dll
> SUCCESS 37492 08:27.7 csrss.exe 1560 IRP_MJ_CLOSE
> C:\WINDOWS\system32\msjava.dll SUCCESS 37493 08:27.7 csrss.exe 1560
> RegOpenKey HKLM\Software\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags SUCCESS Desired Access: Read, WOW64_64Key
> 37494 08:27.7 csrss.exe 1560 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447}
> NAME NOT FOUND Length: 1,024
> 37495 08:27.7 csrss.exe 1560 RegCloseKey HKLM\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags SUCCESS 37496 08:27.7 csrss.exe 1560
> RegOpenKey HKCU\Software\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags SUCCESS Desired Access: Read, WOW64_64Key
> 37497 08:27.7 csrss.exe 1560 RegQueryValue HKCU\Software\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags\{f297e209-8fc5-4ec3-a6fe-5c05bfdf3447}
> NAME NOT FOUND Length: 1,024
> 37498 08:27.7 csrss.exe 1560 RegCloseKey HKCU\Software\Microsoft\Windows
> NT\CurrentVersion\AppCompatFlags SUCCESS 37499 08:27.7 csrss.exe 1560
> IRP_MJ_CLEANUP C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS 37500 08:27.7
> csrss.exe 1560 IRP_MJ_CLOSE C:\WINDOWS\AppPatch\sysmain.sdb SUCCESS 37501
> 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM
> SUCCESS Desired Access: Query Value
> 37502 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\JUICERPATH NAME NOT FOUND Length: 144
> 37503 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37504 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
> C:\Program Files\Internet Explorer\VMHELPER.DLL NAME NOT FOUND 37505
> 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
> C:\WINDOWS\system32\vmhelper.dll SUCCESS CreationTime: 4/9/2003 7:59:36
> PM, LastAccessTime: 12/12/2005 5:26:27 AM, LastWriteTime: 2/28/2003
> 6:26:26 PM, ChangeTime: 12/25/2006 11:53:27 AM, AllocationSize: 290,816,
> EndOfFile: 286,992, FileAttributes: n/a
> 37506 08:27.7 iexplore.exe 960 IRP_MJ_CREATE
> C:\WINDOWS\system32\vmhelper.dll SUCCESS Desired Access: Execute/Traverse,
> Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert,
> Non-Directory File, Attributes: n/a, ShareMode: Read, Delete,
> AllocationSize: n/a, OpenResult: Opened
> 37507 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType: SyncTypeCreateSection,
> PageProtection: PAGE_EXECUTE
> 37508 08:27.7 iexplore.exe 960 FASTIO_ACQUIRE_FOR_CC_FLUSH
> C:\WINDOWS\system32\vmhelper.dll SUCCESS 37509 08:27.7 iexplore.exe 960
> FASTIO_RELEASE_FOR_CC_FLUSH C:\WINDOWS\system32\vmhelper.dll SUCCESS 37510
> 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\vmhelper.dll SUCCESS 37511 08:27.7 iexplore.exe 960
> FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\vmhelper.dll SUCCESS SyncType: SyncTypeOther
> 37512 08:27.7 iexplore.exe 960 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\vmhelper.dll SUCCESS 37513 08:27.7 iexplore.exe 960
> IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\vmhelper.dll SUCCESS Type:
> QueryNameInformationFile, Name: \WINDOWS\system32\vmhelper.dll
> 37514 08:27.7 iexplore.exe 960 IRP_MJ_CLEANUP
> C:\WINDOWS\system32\vmhelper.dll SUCCESS 37515 08:27.7 iexplore.exe 960
> IRP_MJ_CLOSE C:\WINDOWS\system32\vmhelper.dll SUCCESS 37516 08:27.7
> Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION C:\WINDOWS\system32\vmhelper.dll
> SUCCESS Type: QueryNameInformationFile, Name:
> \WINDOWS\system32\vmhelper.dll
> 37517 08:27.7 iexplore.exe 960 Load Image C:\WINDOWS\system32\vmhelper.dll
> SUCCESS Image Base: 0x7c520000, Image Size: 0x48000
> 37518 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Windows
> NT\CurrentVersion\Image File Execution Options\VMHELPER.DLL NAME NOT FOUND
> Desired Access: Read
> 37519 08:27.7 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java VM
> SUCCESS Desired Access: Query Value
> 37520 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java
> VM\EnableFI NAME NOT FOUND Length: 144
> 37521 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM
> SUCCESS 37522 08:27.7 iexplore.exe 960 RegOpenKey
> HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37523 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java
> VM\CPUType NAME NOT FOUND Length: 144
> 37524 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM
> SUCCESS 37525 08:27.7 iexplore.exe 960 RegOpenKey
> HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37526 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java
> VM\EnableGCHeapCheck NAME NOT FOUND Length: 144
> 37527 08:27.7 Procmon.exe 2248 IRP_MJ_CREATE
> C:\WINDOWS\system32\msjava.dll SUCCESS Desired Access: Generic Read,
> Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File,
> Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened
> 37528 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM
> SUCCESS 37529 08:27.7 iexplore.exe 960 RegOpenKey
> HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37530 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\EnableGCHeapCheck NAME NOT FOUND Length: 144
> 37531 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37532 08:27.7 iexplore.exe 960 RegOpenKey
> HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37533 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java
> VM\DisableGCClassCollection NAME NOT FOUND Length: 144
> 37534 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM
> SUCCESS 37535 08:27.7 iexplore.exe 960 RegOpenKey
> HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37536 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java
> VM\InitStaticsEarly NAME NOT FOUND Length: 144
> 37537 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM
> SUCCESS 37538 08:27.7 iexplore.exe 960 RegOpenKey
> HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37539 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java
> VM\EnableJIT SUCCESS Type: REG_BINARY, Length: 4, Data: 01 00 00 00
> 37540 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM
> SUCCESS 37541 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION
> C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile,
> AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1,
> DeletePending: False, Directory: False
> 37542 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM
> SUCCESS Desired Access: Query Value
> 37543 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\DoNotJitList NAME NOT FOUND Length: 144
> 37544 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37545 08:27.7 Procmon.exe 2248
> FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll
> SUCCESS SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY
> 37546 08:27.7 Procmon.exe 2248 FASTIO_QUERY_INFORMATION
> C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryStandardInformationFile,
> AllocationSize: 950,272, EndOfFile: 947,472, NumberOfLinks: 1,
> DeletePending: False, Directory: False
> 37547 08:27.7 Procmon.exe 2248 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37548 08:27.7 Procmon.exe 2248
> FASTIO_ACQUIRE_FOR_SECTION_SYNCHRONIZATION C:\WINDOWS\system32\msjava.dll
> SUCCESS SyncType: SyncTypeOther
> 37549 08:27.7 Procmon.exe 2248 FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION
> C:\WINDOWS\system32\msjava.dll SUCCESS 37550 08:27.7 iexplore.exe 960
> RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query
> Value
> 37551 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\Verification NAME NOT FOUND Length: 144
> 37552 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37553 08:27.7 iexplore.exe 960 RegOpenKey
> HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37554 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\VerificationOptions NAME NOT FOUND Length: 144
> 37555 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37556 08:27.7 iexplore.exe 960 RegOpenKey
> HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37557 08:27.7 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java
> VM\FileURLsAreTrusted NAME NOT FOUND Length: 144
> 37558 08:27.7 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM
> SUCCESS 37559 08:27.7 Procmon.exe 2248 IRP_MJ_QUERY_INFORMATION
> C:\WINDOWS\system32\msjava.dll SUCCESS Type: QueryNameInformationFile,
> Name: \WINDOWS\system32\msjava.dll
> 37560 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM
> SUCCESS Desired Access: Query Value
> 37561 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data:
> C:\WINDOWS\java\classes;.
> 37562 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data:
> C:\WINDOWS\java\classes;.
> 37563 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data:
> C:\WINDOWS\java\classes;.
> 37564 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\ClassPath SUCCESS Type: REG_SZ, Length: 52, Data:
> C:\WINDOWS\java\classes;.
> 37565 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37566 08:27.7 Procmon.exe 2248 IRP_MJ_CLEANUP
> C:\WINDOWS\system32\msjava.dll SUCCESS 37567 08:27.7 iexplore.exe 960
> FASTIO_NETWORK_QUERY_OPEN C:\WINDOWS\java\classes PATH NOT FOUND 37568
> 08:27.7 Procmon.exe 2248 IRP_MJ_CLOSE C:\WINDOWS\system32\msjava.dll
> SUCCESS 37569 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
> C:\Documents and Settings\Ant\Desktop SUCCESS CreationTime: 1/19/2002
> 10:50:26 PM, LastAccessTime: 10/6/2007 9:42:36 AM, LastWriteTime:
> 10/6/2007 9:42:36 AM, ChangeTime: 10/6/2007 9:42:36 AM, AllocationSize: 0,
> EndOfFile: 0, FileAttributes: D
> 37570 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM
> SUCCESS Desired Access: Query Value
> 37571 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data:
> 37572 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data:
> 37573 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data:
> 37574 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\TrustedClassPath SUCCESS Type: REG_SZ, Length: 2, Data:
> 37575 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37576 08:27.7 iexplore.exe 960 RegOpenKey
> HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37577 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\LibsDirectory NAME NOT FOUND Length: 144
> 37578 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37579 08:27.7 iexplore.exe 960 RegOpenKey
> HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37580 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data:
> C:\WINDOWS\java\trustlib
> 37581 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data:
> C:\WINDOWS\java\trustlib
> 37582 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data:
> C:\WINDOWS\java\trustlib
> 37583 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\TrustedLibsDirectory SUCCESS Type: REG_SZ, Length: 50, Data:
> C:\WINDOWS\java\trustlib
> 37584 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37585 08:27.7 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
> C:\WINDOWS\java\trustlib PATH NOT FOUND 37586 08:27.7 iexplore.exe 960
> RegOpenKey HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query
> Value
> 37587 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\SourcePath NAME NOT FOUND Length: 144
> 37588 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37589 08:27.7 iexplore.exe 960 RegOpenKey
> HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37590 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\DevClassPath NAME NOT FOUND Length: 144
> 37591 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37592 08:27.7 iexplore.exe 960 Thread Create SUCCESS Thread ID:
> 3528
> 37593 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM
> SUCCESS Desired Access: Query Value
> 37594 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\EnableContexts NAME NOT FOUND Length: 144
> 37595 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37596 08:27.7 iexplore.exe 960 RegOpenKey
> HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37597 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\FTMChecksDisabled NAME NOT FOUND Length: 144
> 37598 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37599 08:27.7 iexplore.exe 960 RegOpenKey
> HKLM\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 37600 08:27.7 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\FTMChecksDisabledForADO NAME NOT FOUND Length: 144
> 37601 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 37602 08:27.7 iexplore.exe 960 RegOpenKey
> HKLM\Software\Microsoft\Java VM\Debug NAME NOT FOUND Desired Access: Query
> Value
> 37603 08:27.7 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
> VM\MSDebug SUCCESS Desired Access: Query Value
> 37604 08:27.7 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java
> VM\MSDEBUG SUCCESS 37605 08:27.7 iexplore.exe 960 Thread Create SUCCESS
> Thread ID: 2844
> 42516 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
> VM\ActiveXDebug NAME NOT FOUND Desired Access: Query Value
> 42517 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java VM
> SUCCESS Desired Access: Query Value
> 42518 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Java
> VM\DebuggingFlags NAME NOT FOUND Length: 144
> 42519 08:27.8 iexplore.exe 960 RegCloseKey HKLM\SOFTWARE\Microsoft\Java VM
> SUCCESS 42520 08:27.8 iexplore.exe 960 RegOpenKey
> HKCU\Software\Microsoft\Java VM SUCCESS Desired Access: Query Value
> 42521 08:27.8 iexplore.exe 960 RegQueryValue HKCU\Software\Microsoft\Java
> VM\EnableEventMonitors NAME NOT FOUND Length: 144
> 42522 08:27.8 iexplore.exe 960 RegCloseKey HKCU\Software\Microsoft\Java VM
> SUCCESS 42523 08:27.8 iexplore.exe 960 RegCreateKey
> HKLM\Software\Microsoft\Code Store Database\Global Namespace\Java Packages
> SUCCESS Desired Access: Maximum Allowed
> 42524 08:27.8 iexplore.exe 960 RegCreateKey HKLM\Software\Microsoft\Code
> Store Database\Application Namespaces SUCCESS Desired Access: Maximum
> Allowed
> 42525 08:27.8 iexplore.exe 960 RegCreateKey HKLM\SOFTWARE\Microsoft\Code
> Store Database SUCCESS Desired Access: Maximum Allowed
> 42526 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code
> Store Database\Global Namespace\Java Packages SUCCESS Desired Access:
> Maximum Allowed
> 42527 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
> VM\Pending Deletions NAME NOT FOUND Desired Access: Maximum Allowed
> 42528 08:27.8 iexplore.exe 960 RegOpenKey HKLM\SOFTWARE\Microsoft\Code
> Store Database\Global Namespace\Java Packages\java\lang SUCCESS Desired
> Access: Maximum Allowed
> 42529 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code
> Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type:
> REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
> 42530 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code
> Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type:
> REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
> 42531 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code
> Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type:
> REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
> 42532 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code
> Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type:
> REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
> 42533 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code
> Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type:
> REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
> 42534 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
> C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49 PM,
> LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004 12:56:44
> AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize: 294,912,
> EndOfFile: 294,400, FileAttributes: n/a
> 42535 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code
> Store Database\Global Namespace\Java Packages\java\lang\Path SUCCESS Type:
> REG_SZ, Length: 76, Data: C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP
> 42536 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code
> Store Database\Global Namespace\Java Packages\java\lang\Info SUCCESS Type:
> REG_BINARY, Length: 12, Data: 00 00 05 00 E2 0E 00 00 1A 00 00 00
> 42537 08:27.8 iexplore.exe 960 RegQueryValue HKLM\SOFTWARE\Microsoft\Code
> Store Database\Global Namespace\Java Packages\java\lang\Info SUCCESS Type:
> REG_BINARY, Length: 12, Data: 00 00 05 00 E2 0E 00 00 1A 00 00 00
> 42538 08:27.8 iexplore.exe 960 IRP_MJ_CREATE
> C:\WINDOWS\JAVA\Packages\WU1NLVD3.ZIP PATH NOT FOUND Desired Access:
> Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert,
> Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a
> 42539 08:27.8 iexplore.exe 960 FASTIO_NETWORK_QUERY_OPEN
> C:\WINDOWS\system32\msctf.dll SUCCESS CreationTime: 10/4/2002 9:23:49 PM,
> LastAccessTime: 12/19/2005 8:59:18 AM, LastWriteTime: 8/4/2004 12:56:44
> AM, ChangeTime: 12/25/2006 11:53:22 AM, AllocationSize: 294,912,
> EndOfFile: 294,400, FileAttributes: n/a
> 42540 08:27.8 iexplore.exe 960 IRP_MJ_CREATE C:\Documents and
> Settings\Ant\Desktop\java\lang\ PATH NOT FOUND Desired Access: Read
> Data/List Directory, Synchronize, Disposition: Open, Options: Directory,
> Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write,
> AllocationSize: n/a
> 42541 08:27.8 iexplore.exe 960 RegOpenKey HKLM\Software\Microsoft\Java
> VM\Compatibility NAME NOT FOUND Desired Access: Query Value
> 42542 08:27.8 iexplore.exe 960 RegOpenKey HKCU\Software\Microsoft\Java
> VM\Compatibility NAME NOT FOUND Desired Access: Query Value
> 42543 08:27.8 iexplore.exe 960 Thread Exit SUCCESS User Time: 0.0000000,
> Kernel Time: 0.0156250
> 44010 08:27.9 iexplore.exe 960 RegOpenKey
> HKCU\Software\Classes\MIME\Database\Content
> Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read
> 44011 08:27.9 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content
> Type\application/x-java-jnlp-file SUCCESS Desired Access: Read
> 44012 08:27.9 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content
> Type\application/x-java-jnlp-file SUCCESS Query: Name
> 44013 08:27.9 iexplore.exe 960 RegOpenKey
> HKCU\Software\Classes\MIME\Database\Content
> Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Maximum
> Allowed
> 44014 08:27.9 iexplore.exe 960 RegQueryValue HKCR\MIME\Database\Content
> Type\application/x-java-jnlp-file\Image Filter CLSID NAME NOT FOUND
> Length: 144
> 44015 08:27.9 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content
> Type\application/x-java-jnlp-file SUCCESS 46361 08:28.0 iexplore.exe 960
> RegOpenKey HKCU\Software\Classes\MIME\Database\Content
> Type\application/x-java-jnlp-file NAME NOT FOUND Desired Access: Read
> 46362 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content
> Type\application/x-java-jnlp-file SUCCESS Desired Access: Read
> 46363 08:28.0 iexplore.exe 960 RegQueryKey HKCR\MIME\Database\Content
> Type\application/x-java-jnlp-file SUCCESS Query: Name
> 46364 08:28.0 iexplore.exe 960 RegOpenKey
> HKCU\Software\Classes\MIME\Database\Content
> Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read
> 46365 08:28.0 iexplore.exe 960 RegOpenKey HKCR\MIME\Database\Content
> Type\application/x-java-jnlp-file\Bits NAME NOT FOUND Desired Access: Read
> 46366 08:28.0 iexplore.exe 960 RegCloseKey HKCR\MIME\Database\Content
> Type\application/x-java-jnlp-file SUCCESS
> I hope that helped.
> --
> "We're all ants. I'm a glittery little ant." --Alanis Morissette
> /\___/\
> / /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
> | |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
> \ _ / Remove ANT from e-mail address: philpi@earthlink.netANT
> ( ) or ANTant@zimage.com
> Ant is currently not listening to any songs on his home computer.



Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

  #15 (permalink)  
Old 10-09-2007, 08:20 AM
Ant
Newsgroup Contributor
 
Posts: n/a
Re: MS' Java? (logs)

On 10/9/2007 7:55 AM PT, Donald Anadell typed:

>>> You might first make sure that "msjava.dll" is still located in the
>>> System32
>>> folder.

>>
>> I do have it: v5.0.3810.0. Is this correct?

>
> Yes, if you click Start||Run and type "wjview" (without the quote marks)
> into the Run box and click OK, it should return a dialog box indicating
> that you have Version 5.00.3810 installed on your machine. This is the
> latest and most secure build of the MSJVM.


It says 5.00.3810 so that is fine.


>>> If your installation of Windows XP Home||Pro predates SP1a then the MS
>>> Java Virtual Machine should be installed on your machine and that file
>>> should be located in the System32 folder.
>>>
>>> Then try reregistering that DLL file by clicking on Start||Run and typing
>>> the following into the Run box:
>>> regsvr32 Msjava.dll

>> That didn't work after I got a successful message.
>>
>>
>>> The MS Java Virtual Machine and the Sun Java Virtual Machine can co-exist
>>> quite nicely on the same machine, and you should be able to switch
>>> between them. I have both virtual machines installed on three Windows XP
>>> machines here and have no problems with any of them using either the
>>> MSJVM or Sun. As long as you have the latest secure version of the
>>> MSJVM(build 3810) installed, you shouldn't have any problems using that
>>>>> Virtual Machinen.


>> Yeah, that is what I am trying to do. Have both. Something is broken with
>> my Java. :( Is there a downloadable EXE file to reinstall it?

>
> While Microsoft does not offer the 3810 build of the MSJVM publicly any more
> but you should be able to retrieve a copy of the setup file at the following
> site:
> http://www.mvps.org/marksxp/WindowsXP/java.php


Do you happen to know if this is safe to install over an updated XP Pro.
SP2?


> You can try downloading and installing Build 3810 over top of your current
> installation of the MSJVM to see if that resolves your issue. If not, you
> may have to following the Uninstall procedure listed at that site to
> competely remove the MSJVM from your Machine first, and then reinstall it.


OK.


> If you do the Uninstall procedure for the MSJVM, you will have to download
> both files(Build 3805 and Build 3810) from that site. First downlaod and
> install build 3805 to reinstall the Virtual Machine, then download and
> install the Patch Build 3810 and install it. Build 3810 is only a Security
> Patch, so Build 3805 must be installed first.


OK. Actually, doesn't Windows Update detect the patches that need to
install?


>> Also, is disabling in control panel's Sun Java JRE v6.0 b3 options not run
>> in MSIE and VM enabled in IE6's options enough? Or did I miss other places?

>
> I've always used the small utility available here:
> http://www.jensign.com/JavaScience/S...JVM/index.html
> that allows you to switch between the MSJVM and the Sun JVM in IE on the
> fly. It will make the necessary Registry change to force IE to use on or
> the other of the JVMs, and indicate to you which one is currently being
> used.


Interesting. Thanks as usual. :)
--
"I am afraid that I am convinced that a community of human beings is a
far more useful thing than a community of ants, and that if the human
being is condemned and restricted to perform the same functions over and
over again, he will not even be a good ant, not to mention a good human
being." --Norbert Wiener
/\___/\
/ /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
| |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
\ _ / Remove ANT from e-mail address: philpi@earthlink.netANT
( ) or ANTant@zimage.com
Ant is currently not listening to any songs on his home computer.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote

Reply

Bookmarks

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
java Kizzme007 Internet Explorer 2 06-24-2007 01:40 PM
RE: HELP Java/java script errors/Flash since IE7 installed Ifyouhavetoask Internet Explorer 0 05-07-2007 06:40 AM
Microsoft Java? Is it available in Vista? (not sun java!) Jacob2000 Windows Vista 13 05-05-2007 12:55 PM
java JRS Microsoft Office 2 01-15-2007 11:55 AM
To have or not to have Java Walter R. Windows XP 3 01-04-2007 04:29 AM


New To Technology Questions? Do You Need Help with Your Computer or Device? Do You Need Help with this site?

All times are GMT -8. The time now is 01:34 PM.


2003 - 2009 All Rights Reserved. Technology Questions

Search Engine Friendly URLs by vBSEO 3.3.0