It's recorded in the event log and under HKEY_CURRENT_USER\Network. There will be a list of drive letters for manually created shares including the RemotePath and UserName.
That might help, too.
_________________________
There are two types of vessels, submarines and targets.
