"Cannot find C:\Documents" on startup.
Solved/Closed9 responses
I tried every search in the registry for C:\documents and found nothing. Then msconfig to check startup programs and processes, nothing. Autoruns gave more detail but still nothing that remotely looked like the culprit until I knew what to look for..
BTW, Symantec Endpoint found the trojan which apparently put a file called "lsass.exe" in the dir " C:\documents and settuings\administrator\application data\** " and an associated registry entry to run the executable.
I deleted the file/registry entry via Autoruns and that solved the problem. Apparantly Endpoint had deleted everything else that the trojan did but this leftover dialog box at every boot was getting annoying.
You can download Autoruns here : https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns
It's a free program that when you run, you'll see the registry entry for lsass.exe pretty close to the top.
Good luck and I hope it works for you as well ! Let me know, Frank
**P.S. the "application" dir is hidden so you have to set your file options to show hidden files and directories. I also noticed that the date of lsass.exe was the same date that I got the trojan !
BTW, Symantec Endpoint found the trojan which apparently put a file called "lsass.exe" in the dir " C:\documents and settuings\administrator\application data\** " and an associated registry entry to run the executable.
I deleted the file/registry entry via Autoruns and that solved the problem. Apparantly Endpoint had deleted everything else that the trojan did but this leftover dialog box at every boot was getting annoying.
You can download Autoruns here : https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns
It's a free program that when you run, you'll see the registry entry for lsass.exe pretty close to the top.
Good luck and I hope it works for you as well ! Let me know, Frank
**P.S. the "application" dir is hidden so you have to set your file options to show hidden files and directories. I also noticed that the date of lsass.exe was the same date that I got the trojan !
I resolve this error
Here is instructions for resolving this problem step-by-step:
1. Open Regedit (Start -> Run -> type 'regedit')
2. Open dir HKEY_LOCAL_MACHINE
3. Open dir SOFTWARE
4. Open dir Microsoft
5. Open dir Windows NT
6. Open CurrentVersion
7. Open Winlogon
8. Find Shell
9. Double-click on it (or right click and Edit)
10. Edit second input from Explorer.exe C:\....Isass.exe to just Explorer.exe
11. So entry has to be only Explorer.exe, without C:\...
Here is instructions for resolving this problem step-by-step:
1. Open Regedit (Start -> Run -> type 'regedit')
2. Open dir HKEY_LOCAL_MACHINE
3. Open dir SOFTWARE
4. Open dir Microsoft
5. Open dir Windows NT
6. Open CurrentVersion
7. Open Winlogon
8. Find Shell
9. Double-click on it (or right click and Edit)
10. Edit second input from Explorer.exe C:\....Isass.exe to just Explorer.exe
11. So entry has to be only Explorer.exe, without C:\...
The Autoruns solution does work; it pinpointed a few areas where the lsass.exe file had created some paths to itself in my registry so I could delete them. I no longer have that annoying little box come up when the computer starts.
If you check task manager, the lsass.exe process should be under the user name "SYSTEM". If it is anywhere else, then it probably doesn't belong there.
https://www.neuber.com/taskmanager/process/lsass.exe.html
I'm not sure if this makes a difference, but you might want to check Data Execution Prevention if you have processes excluded under DEP. Right click My Computer in the Start menu, go to Properties, Advanced tab, click 'Settings' under Performance - Data Execution Prevention [if you have "Turn on DEP for all programs and services except those I select:," then click on lsass.exe (if it's there), and hit the Remove button.]
If you check task manager, the lsass.exe process should be under the user name "SYSTEM". If it is anywhere else, then it probably doesn't belong there.
https://www.neuber.com/taskmanager/process/lsass.exe.html
I'm not sure if this makes a difference, but you might want to check Data Execution Prevention if you have processes excluded under DEP. Right click My Computer in the Start menu, go to Properties, Advanced tab, click 'Settings' under Performance - Data Execution Prevention [if you have "Turn on DEP for all programs and services except those I select:," then click on lsass.exe (if it's there), and hit the Remove button.]
that worked perfectly!
I did however, find that I had to delete 3 startup entries before the problem was fixed.
all 3 has "file not found" in their description so I deleted those 3, when I restarted my PC the C:\Documents was still trying to be found so, I ran Autoruns again and it then found a C:\Documents file in startup, I deleted that restarted, and problem solved :)
thanks alot for the nice fix Frank!
Much appreciated.
I did however, find that I had to delete 3 startup entries before the problem was fixed.
all 3 has "file not found" in their description so I deleted those 3, when I restarted my PC the C:\Documents was still trying to be found so, I ran Autoruns again and it then found a C:\Documents file in startup, I deleted that restarted, and problem solved :)
thanks alot for the nice fix Frank!
Much appreciated.
Didn't find the answer you are looking for?
Ask a question
I don't know if you found a solution to this but I had the same problem as a result of a trojan.
If you need an answer, let me know and I'll repond w/the details
If you need an answer, let me know and I'll repond w/the details
yep, I am still I need of a solution for this, much appreciated if you can respond with a nice little fix.
Regards!
Regards!
ok run auto runs delete isaac.exe in everthing close.
fix reg errors in jv 16 power tools. run atf cleaner.
use cleanup . whbam everything is fine.
fix reg errors in jv 16 power tools. run atf cleaner.
use cleanup . whbam everything is fine.
Are you tierd to get this message:windows cannot find C:documents every time you start you Computer than trie this method.
Do this check that you didnt change the name of you Document folder if you have than change it back to the original like this: My Documents. after that run Ad-Aware and scan you Computer and delite the files that Ad-Aware vill find. Now Rebot you Computer and you are don. I hope this will help
Do this check that you didnt change the name of you Document folder if you have than change it back to the original like this: My Documents. after that run Ad-Aware and scan you Computer and delite the files that Ad-Aware vill find. Now Rebot you Computer and you are don. I hope this will help
DOCUMENT FILE was on desktop at startup .
tried many solutions to remove it .
Then I found a file HyItPvYfTa.exe
This file reffered to document file I didnt know why
so I took a chance and remove it.
went to regedit in run box
HKey-local-machine\software\Microsoft\Windows\Current\run
removed hyitpvfta.exe
PROBLEM SOLVED
tried many solutions to remove it .
Then I found a file HyItPvYfTa.exe
This file reffered to document file I didnt know why
so I took a chance and remove it.
went to regedit in run box
HKey-local-machine\software\Microsoft\Windows\Current\run
removed hyitpvfta.exe
PROBLEM SOLVED
Jan 24, 2010 at 07:56 AM
It took a wile to find the file
Thanks
Feb 15, 2010 at 01:53 AM
Apr 23, 2010 at 07:25 PM
then the autoruns took care of the rest THANX
Apr 30, 2010 at 05:23 PM
May 26, 2010 at 07:24 PM