2 days ago Ad Aware found I had a Win.32 Trojan Downloader on my PC, AVG anti virus did not show it. I decided to see if I could find the source of this Trojan, and why it didn't show on AVG.
Yes, you guessed it, the trojan was in a file in C:\DOCUME~1.
Eventually I gave up looking for the Trojan, and deleted it with Ad Aware. I did all the usual, cleaned out my machine, then checked to ensure my machine was clear.
I did find the source of the Trojan, my grandson was swapping photos with a friend, and the Trojan was sitting in a .zip file on my desktop.
Posted by: Pete at November 11, 2006 1:02 AM
How do I find Program.exe. Many of my emails with graphics say they cannot open because they cannot find Program.exe. I can find it either. Where is it? Thanks
Posted by: Catherine at November 11, 2006 6:01 PM
its documents and settings on local disk.
Posted by: dsa at March 20, 2007 3:43 PM
The reason you can't delete C:\Docume~1 is because it's a system folder. It's the folder that user accounts are stored: C:\Documents and Settings\
Windows XP sometimes addresses it as Docume~1 to avoid the spaces in the file name.
Posted by: Nicos Kasenides at July 16, 2007 12:15 AM
I have a 'C:\DOCUME~1 issue myself. I swear its nowhere to be found.
I downloaded a document from my email--proposal 25
and forgot this when I saved and closed word.
So I opened the desktop version and realized it did not have the modified changes from 1/21, so in File box is saw proposal 25 saved with the path C:\DOCUME~ ...proposal 25. I found this blog, read the article and have searched my own local disk and done computer file searches, but it only finds my original desktop version. I modified the dates just for 1/21 and no document shows up. I didn't not save the desktop version when I opened it either, in case I could recover yesterday's file. Now I am desperate, any advice?
Posted by: Mark at January 22, 2008 9:22 AM
alright so i had this keylogger program on my computer and it says it cannont be found. well i uninstalled it and everytime my cp starts up it say mpk.exe cannont run at this time and it gives me send error report and ect. i clicked on send error report and it says it cant because all of the sending information is 000000. so i clicked on technical support and it gave me the name of this file:
C:\DOCUME~1\Heff\LOCALS~1\Temp\44be_appcompat.txt
the 44be_ is nowhere in the folder. how can i get this messege to stop when i start up? Could this file be showing the messege?
Posted by: Jeremy at February 27, 2008 8:11 PM
This is a very good article, very well written and easy to understand. Thanks
Posted by: Andrew at July 25, 2008 1:17 PM
Thanks a bunch!
Very well written and understood everything
Thanks again leo!
Posted by: Adrian at September 19, 2008 3:49 PM
C:\DOCUME~1\MyName\LOCALS~1\Temp and C:\PROGRA~1\
i do not agree that they are the same as C:\Documents and Settings\MyName\Local Settings\Temp
and c:\programs\ in the registry they are listed both ways and they are not related
Posted by: k.basinger at October 1, 2008 9:36 AM
I've had an error message that read c|docume~1/admin~1\wer2bee.dir00\mini030209-01.dmp
and then it's dump me out and reboot the machine time. Any ideas?
Comments
Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.
2 days ago Ad Aware found I had a Win.32 Trojan Downloader on my PC, AVG anti virus did not show it. I decided to see if I could find the source of this Trojan, and why it didn't show on AVG.
Posted by: Pete at November 11, 2006 1:02 AMYes, you guessed it, the trojan was in a file in C:\DOCUME~1.
Eventually I gave up looking for the Trojan, and deleted it with Ad Aware. I did all the usual, cleaned out my machine, then checked to ensure my machine was clear.
I did find the source of the Trojan, my grandson was swapping photos with a friend, and the Trojan was sitting in a .zip file on my desktop.
How do I find Program.exe. Many of my emails with graphics say they cannot open because they cannot find Program.exe. I can find it either. Where is it? Thanks
Posted by: Catherine at November 11, 2006 6:01 PMits documents and settings on local disk.
Posted by: dsa at March 20, 2007 3:43 PMThe reason you can't delete C:\Docume~1 is because it's a system folder. It's the folder that user accounts are stored: C:\Documents and Settings\
Posted by: Nicos Kasenides at July 16, 2007 12:15 AMWindows XP sometimes addresses it as Docume~1 to avoid the spaces in the file name.
I have a 'C:\DOCUME~1 issue myself. I swear its nowhere to be found.
I downloaded a document from my email--proposal 25
and forgot this when I saved and closed word.
So I opened the desktop version and realized it did not have the modified changes from 1/21, so in File box is saw proposal 25 saved with the path C:\DOCUME~ ...proposal 25. I found this blog, read the article and have searched my own local disk and done computer file searches, but it only finds my original desktop version. I modified the dates just for 1/21 and no document shows up. I didn't not save the desktop version when I opened it either, in case I could recover yesterday's file. Now I am desperate, any advice?
Posted by: Mark at January 22, 2008 9:22 AMalright so i had this keylogger program on my computer and it says it cannont be found. well i uninstalled it and everytime my cp starts up it say mpk.exe cannont run at this time and it gives me send error report and ect. i clicked on send error report and it says it cant because all of the sending information is 000000. so i clicked on technical support and it gave me the name of this file:
C:\DOCUME~1\Heff\LOCALS~1\Temp\44be_appcompat.txt
the 44be_ is nowhere in the folder. how can i get this messege to stop when i start up? Could this file be showing the messege?
Posted by: Jeremy at February 27, 2008 8:11 PMThis is a very good article, very well written and easy to understand. Thanks
Posted by: Andrew at July 25, 2008 1:17 PMThanks a bunch!
Very well written and understood everything
Thanks again leo!
Posted by: Adrian at September 19, 2008 3:49 PMC:\DOCUME~1\MyName\LOCALS~1\Temp and C:\PROGRA~1\
Posted by: k.basinger at October 1, 2008 9:36 AMi do not agree that they are the same as C:\Documents and Settings\MyName\Local Settings\Temp
and c:\programs\ in the registry they are listed both ways and they are not related
I've had an error message that read c|docume~1/admin~1\wer2bee.dir00\mini030209-01.dmp
Posted by: Jose at March 3, 2009 4:13 AMand then it's dump me out and reboot the machine time. Any ideas?
To post a comment on "Where is 'C:\DOCUME~1'? I can't find it on my hard disk.", please return to that article's main page.