You'll find that there are already some preexisting symptoms for it.. see attached. You could also build a new symptom for the specific instance of c:\.. see embedded screenshot for example.
If you find this or any other answer useful please mark the answer as correct or helpful.