Solved

Outlook email url links are redirected to c:\...\...\My Documents

Posted on 2006-11-08
11
183 Views
Last Modified: 2010-04-08
Using Outlook 2002 on a Win XPpro sp2 system.
Recently had a program "Virusbuster" which is a fake trojan  program scaring you into buying their antivirus program by popping up multiple warning messages

 I got rid of that (and am not sure this is connected but it certainly seems so) but now every url link in an outlook email sends my to c:..\..\My Documents directory.

The same links are ok when I copy/paste them into either Firefox 2 or IE 7


Is there a registry entry that's fouled
Fred
0
Comment
Question by:fh1028
  • 6
  • 5
11 Comments
 
LVL 97

Expert Comment

by:war1
ID: 17902589
Greetings, fh1028 !

You may need to register some dll files
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q281679&sd=tech
OR
Run this script
http://windowsxp.mvps.org/IEFIX.htm

Best wishes!
0
 

Author Comment

by:fh1028
ID: 17902682
OBTW - I've tried uninstalling and reinstalling Outlook 2002
It's 2002 (10.6545.6735)sp3
0
 
LVL 97

Expert Comment

by:war1
ID: 17902730
Register the dll files that I posted above or run the script, which will register the files automatically.

If no joy, you may have remains of the trojan.  Run SmitFraudFix
http://www.geekstogo.com/forum/index.php?showtopic=109268
OR
http://siri.geekstogo.com/SmitfraudFix.zip  

If no joy, run Ewido
http://www.ewido.net/en/

If still no joy, download HijackThis

http://www.majorgeeks.com/download3155.html

Run the program and you will find many entries. Most are OK. Post the log at http://www.hijackthis.de/ and click Analyse, Save.  Post a link to the saved list here.
0
 

Author Comment

by:fh1028
ID: 17902813

http://windowsxp.mvps.org/IEFIX.htm  returns something like - Not for use in IE7

Did
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q281679&sd=tech
All registered OK except for Mshtml.dll "couldn't find entry point"

Note it is NOT IE of Firefox that redirects the url to \....My Documents, it ONLY Outlook

I tried SmitfraudFix.zip   already which got rid of (most ) of virusBuster but i will try again and your other suggestions
Thanks,
Fred




0
 

Author Comment

by:fh1028
ID: 17903548

Here's the link to the Hijackthis analysis.

I'm going to try the EWIDO early in the morning

http://www.hijackthis.de/logfiles/e84d3e1274d05ff6102d416dca505ebd.html
Fred
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 97

Expert Comment

by:war1
ID: 17903906
1. I assume you install GhostSurf and Flash Saver.

2. Run LSPFix to repair your winsock
http://www.cexx.org/lspfix.htm

3. Put a check mark by the following item in HijackThis log and click "Fix Checked"

O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)

4. If you did not install FreshDownload, uninstall it from Add/Remove Programs and also have HJT remove it.

O9 - Extra button: FreshDownload - {E96C3B97-A120-4C21-A271-31D944BA7FB5} - C:\Program Files\FreshDevices\FreshDownload\fd.exe
0
 

Author Comment

by:fh1028
ID: 17905400
1. I assume you install GhostSurf and Flash Saver. = YES
2. Run LSPFix = Reported "No Problems Found"
3. O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing) = checked and "fixed"
4. If you did not install FreshDownload... = Yes I installed this program

I now going to run EWIDO

Fred
0
 
LVL 97

Expert Comment

by:war1
ID: 17906675
Fred,

Let us know how Ewido do to fix the problem.

If no joy, do the link in the browser redirect to My Documents and Settings folder?  Which file or subfolder is it going to?  You may need to reinstall Outlook.
0
 

Author Comment

by:fh1028
ID: 17906801
Success, A combination of Ewido and  HijackThis seems to have solved the problem!
Thanks!!!!!!!!!!!!
How do I make sure you get your points?

Fred
0
 
LVL 97

Accepted Solution

by:
war1 earned 500 total points
ID: 17906928
Fred, good news!  You can accept one of my comments above.  The Accept button is to the right of the comment.
0
 

Author Comment

by:fh1028
ID: 17907044
OK, Accepted,
Congrats!!!!!!
Fred
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now