Solved

Outlook email url links are redirected to c:\...\...\My Documents

Posted on 2006-11-08
11
190 Views
Last Modified: 2010-04-08
Using Outlook 2002 on a Win XPpro sp2 system.
Recently had a program "Virusbuster" which is a fake trojan  program scaring you into buying their antivirus program by popping up multiple warning messages

 I got rid of that (and am not sure this is connected but it certainly seems so) but now every url link in an outlook email sends my to c:..\..\My Documents directory.

The same links are ok when I copy/paste them into either Firefox 2 or IE 7


Is there a registry entry that's fouled
Fred
0
Comment
Question by:fh1028
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 5
11 Comments
 
LVL 97

Expert Comment

by:war1
ID: 17902589
Greetings, fh1028 !

You may need to register some dll files
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q281679&sd=tech
OR
Run this script
http://windowsxp.mvps.org/IEFIX.htm

Best wishes!
0
 

Author Comment

by:fh1028
ID: 17902682
OBTW - I've tried uninstalling and reinstalling Outlook 2002
It's 2002 (10.6545.6735)sp3
0
 
LVL 97

Expert Comment

by:war1
ID: 17902730
Register the dll files that I posted above or run the script, which will register the files automatically.

If no joy, you may have remains of the trojan.  Run SmitFraudFix
http://www.geekstogo.com/forum/index.php?showtopic=109268
OR
http://siri.geekstogo.com/SmitfraudFix.zip 

If no joy, run Ewido
http://www.ewido.net/en/

If still no joy, download HijackThis

http://www.majorgeeks.com/download3155.html

Run the program and you will find many entries. Most are OK. Post the log at http://www.hijackthis.de/ and click Analyse, Save.  Post a link to the saved list here.
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 

Author Comment

by:fh1028
ID: 17902813

http://windowsxp.mvps.org/IEFIX.htm  returns something like - Not for use in IE7

Did
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q281679&sd=tech
All registered OK except for Mshtml.dll "couldn't find entry point"

Note it is NOT IE of Firefox that redirects the url to \....My Documents, it ONLY Outlook

I tried SmitfraudFix.zip   already which got rid of (most ) of virusBuster but i will try again and your other suggestions
Thanks,
Fred




0
 

Author Comment

by:fh1028
ID: 17903548

Here's the link to the Hijackthis analysis.

I'm going to try the EWIDO early in the morning

http://www.hijackthis.de/logfiles/e84d3e1274d05ff6102d416dca505ebd.html
Fred
0
 
LVL 97

Expert Comment

by:war1
ID: 17903906
1. I assume you install GhostSurf and Flash Saver.

2. Run LSPFix to repair your winsock
http://www.cexx.org/lspfix.htm

3. Put a check mark by the following item in HijackThis log and click "Fix Checked"

O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)

4. If you did not install FreshDownload, uninstall it from Add/Remove Programs and also have HJT remove it.

O9 - Extra button: FreshDownload - {E96C3B97-A120-4C21-A271-31D944BA7FB5} - C:\Program Files\FreshDevices\FreshDownload\fd.exe
0
 

Author Comment

by:fh1028
ID: 17905400
1. I assume you install GhostSurf and Flash Saver. = YES
2. Run LSPFix = Reported "No Problems Found"
3. O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing) = checked and "fixed"
4. If you did not install FreshDownload... = Yes I installed this program

I now going to run EWIDO

Fred
0
 
LVL 97

Expert Comment

by:war1
ID: 17906675
Fred,

Let us know how Ewido do to fix the problem.

If no joy, do the link in the browser redirect to My Documents and Settings folder?  Which file or subfolder is it going to?  You may need to reinstall Outlook.
0
 

Author Comment

by:fh1028
ID: 17906801
Success, A combination of Ewido and  HijackThis seems to have solved the problem!
Thanks!!!!!!!!!!!!
How do I make sure you get your points?

Fred
0
 
LVL 97

Accepted Solution

by:
war1 earned 500 total points
ID: 17906928
Fred, good news!  You can accept one of my comments above.  The Accept button is to the right of the comment.
0
 

Author Comment

by:fh1028
ID: 17907044
OK, Accepted,
Congrats!!!!!!
Fred
0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What does UTC stand for?  “Coordinated Universal Time” – Think of this as the true time on Planet Earth that never changes with the exception of minor leap seconds here and there to account for the changes in the planet's rotation.   What does th…
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
Get people started with the process of using Access VBA to control Outlook using automation, Microsoft Access can control other applications. An example is the ability to programmatically talk to Microsoft Outlook. Using automation, an Access applic…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question