Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Outlook email url links are redirected to c:\...\...\My Documents

Posted on 2006-11-08
11
Medium Priority
?
195 Views
Last Modified: 2010-04-08
Using Outlook 2002 on a Win XPpro sp2 system.
Recently had a program "Virusbuster" which is a fake trojan  program scaring you into buying their antivirus program by popping up multiple warning messages

 I got rid of that (and am not sure this is connected but it certainly seems so) but now every url link in an outlook email sends my to c:..\..\My Documents directory.

The same links are ok when I copy/paste them into either Firefox 2 or IE 7


Is there a registry entry that's fouled
Fred
0
Comment
Question by:fh1028
  • 6
  • 5
11 Comments
 
LVL 97

Expert Comment

by:war1
ID: 17902589
Greetings, fh1028 !

You may need to register some dll files
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q281679&sd=tech
OR
Run this script
http://windowsxp.mvps.org/IEFIX.htm

Best wishes!
0
 

Author Comment

by:fh1028
ID: 17902682
OBTW - I've tried uninstalling and reinstalling Outlook 2002
It's 2002 (10.6545.6735)sp3
0
 
LVL 97

Expert Comment

by:war1
ID: 17902730
Register the dll files that I posted above or run the script, which will register the files automatically.

If no joy, you may have remains of the trojan.  Run SmitFraudFix
http://www.geekstogo.com/forum/index.php?showtopic=109268
OR
http://siri.geekstogo.com/SmitfraudFix.zip 

If no joy, run Ewido
http://www.ewido.net/en/

If still no joy, download HijackThis

http://www.majorgeeks.com/download3155.html

Run the program and you will find many entries. Most are OK. Post the log at http://www.hijackthis.de/ and click Analyse, Save.  Post a link to the saved list here.
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:fh1028
ID: 17902813

http://windowsxp.mvps.org/IEFIX.htm  returns something like - Not for use in IE7

Did
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q281679&sd=tech
All registered OK except for Mshtml.dll "couldn't find entry point"

Note it is NOT IE of Firefox that redirects the url to \....My Documents, it ONLY Outlook

I tried SmitfraudFix.zip   already which got rid of (most ) of virusBuster but i will try again and your other suggestions
Thanks,
Fred




0
 

Author Comment

by:fh1028
ID: 17903548

Here's the link to the Hijackthis analysis.

I'm going to try the EWIDO early in the morning

http://www.hijackthis.de/logfiles/e84d3e1274d05ff6102d416dca505ebd.html
Fred
0
 
LVL 97

Expert Comment

by:war1
ID: 17903906
1. I assume you install GhostSurf and Flash Saver.

2. Run LSPFix to repair your winsock
http://www.cexx.org/lspfix.htm

3. Put a check mark by the following item in HijackThis log and click "Fix Checked"

O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)

4. If you did not install FreshDownload, uninstall it from Add/Remove Programs and also have HJT remove it.

O9 - Extra button: FreshDownload - {E96C3B97-A120-4C21-A271-31D944BA7FB5} - C:\Program Files\FreshDevices\FreshDownload\fd.exe
0
 

Author Comment

by:fh1028
ID: 17905400
1. I assume you install GhostSurf and Flash Saver. = YES
2. Run LSPFix = Reported "No Problems Found"
3. O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing) = checked and "fixed"
4. If you did not install FreshDownload... = Yes I installed this program

I now going to run EWIDO

Fred
0
 
LVL 97

Expert Comment

by:war1
ID: 17906675
Fred,

Let us know how Ewido do to fix the problem.

If no joy, do the link in the browser redirect to My Documents and Settings folder?  Which file or subfolder is it going to?  You may need to reinstall Outlook.
0
 

Author Comment

by:fh1028
ID: 17906801
Success, A combination of Ewido and  HijackThis seems to have solved the problem!
Thanks!!!!!!!!!!!!
How do I make sure you get your points?

Fred
0
 
LVL 97

Accepted Solution

by:
war1 earned 2000 total points
ID: 17906928
Fred, good news!  You can accept one of my comments above.  The Accept button is to the right of the comment.
0
 

Author Comment

by:fh1028
ID: 17907044
OK, Accepted,
Congrats!!!!!!
Fred
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
As a Microsoft Exchange user, you must have known the importance of an Offline storage table (OST) file. It is nothing new for an Outlook user to be dependent on a .ost file during a server break down or a problematic Internet connection. In such a…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses

572 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question