Hello all, I am a newbie here, but reasonably knowledgeable, I think/hope. If you need help though please post in the correct forum and someone far more useful than me can help you out I am sure.
Having browsed the forums I thought I should post my own experience dealing with similar problems to some of those reported. A big thanks to all the posters of topics that pointed me in the right direction.
Search page result links go to a random webpage, affected Google and Yahoo. Manual entry of the same address in the address bar worked fine.
Unable to get to www.avg.com or any other AV website, other websites were OK.
Windows update & McAfee updates do not work.
Unable to install from hard disc any AV or AntiMalware products I could find (Spybot, Spysweeper, anything), this was after downloading to another PC and copying the install program over.
Reverted to manual procedures and removed the following:
WFX5.exe and 249832153.exe both in the ‘Run’ section of the registry. Deleted using regedt32.
TWEXT.exe had attached itself to the ‘userinit’ registry key. This one was more stubborn, it will not delete from the registry. It looks like it has but if you exit and return to the same registry key it has returned. Eventually booted XP from CD into the Recovery Console and deleted the .exe file directly.
After all this I still found that I could not get to www.avg.com or any other AV or anti-malware sites they were all resolving to 127.0.0.1 other websites were fine. I figured that it was something added elsewhere in the registry but couldn’t find anything that would identify or remove it until I found a link to http://www.simplysup.com/tremover/download.html
I downloaded Trojan Remover to another PC copied it over, installed it (this would actually install) and it found and removed TDSSMXFE.sys and its associated entries from the registry. I can now get to www.avg.com and am running every anti-malware program I can find to try and identify anything else I do not know I have got. The above process maybe not the most elegant technical solution to the problem, for which I apologise to the experts here, but it appears to have solved them.
I hope my experience is of some help to anyone else with similar problems. At least you might be reassured that there is a solution to every problem it just takes time and help.