Okay. I had exactly the same virus yesterday. The steps I used to clean it were as follows on an XP running laptop:-
1. Open up the host file (C:\Windows\system32\drivers\etc\hosts) and remove the entries that redirect you to 212.58.240.33. Save the file and you should be able to access the online virus checkers (as your one wont be working if you have one!).
Below are the entries that you should remove from the file. Open and close the hosts file using notepad if you didnt know already.
212.58.240.33 www.symantec.com
212.58.240.33 www.sophos.com
212.58.240.33 www.mcafee.com
212.58.240.33 www.viruslist.com
212.58.240.33 www.f-secure.com
212.58.240.33 www.avp.com
212.58.240.33 www.kaspersky.com
212.58.240.33 www.networkassociates.com
212.58.240.33 www.ca.com
212.58.240.33 www.my-etrust.com
212.58.240.33 www.nai.com
212.58.240.33 www.trendmicro.com
212.58.240.33 www.grisoft.com
212.58.240.33 securityresponse.symantec.com
212.58.240.33 symantec.com
212.58.240.33 sophos.com
212.58.240.33 mcafee.com
212.58.240.33 liveupdate.symantecliveupdate.com
212.58.240.33 viruslist.com
212.58.240.33 f-secure.com
212.58.240.33 kaspersky.com
212.58.240.33 kaspersky-labs.com
212.58.240.33 avp.com
212.58.240.33 networkassociates.com
212.58.240.33 ca.com
212.58.240.33 mast.mcafee.com
212.58.240.33 my-etrust.com
212.58.240.33 download.mcafee.com
212.58.240.33 dispatch.mcafee.com
212.58.240.33 secure.nai.com
212.58.240.33 nai.com
212.58.240.33 update.symantec.com
212.58.240.33 updates.symantec.com
212.58.240.33 us.mcafee.com
212.58.240.33 liveupdate.symantec.com
212.58.240.33 customer.symantec.com
212.58.240.33 rads.mcafee.com
212.58.240.33 trendmicro.com
212.58.240.33 grisoft.com
212.58.240.33 sandbox.norman.no
212.58.240.33 www.pandasoftware.com
212.58.240.33 uk.trendmicro-europe.com
2. Next step was to get someone to send me an antivirus software from www.pandasoftware.com to remove the virus. I had no other alternative as symantec/trend micro and mac afee would not start up on my machine for some reason due to the virus closing windows abruptly.
I got someone to generously send me the free software at:-
http://www.pandasoftware.com/register.asp?CodigoP...ountry=US&sec=down
You will have to register first please note. Once installed it cleaned the virus of my machine.
3. I then ran AD-Aware SE, then rebooted.
All okay.
http://sarc.com/avcenter/venc/data/w32.serflog.c.html also has more techinical info as thats the virus, you should also remove the registry settings manually which are found on here. I found, in general, that following the symantec instructions to be informative, though not technically correct as it didnt fully work for me - hence the playing around was needed.
[i accept no liability, this is just what i did to correct the issue on my laptop and am just documenting it].
