W32.Bolzano - Removal

Risk Level 1: Very Low

Printer Friendly Page

Discovered: August 11, 1999
Updated: February 13, 2007 11:45:41 AM
Type: Virus
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP


Run LiveUpdate to make sure that you have the most recent virus definitions.
  1. Start Norton AntiVirus (NAV), and then run a full system scan. Be sure that NAV is configured to scan all files.
  2. If any files are detected as infected by W32.Bolzano, choose Repair.

If the system has been infected, the system files ntoskrnl.exe and ntldr.exe have been patched. Symantec has created a tool which can be used to restore these files. This tool was created for a more prolific virus, W32.Funlove.4099, which applies the same patching techniques to ntoskrnl.exe and ntldr.exe. You can find this tool here: DOS FunLove.4099 Fix Tool.

Writeup By: Peter Szor
Search by name
Example: W32.Beagle.AG@mm
Windows 7
Windows Vista Security