Discovered: August 11, 1999
Updated: February 13, 2007 11:45:41 AM
Type: Virus
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
Run LiveUpdate to make sure that you have the most recent virus definitions.
- Start Norton AntiVirus (NAV), and then run a full system scan. Be sure that NAV is configured to scan all files.
- If any files are detected as infected by W32.Bolzano, choose Repair.
If the system has been infected, the system files ntoskrnl.exe and ntldr.exe have been patched. Symantec has created a tool which can be used to restore these files. This tool was created for a more prolific virus, W32.Funlove.4099, which applies the same patching techniques to ntoskrnl.exe and ntldr.exe. You can find this tool here:
DOS FunLove.4099 Fix Tool.
Writeup By: Peter Szor