At this point, regardless of whether PerfectDisk is installed or not, your master boot record has been changed. I suggested getting a copy of it and submit it to Symantec's Response team for further analysis.
Below is the automated response. Hopefully a human analysis will be performed and result in a fix.
We have analyzed your submission.The following is a report of our findings for each file you have submitted:
filename:C:\Users\Tom xxx\Desktop\MyMBR.zip
machine: Machine
result: See the developer notes
filename: MyMBR.bin
machine: Machine
result: See the developer notes
Customer notes:
On Vista SP1 Business unning NIS 2009 with aggressive heuristics and Early Load selected.On each system reboot NIS 2009 detects Bloodhound.boot.I believe this is a false positive because on rescan nothing is found.This happens on every system reboot.
Developer notes:
C:\Users\Tom xxx\Desktop\MyMBR.zip is a container file of typeZIP MyMBR.bin Our automation was unable to identify any malicious content in this submission.
The file will be stored for further human analysisThis file is contained byC:\Users\Tom xxx\Desktop\MyMBR.zip
Yeah, that's the setup we used. Apologies for this, but can I ask you to fill out the online form here - https://submit.symantec.com/false_positive/index.html with details of your issue. In the URL field just list the tracking number of your file, and in the Additional information field list this forum URL. That way we can start tracking your issue a bit easier.
I think this is going to be one of those tricky issues that requires your (almost) exact setup in order to reproduce.
I wondering if the Bloodhound. Boot detection is not the result of the following:
Sometime back, on my Vista SP1 system in msconfig>Boot tab, I changed the timeout seconds from 30 seconds to 5 seconds. I then made all settings permanent.
I’m wondering if NIS heuristics is detecting the change as a malicious attempt.Just a thought…inasmuch as you have not been able to reproduce the problem.
This morning I completely rebuilt my hard drive, reformatted, and upgraded to Vista SP1 Business 64-bit (from 32-bit). I installed NIS 2009 right after installing Vista. No other third party programs installed.
AND I still get the Bloodhound.Boot alert on system reboot with aggressive heuristics and early load.
Well that’s probably the problem. Hannah awhile back had a problem till I told her to write zero’s to the drive and after that it was fixed. The virus is most likely in your Master Boot Records. You need to delete all partitions and write zero’s to the drive. The manufacture of your drive should have downloadable software.
Thanks, I'll try it in a day or so....once I get my Casper V5.0 backup to my backup drive installed...just in case.
I'm still installing stuff because of the 64-bit rebuild on the C drive and do not yet want to overwrite my 32-bit system on the backup drive. Hopefully FIXMBR will resolve...once and for all.