1)What does the event log says ?

2)And have you checked the Application Device Control policy ?

Hi,

Do not ignore possibility about virus infection.

It is recommended to install all the Symantec features AV / PTP/ NTP with latest definitions.Always make sure that your computers are receiving definitions regularly.

You can upgrade your product to latest built i.e SEP 12.1 RU1

You windows machines should have all the latest windows updates /Patches.

Apply application and device control policies, block USB etc.

Disable Autorun.

Please follow best practice guide to handle virus issue.

http://www.symantec.com/business/support/index?pag...

If SEP clients updated, run Sep support tool on affected system & share those logs with us.

Here is the location of the Symantec Endpoint Protection Support Tool:

I attached a S.S.T. of a PC with this problem, these PC does not have SEP installed, but problems appears even when SEP is installed...

This is the virus problem. Please install the Symantec AV with latest virus definition and run full scanning. Your problem will  be resolved after the complete scanning.

If you have not a Symantec AV.

Download the Nortan Security Scan tool on following link

ftp://ftp.symantec.com/misc/tools/nss/

and click download the NortanSecurityScan.exe.

Extract the NortanSecurityScan.exe.

Then Go to http://www.symantec.com/security_response/definitions/download/detail.jsp?gid=savce

Download the first FTP file under the Client installations on Windows Platforms (32-bit) .

Extract the downloaded FTP files then open the extrected folder.

Then Extrect the VirusScan folder and rename the extrected VirusScan folder to Virusdef.

Copy the Virusdef folder and open the NortanSecurityScan folder

Then paste the Virusdef folder inside the SymSupport folder.

Copy the SymSupport folder and paste on infected machine.

If your machine is running in safe mode.

Then open your machine on safe mode and run SymSupport (nss.exe) tool and run full system scanning.

If your machine is not running in Safe mode.

Then open your machine on Normal Mode and run SymSupport (nss.exe) tool and run full system scanning.

Your problem will be reslove

Baljeet Singh

Pls let us OS version and is it updated with MS patches or not

Hi,

SEP support tool logs are not showing any error, however scan your system with Power erase tool.

You will find it in SEP support tool only, select only power eraser and scan the system.

I believe now system is clean, you should check other aspects of Operating System.

It it's specifc to one system it might be OS corruption.

This is on a network drive?

Open your C: and your D: and delete autorun.inf on both drives.

**Keep a backup first ** or rename the file.

Shoudl fix your problem after that.

Hi,

You can upgrade the new version of sep12.1 in that you have the by default policy is available autorun.ifn is blocked.

Hi,

  Go to your local system "folder and serch option"

Go to view

Click on Show hidden file and Folders.

Uncheck the "Hidden Extension for known file types" & "Hidden Protected operating system files".

then Ok.

Go to in that drive and find the autorun.inf file, if avail then delete.

Hope it help you.

Hi Kindly run this and check are you able to open or not Drive.

ATTRIB [+R | -R] [+A | -A ] [+S | -S] [+H | -H] [[drive:] [path] filename] [/S [/D]]

Hi n3m3sls,

Any update on same ?

Same error occured in my system in past so i am trying attrib DOS command.

This error occured in XP machine.