Endpoint Protection

Hi - we have symantec end point detection, all up to date, and running smoothly, and it's reporting no virii on any of our PC's - yet everytime we plug a USB into one of them, new files and folders, marked as hidden and system, are created. they are not any windows files i recognize, and the behaviour is very similiar to some previous virii out there. who can i send a sample too to get this checked out?

Hi,

       You can submit the suspected files to the following URL

https://submit.symantec.com/websubmit/gold.cgi

However it would ask you for a Contact ID which can be obtained only by creating a new case with Symantec SEP support. In case you have an old or new case number with you please let us know so that we can help you get the Contact ID

In the meanwhile in  this scenario we would suggest you to

Disable Auto play option
Format the USB drives

After this is done perform a Full scan on the USB drives

is there already a rapid release for this one team?
Thanks...

Autoplay is disabled on the workstations - formated USB and unplugged - plugged into another PC (running linux) and checked - files and dirs were there again. scanned with symantec - came up as clean. installed AVG - was detected as trojan horse crypt.FAU and removed.