Endpoint Protection

I have two Microsoft Surface tablet users with Windows 8.1 on it that keep getting a message that Symantec block/found an autorun.inf in one of our drives.I look at the logs and it says it is located in fs01\cad. So I go to that folder/drive and there is no autrun.inf anywhere to be found. Not hidden, and it just doesn't seem to exsist. I have searched inside Windows explorer and on the server itself and it never finds this .inf. 

Another strange thing about the error is when I build a new Windows 7 PC for someone they get it once the first time they log in. After that first initail login it never comes back on the PCs. 

I have gone to one of their machines and turn off notifications from symantec, but I want to fix the solution not just cover it up.

Has anyone seen this before or can anyone help me figure it out.

Thank you,

This is from the Application and device control policy. It has a default rule enabled to block autorun.inf file. What versio of SEP and is it unmanaged?

Yeah I know it is a built in rule and we use it and love it, but every fifteen minutes if you open windows explorer on the windows 8 tablets it says it blocked it. No other machines in the company do it. The worst part is when I try to look for the file to just get rif of it I can't find it anywhere. It doesn't seem to exsist. That is the issue. I am wondering if there is a better solution than just muting notifications from symantc.

In addition to showing "hidden files" is the option to "Hide protected operating system files" unchecked as well?

That was the ticket!!!!! I have never heard of that option before so thank you very much. Sadly I have been at this problem for weeks now. Such an easy fix is so bitter sweet.

Cheers!

Glad it's working :)