I bought the NIS 2010 3 users during the recent PC fair.

Previously have been a happy user of Kaspersky for past 1 year.

Now, after changing to Norton, I am not very satisfied.

1 day after installing NIS 2010, I noticed hidden folders named '$RECYCLER' and 'SYSTEM VOLUME INFORMATION' in all my drives. From my past experience, I suspect this is a virus. I had these hidden folders in PC before I bought Kaspersky which prevent it from attacking again.

Now, after I noticed this problem, I formatted my pc again and reinstall NIS 2010. I run virus scan on all external hardisk and thumbrive and I found a TROJAN in my thumbdrive, which I suspect to cause these hidden folders to appear. This thumb drive was inserted into my pc for atleast 1 hour previously and no prompt by NIS about any security risk!!!!!!

Just now, just after 10 days of using NIS 2010, I run a scan on my friend's thumb drive and NIS 2010 took very long. After scanning, a virus was found. The virus is W32.SILLYFDC. A check on my C: and D: drives reveal shocking findings. The '$RECYCLER' and 'SYSTEM VOLUME INFORMATION' reappeared again!!!!!!!

NIS 2010 had not only never prompt the users on impending virus attack, it had also allowed virus into our pc system easily even while I am running the virus scan.

My past experience with Kaspersky is that it will prompt user the moment a thumb drive with virus is inserted. In my first case, A virus in the thumb drive was in my PC for more than 1 hour and no action was taken (Not even any prompt!!!)!!!!!!

The scanning speed is infact fast! But, the security level was compromised! Is there any way to ask for a refund?

I want to change back to Kaspersky now......

This post has been edited by chiakwang: Dec 16 2009, 07:22 PM

I believe '$RECYCLER' and 'SYSTEM VOLUME INFORMATION' is not a virus. It is system file, it will appear once you un-check 'Hide protected operating system files' in folder option.

Who told u Recyle bin and System Volume Information is virus? They are just system folders, exist in every windows pc.

I always observe my folders. I always allow hidden files to be seen. Due to the first virus attack, I am very alert and always observe my drive for any additional hidden files. Infact, I can always see a hidden 'MSOCache' folder in my drive once I install microsoft office before the virus attack. Thats mean hidden files can always be seen all the while and no such hidden files appearing before the virus.

But after the second virus attack, these hidden files appear immediately and one of it shows error message when I click it.

While I am using Kaspersky for the past 1 year, I have encountered similar virus and no such incident occured.

In fact, I start observing these '$RECYCLER' and 'SYSTEM VOLUME INFORMATION' hidden folders more than 1 year ago when my pc was attack by virus. That is when I did not update my AVG and so it is my fault that time. I get very alert when these hidden folders appear again because it is the symptom before I lose majority of my Words and Excel documents last time.

This post has been edited by chiakwang: Dec 16 2009, 08:31 PM

i tell u what norton endpoint protection more suck
slow down computer 40% or above
norton product nowday all is worst

I have this feeling from my past experience.

Infact, I check several computers for this hidden files and they are not there. While I was using Kaspersky, the files are not there also. The first few days after restoration from the first virus attack also no such files. The pc is set to show all hidden files.

Only after the virus attack, I see these files immediately.

I hope you could give me some advice..........

---

Added on December 16, 2009, 8:37 pmClicking 'SYSTEM VOLUME INFORMATION' will result in ACCESS DENIED error........

Pls help...........

This post has been edited by chiakwang: Dec 16 2009, 08:37 PM

Those folders are not created by virus, my pc at home and in office, every drive also got these two folders, they are system folders created by windows to store the recycle bin files and system restoration files. The fact that you get access denied when clicking System Volume Information is because windows has protected that folder to deny you to access so you won't accidentally mess with the files inside.

Virus attack won't easily let you see the changes of files on harddrive. I believe your Norton IS is doing its job fine, it report no virus means no virus is in your computer. If you don't feel safe, try install another antivirus like Kaspersky, or Avira to scan again, I am sure no virus will be found also.

This post has been edited by alien0110: Dec 16 2009, 09:14 PM

I still think that it appear because of virus because in both my case, virus has been detected and the folders appeared immediately. Besides, Norton does not prompt any security risk until I run a scan, that also it was too late.

If these files were created by windows, why does some computers does not have it? Isn't all operating system should have the same system files? You can try re-installing windows and see if it is there. I have tried and I am very sure it is not there...

I also observe several times that when a completely clean external storage device is inserted, for the first few seconds, you will nener see these folders. But 5 seconds later, these folders suddenly appear. I suspect my pc is writing these files into the external drives. But, when the drive is inserted into a clean computer, no such files were observed....... This really make me headache.

I have been using Kaspersky for 1 year and I really observe these files and it is not there for the 1 whole year. Kaspersky also prompt me immediately when a thumb drive with virus was inserted.

These files are the symptoms before most of my important documents went corrupted by virus more than 1 year ago. Thats why I am now very careful with these files. I hope it will not happen again.........

My pc which was previously badly attacked by virus because I did not update the AVG database also show no virus after I update the AVG database. The virus could have prevented some scans...... After format and install Kaspersky, all scan on external hardisk shows virus........

Might go back to Kaspersky before too late.......... Wasted money on Norton but better be safe.....

This post has been edited by chiakwang: Dec 16 2009, 10:07 PM

For your information, for both window XP and window 7, all my drive partitions contain '$RECYCLER' and 'SYSTEM VOLUME INFORMATION' folders.

You say re-installing windows can make those 2 hidden folders disappear most probably is due to the folder option as I mention before.

You need to un-tick 'Hide protected operating system files' and tick 'show hidden files' in your computer folder option in order to able to view those 2 hidden system folders.

If you still insist those 2 folders are virus that Norton cant detected, please go and use other antivirus. I'm pretty sure those 2 folders are still there regardless of what antivirus program that you used.

Again, I am very careful with these files.......

I set my folder option to show all hidden files immediately after format and reinstall windows.

I will list down my flow after hidden folder appear the first time:

1. Format hardisk
2. Install NIS 2010
3. Update NIS2010 database to the latest one
3. Set to show all hidden files
4. Restart pc several times to complete windows updates
5. Check for hidden Recycler and System Volume Info folder everyday - Non existent for more than 1 week. Everyday sure check several times one.
6. Insert friend's thumb drive after around 10 days of safe usage - Virus found after I manually run scan and scan was very slow.
7. hidden Recycler and System Volume Info folder appeared immediately.

---

Added on December 17, 2009, 8:53 amUPDATE:

I finally found out that when I check 'Hide protected operating system files', those files disappeared. Thanks newbie4896 for that advice.

However, I am still very sure the virus had unchecked 'Hide protected operating system files'. Why does this happens?

Besides, Norton does not prompt any security risk while my thumb drive was inserted for more than 1 hour.

Virus was detected only when I manually run a virus scan. That virus scan was unusually long for 1 particular file - more than 15 minutes. After the detection of the virus, the settings in the folder options was altered.

That happened to both my case.

So, is it still harmful?

One of my pc at home still have those hidden files appearing and one day, one important folder in drive D: disappeared just like that...... What could be the cause?

This post has been edited by chiakwang: Dec 17 2009, 08:53 AM

that is normal behavior for the sillyFDC virus, one of the computers in my office got hit by it before through thumbdrive also. your "hide operating system files" will get unchecked when the virus hits and when it is cleaned this option is not reverted by Norton.

what is dissapointing is that Norton let this thing run crazy in the computer before deciding it is a threat. the virus changed about 15 registry entries and did a couple more things before Norton picked it up and undo the damage. it should kill the virus before it deos even anything, but that is not really the case. I wonder how other AV deals with w32.silyFDC.

Yup! I encountered the third attack by the same virus now.

I think Kaspersky might be faster in preventing the virus from executing any actions. I did not encounter any of these problems at all while using kaspersky and any virus are detected the moment an infected thumb drive is inserted.....

Yeah, I vote for Kaspersky!

i'm using NIS 2010, and still no problem.....
w32sillyFDC is common....and i think it should leave no problem for your computer....
tho i agree that Norton slows down your pc...

if you are unsure about certain virus, go here-www.threatexpert.com

NIS 2010 is a good antivirus...

i have been using norton for a year, and i never format my pc or had bad virus attack... i got 1 friend who use kaspersky, his laptop condemned by a virus once... what shud i say... just be more awake, its not hard to scan ur pendrive manually, and indeed norton has the auto scan feature, which does not pops out like kaspersky...

This post has been edited by captvizcenzo: Jan 22 2010, 12:56 AM

agreed!!!

the pop up screen is annoying... i believe that a good antivirus should do its work w/out prompting the users....

Well TC, as everyone had said, Recycler and System Volume Information folder are system folders. I installed kis 2009 last year and still have those folders.

Do not resist further, it only proves ignorance and taking-over-you paranoia

im other AV user, tht 2 things is not a virus..

i think the NIS is doing its job well.
i'm a NIS user for almost 1 year, and there is NO virus attacked my laptop.

in fact i feel NIS scanning is very sensitive and good. there was once that i scanned my thumb drive with my bro pc (running on kaspersky) it detected a few viruses. then i perform a 2nd time scan with NIS it detected more viruses that is hidden.

and the 2 files that u mention i think its normal to have it as i check Win XP, Vista and 7 also have the same thing.

hurmm...
i think norton protection is quite good from my experience...
the only think i hate is....
it SLOW DOWN the computer...

i only need 1 point the ignore NIS,,,
i'm using mcAfee now....

for those $recycle folder..
from my ponit of view, it's not a virus..
it's maybe a virtual recycle bin or a virus vault...
which all infected file were copy there for quarantine...
it's was made hidden so u couldn't easily access it...
that the point....

my 2 cent..