Endpoint Protection

Hi all, how are you?

i would like to ask 2 importent questions about EraserUtilDrv11220.sys file under: Program Files (x86)\Common Files\Symantec Shared\EENGINE

1. Does anyone have any information of this file (EraserUtilDrv11220.sys)

2. Why the file is not sign By Symantec herself?

Thanks.

Hello,

What version of SEP are you running?

EraserUtilDrv11220.sys is the Symantec Eraser Utility Driver.

This is digitally signed by Symantec.

Hi,

Can you give me please more information about "Symantec Eraser Utility Driver"?

We are using 12.1.2015.2015 version

This driver is used for scanning with the latest definitions.

Hello,

I apologize, I see EraserUtilRebootDrv.sys and not EraserUtilDrv11220.sys which gets installed with SEP 12.1 RU2

Did you have any other Symantec Product OR any older Symantec product on the same machine??

When you check the properties by right clicking on the EraserUtilDrv11220.sys file, do you see any Digital Signatures Tab??

If not, could you please submit the File to the Symantec Security Response Team on https://submit.symantec.com/essential

and

http://www.threatexpert.com/submit.aspx

Note: ThreatExpert is owned by Symantec.

Hi, there are no other products. and yes, there is Digital Signatures Tab, missed that...

But what actually the purpose of this file?

This  driver will use the virus signatures to scan the files. its a kernel level driver

hi

I agree mithun comments you can submit for submission file.

have a look this artical out side of symantec

http://systemexplorer.net/file-database/file/eraserutildrv11220-sys

Hi Rafeeq,

do you talk on  EraserUtilDrv11220.sys or EraserUtilRebootDrv.sys

?

Hello,

EraserUtilDrv11220.sys seems to be related to Norton Internet Security driver and Liveupdate.

Did you have Norton AV on this machine before??

This is used for updating the virus signatures to scan the files.

Thanks all for your help, appreciate that!!!

Moshico.

Hello,

In case your doubts have been answered, I would appreciate if you could close the Thread by Marking any of the comments above as "SOLVED".

This would assist other users to understand which Comment assisted you the most to resolve your Issue.

What is the actual solution?