Video Screencast Help
Search Video Help Close Back
to help

EraserUtilDrv11220.sys is not sign By Symantec?

Created: 06 Feb 2013 | Updated: 06 Feb 2013 | 12 comments
Mishiago@gmail.com's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Hi all, how are you?

 

i would like to ask 2 importent questions about EraserUtilDrv11220.sys file under: Program Files (x86)\Common Files\Symantec Shared\EENGINE

1. Does anyone have any information of this file (EraserUtilDrv11220.sys)

2. Why the file is not sign By Symantec herself?

 

Thanks.

 

Comments 12 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

What version of SEP are you running?

EraserUtilDrv11220.sys is the Symantec Eraser Utility Driver.

This is digitally signed by Symantec.

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

0
Login to vote
  • Actions
Mishiago@gmail.com's picture

Hi,

Can you give me please more information about "Symantec Eraser Utility Driver"?

We are using 12.1.2015.2015 version

 

0
Login to vote
  • Actions
Mithun Sanghavi's picture

Hello,

I apologize, I see EraserUtilRebootDrv.sys and not EraserUtilDrv11220.sys which gets installed with SEP 12.1 RU2

Did you have any other Symantec Product OR any older Symantec product on the same machine??

When you check the properties by right clicking on the EraserUtilDrv11220.sys file, do you see any Digital Signatures Tab??

If not, could you please submit the File to the Symantec Security Response Team on https://submit.symantec.com/essential

and

http://www.threatexpert.com/submit.aspx

Note: ThreatExpert is owned by Symantec.

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

+1
Login to vote
  • Actions
Rafeeq's picture

This driver is used for scanning with the latest definitions.

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

0
Login to vote
  • Actions
Mishiago@gmail.com's picture

Hi, there are no other products. and yes, there is Digital Signatures Tab, missed that...

But what actually the purpose of this file?

 

0
Login to vote
  • Actions
Rafeeq's picture

This  driver will use the virus signatures to scan the files. its a kernel level driver

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

0
Login to vote
  • Actions
Ashish-Sharma's picture

hi

I agree mithun comments you can submit for submission file.

have a look this artical out side of symantec

http://systemexplorer.net/file-database/file/eraserutildrv11220-sys

Thanks In Advance

Ashish Sharma

SEPM Knowledgebase Documents  

 

0
Login to vote
  • Actions
Mishiago@gmail.com's picture

Hi Rafeeq,

do you talk on  EraserUtilDrv11220.sys or EraserUtilRebootDrv.sys

?

0
Login to vote
  • Actions
Mithun Sanghavi's picture

Hello,

EraserUtilDrv11220.sys seems to be related to Norton Internet Security driver and Liveupdate.

Did you have Norton AV on this machine before??

This is used for updating the virus signatures to scan the files.

 

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

0
Login to vote
  • Actions
Mishiago@gmail.com's picture

Thanks all for your help, appreciate that!!!

 

Moshico.

0
Login to vote
  • Actions
Mithun Sanghavi's picture

Hello,

In case your doubts have been answered, I would appreciate if you could close the Thread by Marking any of the comments above as "SOLVED".

This would assist other users to understand which Comment assisted you the most to resolve your Issue.

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

SOLUTION
+1
Login to vote
  • Actions