Video Screencast Help

EraserUtilDrv11220.sys is not sign By Symantec?

Created: 06 Feb 2013 • Updated: 06 Feb 2013 | 12 comments
This issue has been solved. See solution.

Hi all, how are you?

 

i would like to ask 2 importent questions about EraserUtilDrv11220.sys file under: Program Files (x86)\Common Files\Symantec Shared\EENGINE

1. Does anyone have any information of this file (EraserUtilDrv11220.sys)

2. Why the file is not sign By Symantec herself?

 

Thanks.

 

Comments 12 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

What version of SEP are you running?

EraserUtilDrv11220.sys is the Symantec Eraser Utility Driver.

This is digitally signed by Symantec.

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Mishiago@gmail.com's picture

Hi,

Can you give me please more information about "Symantec Eraser Utility Driver"?

We are using 12.1.2015.2015 version

 

Mithun Sanghavi's picture

Hello,

I apologize, I see EraserUtilRebootDrv.sys and not EraserUtilDrv11220.sys which gets installed with SEP 12.1 RU2

Did you have any other Symantec Product OR any older Symantec product on the same machine??

When you check the properties by right clicking on the EraserUtilDrv11220.sys file, do you see any Digital Signatures Tab??

If not, could you please submit the File to the Symantec Security Response Team on https://submit.symantec.com/essential

and

http://www.threatexpert.com/submit.aspx

Note: ThreatExpert is owned by Symantec.

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Rafeeq's picture

This driver is used for scanning with the latest definitions.

Mishiago@gmail.com's picture

Hi, there are no other products. and yes, there is Digital Signatures Tab, missed that...

But what actually the purpose of this file?

 

Rafeeq's picture

This  driver will use the virus signatures to scan the files. its a kernel level driver

Ashish-Sharma's picture

hi

I agree mithun comments you can submit for submission file.

have a look this artical out side of symantec

http://systemexplorer.net/file-database/file/eraserutildrv11220-sys

Thanks In Advance

Ashish Sharma

 

 

Mishiago@gmail.com's picture

Hi Rafeeq,

do you talk on  EraserUtilDrv11220.sys or EraserUtilRebootDrv.sys

?

Mithun Sanghavi's picture

Hello,

EraserUtilDrv11220.sys seems to be related to Norton Internet Security driver and Liveupdate.

Did you have Norton AV on this machine before??

This is used for updating the virus signatures to scan the files.

 

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Mithun Sanghavi's picture

Hello,

In case your doubts have been answered, I would appreciate if you could close the Thread by Marking any of the comments above as "SOLVED".

This would assist other users to understand which Comment assisted you the most to resolve your Issue.

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SOLUTION