Endpoint Protection

 View Only
  • 1.  Achernar.sys

    Posted Apr 22, 2011 07:10 PM

    I have 3 identical PCs running XP and one has the Achernar.sys driver (a SCSI Command Filter Driver?).  I am not sure what it does or how it got there.  It may be causing a symptom were disk copy activity is very slow.  "Symantec Endpoint Protection" does not flag as a virus, etc.

    Is Achernar.sys of concern?  How can it be removed?

    Thanks

     



  • 2.  RE: Achernar.sys

    Posted Apr 22, 2011 07:45 PM

    Submit to Security Response:

    https://submit.symantec.com/websubmit/gold.cgi



  • 3.  RE: Achernar.sys

    Posted Apr 22, 2011 07:47 PM

    Try uploading files to virustotal.com. Also submit the file to symantec security response...



  • 4.  RE: Achernar.sys

    Posted Apr 22, 2011 11:56 PM

    Belongs to Newsoft Technology Corp.  Did the computers have presto pagemanager?  If so do an uninstall and check to see if it removes the drivers. 



  • 5.  RE: Achernar.sys

    Posted Apr 23, 2011 02:28 PM

    I did some more investigation and found that:

    1. From web searches and file properties, Achernar.sys is from "An Chen Computer Co., Ltd." which does  CD/DVD duplication and dupliaction software.

    2. Doing a more extensive file search I did find achernar.dll in:

      "C:\Program Files\NewSoft\Presto! PageManager 7".  I did not install this software directly, but eventually found that the app was installed as part of software install for my HP ScanJet 5590 scanner.  This was done a few years ago (way before I started having the disk slowdown problem}.

    I thus currently do not suspect that Achernar.sys is the cause of the disk slowdown problem.  It is a bit concerning though that Achernar.sys is part of the driver list for every one of the nine IDE ATA.ATAPI controllers.

    The more probable cause of the disk slowdown appears to be that for the disk in question, the IDE Channel Device "Current Transfer Mode" is set (by XP) to "PIO Mode" instead of "Ultra DMA Mode 6".  I am currently working on trying to resolve this.



  • 6.  RE: Achernar.sys

    Posted Apr 23, 2011 03:18 PM

    Yep, scanner software from presto like I said.  You should also go through the services.msc and see if there are any Presto services running.



  • 7.  RE: Achernar.sys

    Posted Apr 24, 2011 03:57 PM

    Did you check the driver details , achernar.sys is located in the 'C:\WINDOWS\system32\drivers\' folder and has a size of 17920 bytes. Also if you are sure that is problem about computer slow , try to find other info in the NewSoft Technology Corporation tech support.