Expired certificate for symamsi.dll blocks Windows services

Archive
1

Hello,

While trying to scan hard disk for errors on Windows 11 i get following error: "Process "\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe" (PID: 11748) blocked the possibility of loading the binary file "\Program Files\Norton Security\Engine\22.24.3.2\symamsi.dll" that was not signed by Microsoft."

Can see that certifcate for this file is long overdue having end date at 08.10.2023.

There is another thread with solution to turn off Core Isolation features and periodic scanning but they doesn't work in my case. I've tried to reinstall and update Norton, no change after that.

Please advice

2

Thanks for the post back.

SA

3

Thanks for suggestions, it appeared that my secondary hard disk malfunctioning was the reason. Error logs went away when i unplugged it.

4

Verified the certificate is still expired as has been reported eons ago, on my Windows 10 Pro machine. No issues noted with this machine. I assume you've already read through this thread as well:

https://community.norton.com/en/forums/binary-not-signed-correctly-symamsidll

 

symamsi dll certificate.jpg

Microsoft has a suggestion for manually registering OCX and DLL files on Windows 11. Use at your own risk as we cannot know what the outcome will be.

https://answers.microsoft.com/en-us/windows/forum/all/manually-registering-ocx-and-dll-on-windows11/d921aa92-6d54-4159-8c1a-e1630234f8c8

You also may want to do a removal only scenario with Norton using the guide below.

https://support.norton.com/sp/en/us/home/current/solutions/v60392881

  • To only remove your Norton device security product, click Advanced Options and then click Remove Only. Pay close attention to step # 5 in the Norton article.

When removal has completed, DO NOT reinstall your product at this time. Restart your machine. When you have rebooted, manually find and remove ALL directories / folders left behind from the removal. RESTART when you have completed. Note: There will be a folder named "Avast Software" in your App Data directory. Please see the embedded screenshot. Remove it as well. 

Afterwards log into your Norton account, download and reinstall your Norton product from there. When the install completes reboot. Next, run live updates to install all patches that are available. Make sure you reboot as each patch is installed whether prompted to do so or not. This will ensure the patches are installed separately and completely. Perform a final restart.

SA