Sysmon V6 fails to install on Windows 2008 R2

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   Driver fails signature check
Sysmon.exe -i sys
monConfig.xml -accepteula

System Monitor v6.00 - System activity monitor
Copyright (C) 2014-2017 Mark Russinovich and Thomas Garnier
Sysinternals - www.sysinternals.com

Loading configuration file with schema version 3.10
Sysmon schema version: 3.30
Configuration file validated.
Sysmon installed.
SysmonDrv installed.
StartService failed for SysmonDrv:
Windows cannot verify the digital signature for this file. A recent hardware or
software change might have installed a file that is signed incorrectly or damage
d, or that might be malicious software from an unknown source.
Failed to start the driver:
Windows cannot verify the digital signature for this file. A recent hardware or
software change might have installed a file that is signed incorrectly or damage
d, or that might be malicious software from an unknown source.

Stopping the service failed:
The service has not been started.
SysmonDrv removed.
Stopping the service failed:
The service has not been started.
Sysmon removed.

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
ajtarter Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 26 September 2016 Status: Offline Points: 7	Post Options Post Reply Quote ajtarter Report Post Thanks(0) Quote Reply Topic: Sysmon V6 fails to install on Windows 2008 R2 Posted: 17 February 2017 at 3:56pm
	Driver fails signature check Sysmon.exe -i sys monConfig.xml -accepteula System Monitor v6.00 - System activity monitor Copyright (C) 2014-2017 Mark Russinovich and Thomas Garnier Sysinternals - www.sysinternals.com Loading configuration file with schema version 3.10 Sysmon schema version: 3.30 Configuration file validated. Sysmon installed. SysmonDrv installed. StartService failed for SysmonDrv: Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damage d, or that might be malicious software from an unknown source. Failed to start the driver: Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damage d, or that might be malicious software from an unknown source. Stopping the service failed: The service has not been started. SysmonDrv removed. Stopping the service failed: The service has not been started. Sysmon removed.

ajtarter Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 26 September 2016 Status: Offline Points: 7	Post Options Post Reply Quote ajtarter Report Post Thanks(0) Quote Reply Posted: 17 February 2017 at 4:40pm
	Others have installed Sysmon v6 successfully on 2008 R2 and my system did not have the latest updates, so I am applying those now to see if that fixes the signature issue.

ajtarter Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 26 September 2016 Status: Offline Points: 7	Post Options Post Reply Quote ajtarter Report Post Thanks(0) Quote Reply Posted: 17 February 2017 at 5:20pm
	Applying the latest Windows updates fixed the signature issue when installing Sysmon V6 on Windows 2008 R2.

v1d1an Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 08 March 2017 Status: Offline Points: 1	Post Options Post Reply Quote v1d1an Report Post Thanks(0) Quote Reply Posted: 08 March 2017 at 6:40am
	Hi , I have the same problem.. I'm in a Virtual Machine with Windows 2008 R2 and I have the same message error. I wan't Use Sysmon with a VM like Metasploitable 3 for doing test of detection and i can't make un update of VM. How i can do a install of Sysmon without verification of the signature .. Thanks :)