KIS: 'Executable has changed'

03 Oct 23: One server has been relocated, the server currently doesn't have a public IP address in the meantime. I wrote some additional tunnel code running separately to handle this. When the server is engaged the connection is 5600+ days uniform (since around 24 July 2008). In the unlikely case I disengaged the server because of some problem the retention is 1200-3800 days depending on newsgroup. If you experience any issue please let me know.

29 Nov 23: Because of encrypted and "obfuscated" flood mass posted by few nzb websites and newzbin-like communities using usenet servers as private storage for their members to download the posts - the situation with the content is pretty chaotic, since posts are disguised in such a way, that users must use the satellite ecosystem (whish is not a part of Usenet) exclusively to download them, when the website disappears - the encrypted scattered posts just eat usenet providers' disk space uselessly. If you can't find something specific please let me know what exactly you can't find for me to check how it is possible to retain the posts. Legible posts shouldn't be affected at all, let me know if you notice anything missing.

08 Aug 24: After being unchanged for many years the search service communication protocol had to be updated a few times in part to resolve a server side set feature limitation and properly handle trial searches on the relocated server. The searches themselves are not affected and it looks like the work is now complete.
Post Reply
clarence
Posts: 9
Joined: Sun Sep 30, 2007 8:52 am

KIS: 'Executable has changed'

Post by clarence »

Every once in a while (twice per week maybe) Kaspersky Internet Security tells me that the executable has changed when issuing a search. Do I have to worry? Or is this part of how UE works?

Did anybody else notice this?
alex
Posts: 4543
Joined: Thu Feb 27, 2003 5:57 pm

Post by alex »

UE doesn't change its own executable. Does it refer to UE.exe?

Maybe Kaspersky complaints the executable has changed after you've upgraded UE so it compares it to the older executable hash, why search triggers this notice I don't know. It might be the case if it is the first thing you do after starting UE is search; if you start UE and e.g. download new headers or article bodies it should give the same warning then.

Might be some bug in Kaspersky as well, something completely different, if so it is good it doesn't crash UE at all.
clarence
Posts: 9
Joined: Sun Sep 30, 2007 8:52 am

Post by clarence »

Yes, it refers to UE.exe. And it has nothing to do with upgrading, because it does it at least once in a week and I haven't touched it inbetween. I even tried it on several computers with XP and vista.

Besides that, it seems to be necessary to add UE to the 'safe' applications list in KIS, just letting it past the firewall isn't sufficient, because there's an immediate drop in download-speed caused by the KIS networkflow analyzer.
alex
Posts: 4543
Joined: Thu Feb 27, 2003 5:57 pm

Post by alex »

you can download and extract UE.exe under different name and compare it with your current executable to be sure.

e.g. if you extract it as UE2.exe in the dos prompt go to the UE.exe directory and type

fc /b UE.exe UE2.exe

if it gives "No differences found" it is just a Kaspersky fluke.
if the files are different you need to look what could change it.

yes, AV scaning gigabytes of article bodies/headers is not a good idea.
Post Reply