KIS: 'Executable has changed'

In the case of a search service disruption the status updates will be shown here.
Post Reply
clarence
Posts: 9
Joined: Sun Sep 30, 2007 8:52 am

KIS: 'Executable has changed'

Post by clarence »

Every once in a while (twice per week maybe) Kaspersky Internet Security tells me that the executable has changed when issuing a search. Do I have to worry? Or is this part of how UE works?

Did anybody else notice this?
alex
Posts: 4553
Joined: Thu Feb 27, 2003 5:57 pm

Post by alex »

UE doesn't change its own executable. Does it refer to UE.exe?

Maybe Kaspersky complaints the executable has changed after you've upgraded UE so it compares it to the older executable hash, why search triggers this notice I don't know. It might be the case if it is the first thing you do after starting UE is search; if you start UE and e.g. download new headers or article bodies it should give the same warning then.

Might be some bug in Kaspersky as well, something completely different, if so it is good it doesn't crash UE at all.
clarence
Posts: 9
Joined: Sun Sep 30, 2007 8:52 am

Post by clarence »

Yes, it refers to UE.exe. And it has nothing to do with upgrading, because it does it at least once in a week and I haven't touched it inbetween. I even tried it on several computers with XP and vista.

Besides that, it seems to be necessary to add UE to the 'safe' applications list in KIS, just letting it past the firewall isn't sufficient, because there's an immediate drop in download-speed caused by the KIS networkflow analyzer.
alex
Posts: 4553
Joined: Thu Feb 27, 2003 5:57 pm

Post by alex »

you can download and extract UE.exe under different name and compare it with your current executable to be sure.

e.g. if you extract it as UE2.exe in the dos prompt go to the UE.exe directory and type

fc /b UE.exe UE2.exe

if it gives "No differences found" it is just a Kaspersky fluke.
if the files are different you need to look what could change it.

yes, AV scaning gigabytes of article bodies/headers is not a good idea.
Post Reply