Does Newsbin change after being closed?

[CoolStream]

Since changing to 6.54RC4, I am finding that if the program is closed and started up again Norton, tells me that the program needs permission to connect to the net. This should only happen if a newer version is run for the first time.

If nothing is changed in Newsbin, I'll have to take this up with Symantec so I'm looking forward to your answer and any thoughts you might have on this.

[Quade]

I've never heard of such a thing before. Newsbin shouldn't be changing between runs.

If you find out anything, I'd really like to know.

[CoolStream]

OK, I have been running 6.54 3326 for a few days now and am getting the same results. Apart from one system crash (not Newsbin related), I usually close the program down once downloads are complete. On reopening the program Nortons is giving me the message that accompanies a new version, i.e. Newsbin has changed since last being used.

I haven't used the newer machines on other machines for a while so I'll try that first.

To aid my memory, the W64 Newsbin 6.54 3326 I have just closed down has MD5 hashes
CRC32: 97B37420
MD5: 149DA42F2A291F6BB0B928E4D8C2C738
SHA-1: 8D2FFD2DF363612309DD4A2A4248C363BD555F78

I reopen it and get the same message that the program has been changed and give it permission to always allow. The hash values have not changed after closing down but I get the same when opening up again. MOTD 66.225.235.36:443 cannot be opened because

NewsbinPro Newsgroup Reader is attempting to access the Internet. - This program has been modified since it was last used.
I was going to submit NewsbinPro64 to Virscan.org but I'm not sure if they have been hijacked. The opening page is quickly replaced with an icon with a dog paw linking to

http://tongji.baidu.com/hm-web/welcome/ ... ac273fe9ca but I'm not going to open that.

Maybe my IS and AV is broken but everything else is behaving as normal. I'll try Symantec tomorrow. I don't think there is anything else I can do tonight.

[itimpi]

If the checksums are not changing, then the binary is not changing. It definitely sounds as if the issue is Norton not remembering about Newsbin.

[CoolStream]

As a matter of interest, could someone check if their values are the same as mine?

[tl]

As a matter of interest, could someone check if their values are the same as mine?

File: NewsbinPro64.exe
CRC-32: 97b37420
MD4: 3b6c6cc4d2cede472ffae0ea45c04491
MD5: 149da42f2a291f6bb0b928e4d8c2c738
SHA-1: 8d2ffd2df363612309dd4a2a4248c363bd555f78

So it perfectly matches your hashes. Note however that the AV program likely say this if the program or any of the DLLs it uses have changed (because they're effectively part of the program).

This includes system DLLs in various Windows directories but if it doesn't protest on any other programs it's unlikely (but not impossible) that it's one of them it thinks is changing.

I guess it's more likely than not that the real issue issue is that Norton is broken (considering it's... Norton it wouldn't surprise me at all) but here's the checksums for the DLL files on my 64-bit 6.54 Buil 3326 installation ("HashCheck" Explorer addition rocks!):

File: FreeImage64.dll
CRC-32: 814d106f
MD4: 45df1abf9568c1584aa2ecb3f62d5f54
MD5: 28f5c69e9fff7e297b16e20fd2045d12
SHA-1: a5da758d16f98d9e199a1527a02bfb4a3d3a4cc0

File: languagex64.dll
CRC-32: 08157333
MD4: 096c745bc70fd30cadf42e3e34bc11a9
MD5: 11b7133f35d64458cef2d4574e4de19e
SHA-1: 08f82fc67836f5d9614da54a2cb4d5ef3c53b468

File: LibFiletype64.dll
CRC-32: 5cdf45cd
MD4: d2c13dcb835ab7f301eb22c7ca040c82
MD5: 3dcb4e32cd041521ae161965591cd38b
SHA-1: 46ba69fd9f7d7ddfc4415b3b8423f1e16329ffd2

File: LibFiletypex64.dll
CRC-32: ce02e47f
MD4: 7cf603cd634c4ec111e8655988627cb0
MD5: 9f74ec50dea197d6d403a034f0522de6
SHA-1: 0ea0e5390872603a4e523544882e16eb9fbb89cb

File: par2repair64.dll
CRC-32: 8222df11
MD4: 183df64dcb3e8a7dfaf73e27d57a1156
MD5: 84b19e8c73ba9bc785f4d11b9cf92246
SHA-1: b25c524f72b8948160225e1822e49c381005cb35

File: tbb.dll
CRC-32: 42ee1e64
MD4: 0c206429269626517cff004d88eae0f1
MD5: 373e95049fb0533fc0433f79af438980
SHA-1: 76970af2296640a0ffcd033bbbfcd4b0f46d7b5c

[kirm]

I have been running NIS for several years, and never had this type of issue. Are you using the newest version, which has been completely redone for 2015?

Still running 2014 for another 2 months so not changing yet. Norton gave me a free year for beta testing 2015 but only ran that briefly in VM.

As a suggestion, try removing Norton and reinstalling in case something got corrupted. Maybe run Malware-bytes Anti-Malware to check out your system. I have both monitoring my machines.