QIcon Changer v1.0

I am Baas · **Joined:** Thu Aug 07, 2008 4:51 am **Posts:** 2614

Quote:

This is a very tiny tool that allow you to patch the icon of any kind of Windows application (.exe and .scr), it will overwrite the previous icon resource with the new one you chose.

http://darkcodersc.blogspot.hk/2012/03/ ... r-v10.html

Dl @ http://unremote.se/downloads/QIconChanger.zip

tproli · **Posted:** Sun Jun 17, 2012 4:46 am

This is great, works just fine. I can use it to change the icon of my yaP launchers to the main applications' icon.

Midas · **Posted:** Sun Jun 17, 2012 6:20 am

tproli wrote:

This is great, works just fine. I can use it to change the icon of my yaP launchers to the main applications' icon.

Great news.

tproli · **Posted:** Sun Jun 17, 2012 7:30 am

Exactly - who thought this will be such an awesome summer?

Andrew Lee · **Joined:** Sat Feb 04, 2006 9:19 am **Posts:** 1879

Added to: http://www.portablefreeware.com/index.php?id=2307

Wonderful tool. I have been using Resource Hacker to do this same, but it isn't half as convenient.

I am Baas · **Joined:** Thu Aug 07, 2008 4:51 am **Posts:** 2614

@Andrew Lee

Thank you.

I am Baas · **Joined:** Thu Aug 07, 2008 4:51 am **Posts:** 2614

New home at http://phrozenblog.com/?p=41

loin2kolpotoru · **Joined:** Fri Oct 09, 2009 11:20 am **Posts:** 124

The original link is 404 download it form here -

http://www.softpedia.com/progDownload/Q ... 18010.html

SYSTEM · **Posted:** Fri Feb 22, 2013 1:45 am

loin2kolpotoru wrote:

The original link is 404 download it form here -

http://www.softpedia.com/progDownload/Q ... 18010.html

Thanks. I have switched the download link in the entry.

loin2kolpotoru · **Joined:** Fri Oct 09, 2009 11:20 am **Posts:** 124

SYSTEM wrote:

Thanks. I have switched the download link in the entry.

You are Welcome.

ZZZ · **Joined:** Fri Mar 30, 2012 10:04 pm **Posts:** 11

Download - http://phrozensoft.com/processdl_1.ps.

Midas · **Posted:** Fri Feb 22, 2013 7:51 am

ZZZ wrote:

Download - http://phrozensoft.com/processdl_1.ps.

Yes, it's there (more precisely at http://phrozensoft.com/downloads.ps#thefooter), but you'll have to repeatedly click the "Display More" at the bottom to see it...

SYSTEM · **Posted:** Fri Feb 22, 2013 11:12 am

ZZZ wrote:

Download - http://phrozensoft.com/processdl_1.ps.

I had a look.

The file available at that address is QIconV1_setup.zip that contains an installer called QIconV1_setup.exe.

The installer is Inno Setup 5.5.0 and you need Innounp 0.37 or greater to extract it.

Inside the {app} folder you'll find files called QIconChanger.exe and Readme.txt.

The version of QIcon Changer available at Phrozen Software is more recent than the one hosted by Softpedia. Softpedia's version doesn't have the readme file, and the binary is different as well.

Old: modified March 13, 2012, size 1890 kB

New: modified July 29, 2012, size 1567 kB

I don't feel like testing this new version for portability, though. (The installer is a bad sign.

)

ajfudge · **Joined:** Thu Jan 24, 2013 11:36 pm **Posts:** 17

Hi there.

Here's a list of actions made by QIcon.

Quote:

Detailed report of suspicious malware actions:

Checked for debuggers
Detected keylogger functionality
Got input locale identifiers
Traces of Max++

[ General information ]
* File name: D:\(folder)\(folder)\(folder)\(folder)\(folder)\(folder)\QIcon 1.0\{app}\QIconChanger.exe

[ Changes to filesystem ]
* No changes

[ Changes to registry ]
* Creates Registry key HKEY_LOCAL_MACHINE\software\classes\clsid\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}
* Creates Registry key HKEY_LOCAL_MACHINE\software\microsoft\SQMClient\Windows
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b19f7-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b19f8-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b19f9-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b1a13-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b1a14-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b1a15-7348-11e2-846c-806e6f6e6963}
old value empty
* Empties value "_CommentFromDesktopINI" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{871b19f8-7348-11e2-846c-806e6f6e6963}
old value "_CommentFromDesktopINI=0000"
* Empties value "_CommentFromDesktopINI" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{871b19f9-7348-11e2-846c-806e6f6e6963}
old value "_CommentFromDesktopINI=0000"
* Creates value "QIconChanger.exe=QIconChanger.exe" in key HKEY_CURRENT_USER\software\classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\D:\Station\Apps\DE\DESKSTYLE\ICON STYLES\ICON CHANGER\QIcon 1.0\{app}
binary data=5100490063006F006E004300680061006E006700650072002E006500780065000000

[ Network services ]
* No changes

[ Process/window/string information ]
* Keylogger functionality.
* Gets input locale identifiers.
* Checks for debuggers.
* Sleeps 10 seconds.

QIcon Changer (extracted via UniExtract) with analysis using Sandboxie and Buster Sandbox Analyzer.
I don't understand reg entries, so anyone who does might find this helpful.

SYSTEM · **Posted:** Sun Feb 24, 2013 2:42 am

ajfudge wrote:

QIcon Changer (extracted via UniExtract) with analysis using Sandboxie and Buster Sandbox Analyzer.
I don't understand reg entries, so anyone who does might find this helpful.

Thanks. Based on that information, QIcon Changer is portable but not stealth. I have edited the entry.

QIcon Changer v1.0

Who is online