Page 1 of 3
QIcon Changer [& PE Icon Changer]
Posted: Sun Jun 17, 2012 12:16 am
by I am Baas
[
Mod note: the present is the offcial forum topic for QIcon Changer;
https://www.portablefreeware.com/?id=2307]
[
Note 2: posts related to PE Icon Changer have been merged here, as both have no remaining official sources; please see viewtopic.php?p=62750#p62750 and following.]
This is a very tiny tool that allow you to patch the icon of any kind of Windows application (.exe and .scr), it will overwrite the previous icon resource with the new one you chose.
http://darkcodersc.blogspot.hk/2012/03/ ... r-v10.html
Dl @
http://unremote.se/downloads/QIconChanger.zip
Re: QIcon Changer v1.0
Posted: Sun Jun 17, 2012 4:46 am
by tproli
This is great, works just fine. I can use it to change the icon of my yaP launchers to the main applications' icon.
Re: QIcon Changer v1.0
Posted: Sun Jun 17, 2012 6:20 am
by Midas
tproli wrote:This is great, works just fine. I can use it to change the icon of my yaP launchers to the main applications' icon.
Great news.
Re: QIcon Changer v1.0
Posted: Sun Jun 17, 2012 7:30 am
by tproli
Exactly - who thought this will be such an awesome summer?
Re: QIcon Changer v1.0
Posted: Mon Jun 18, 2012 11:21 pm
by Andrew Lee
Added to:
http://www.portablefreeware.com/index.php?id=2307
Wonderful tool. I have been using
Resource Hacker to do this same, but it isn't half as convenient.
Re: QIcon Changer v1.0
Posted: Tue Jun 19, 2012 4:00 am
by I am Baas
@Andrew Lee
Thank you.
Re: QIcon Changer v1.0
Posted: Sat Sep 22, 2012 4:00 am
by I am Baas
Re: QIcon Changer v1.0
Posted: Fri Feb 22, 2013 12:55 am
by loin2kolpotoru
Re: QIcon Changer v1.0
Posted: Fri Feb 22, 2013 1:45 am
by SYSTEM
Thanks. I have switched the download link in the entry.
Re: QIcon Changer v1.0
Posted: Fri Feb 22, 2013 3:05 am
by loin2kolpotoru
SYSTEM wrote:
Thanks. I have switched the download link in the entry.
You are Welcome.
Re: QIcon Changer v1.0
Posted: Fri Feb 22, 2013 7:03 am
by ZZZ
Re: QIcon Changer v1.0
Posted: Fri Feb 22, 2013 7:51 am
by Midas
Yes, it's there (more precisely at
http://phrozensoft.com/downloads.ps#thefooter), but you'll have to repeatedly click the "Display More" at the bottom to see it...
Re: QIcon Changer v1.0
Posted: Fri Feb 22, 2013 11:12 am
by SYSTEM
I had a look.
The file available at that address is
QIconV1_setup.zip that contains an installer called
QIconV1_setup.exe.
The installer is Inno Setup 5.5.0 and you need Innounp 0.37 or greater to extract it.
Inside the
{app} folder you'll find files called
QIconChanger.exe and
Readme.txt.
The version of QIcon Changer available at Phrozen Software is more recent than the one hosted by Softpedia. Softpedia's version doesn't have the readme file, and the binary is different as well.
Old: modified March 13, 2012, size 1890 kB
New: modified July 29, 2012, size 1567 kB
I don't feel like testing this new version for portability, though. (The installer is a bad sign.
)
Re: QIcon Changer v1.0
Posted: Fri Feb 22, 2013 10:04 pm
by ajfudge
Hi there.
Here's a list of actions made by QIcon.
Detailed report of suspicious malware actions:
Checked for debuggers
Detected keylogger functionality
Got input locale identifiers
Traces of Max++
[ General information ]
* File name: D:\(folder)\(folder)\(folder)\(folder)\(folder)\(folder)\QIcon 1.0\{app}\QIconChanger.exe
[ Changes to filesystem ]
* No changes
[ Changes to registry ]
* Creates Registry key HKEY_LOCAL_MACHINE\software\classes\clsid\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}
* Creates Registry key HKEY_LOCAL_MACHINE\software\microsoft\SQMClient\Windows
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b19f7-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b19f8-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b19f9-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b1a13-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b1a14-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b1a15-7348-11e2-846c-806e6f6e6963}
old value empty
* Empties value "_CommentFromDesktopINI" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{871b19f8-7348-11e2-846c-806e6f6e6963}
old value "_CommentFromDesktopINI=0000"
* Empties value "_CommentFromDesktopINI" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{871b19f9-7348-11e2-846c-806e6f6e6963}
old value "_CommentFromDesktopINI=0000"
* Creates value "QIconChanger.exe=QIconChanger.exe" in key HKEY_CURRENT_USER\software\classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\D:\Station\Apps\DE\DESKSTYLE\ICON STYLES\ICON CHANGER\QIcon 1.0\{app}
binary data=5100490063006F006E004300680061006E006700650072002E006500780065000000
[ Network services ]
* No changes
[ Process/window/string information ]
* Keylogger functionality.
* Gets input locale identifiers.
* Checks for debuggers.
* Sleeps 10 seconds.
QIcon Changer (extracted via UniExtract) with analysis using Sandboxie and Buster Sandbox Analyzer.
I don't understand reg entries, so anyone who does might find this helpful.
Re: QIcon Changer v1.0
Posted: Sun Feb 24, 2013 2:42 am
by SYSTEM
ajfudge wrote:
QIcon Changer (extracted via UniExtract) with analysis using Sandboxie and Buster Sandbox Analyzer.
I don't understand reg entries, so anyone who does might find this helpful.
Thanks. Based on that information, QIcon Changer is portable but not stealth. I have edited the entry.