Page 1 of 3

QIcon Changer v1.0

Posted: Sun Jun 17, 2012 12:16 am
by I am Baas
This is a very tiny tool that allow you to patch the icon of any kind of Windows application (.exe and .scr), it will overwrite the previous icon resource with the new one you chose.
http://darkcodersc.blogspot.hk/2012/03/ ... r-v10.html

Image

Dl @ http://unremote.se/downloads/QIconChanger.zip

Re: QIcon Changer v1.0

Posted: Sun Jun 17, 2012 4:46 am
by tproli
This is great, works just fine. I can use it to change the icon of my yaP launchers to the main applications' icon.

Re: QIcon Changer v1.0

Posted: Sun Jun 17, 2012 6:20 am
by Midas
tproli wrote:This is great, works just fine. I can use it to change the icon of my yaP launchers to the main applications' icon.
Great news. 8)

Re: QIcon Changer v1.0

Posted: Sun Jun 17, 2012 7:30 am
by tproli
Exactly - who thought this will be such an awesome summer? :)

Re: QIcon Changer v1.0

Posted: Mon Jun 18, 2012 11:21 pm
by Andrew Lee
Added to: http://www.portablefreeware.com/index.php?id=2307

Wonderful tool. I have been using Resource Hacker to do this same, but it isn't half as convenient.

Re: QIcon Changer v1.0

Posted: Tue Jun 19, 2012 4:00 am
by I am Baas
@Andrew Lee

Thank you.

Re: QIcon Changer v1.0

Posted: Sat Sep 22, 2012 4:00 am
by I am Baas

Re: QIcon Changer v1.0

Posted: Fri Feb 22, 2013 12:55 am
by loin2kolpotoru
The original link is 404 download it form here -

http://www.softpedia.com/progDownload/Q ... 18010.html

Re: QIcon Changer v1.0

Posted: Fri Feb 22, 2013 1:45 am
by SYSTEM
loin2kolpotoru wrote:The original link is 404 download it form here -

http://www.softpedia.com/progDownload/Q ... 18010.html
Thanks. I have switched the download link in the entry.

Re: QIcon Changer v1.0

Posted: Fri Feb 22, 2013 3:05 am
by loin2kolpotoru
SYSTEM wrote: Thanks. I have switched the download link in the entry.
You are Welcome.

Re: QIcon Changer v1.0

Posted: Fri Feb 22, 2013 7:03 am
by ZZZ

Re: QIcon Changer v1.0

Posted: Fri Feb 22, 2013 7:51 am
by Midas
Yes, it's there (more precisely at http://phrozensoft.com/downloads.ps#thefooter), but you'll have to repeatedly click the "Display More" at the bottom to see it... :?

Re: QIcon Changer v1.0

Posted: Fri Feb 22, 2013 11:12 am
by SYSTEM
I had a look.

The file available at that address is QIconV1_setup.zip that contains an installer called QIconV1_setup.exe.

The installer is Inno Setup 5.5.0 and you need Innounp 0.37 or greater to extract it.

Inside the {app} folder you'll find files called QIconChanger.exe and Readme.txt.

The version of QIcon Changer available at Phrozen Software is more recent than the one hosted by Softpedia. Softpedia's version doesn't have the readme file, and the binary is different as well.

Old: modified March 13, 2012, size 1890 kB

New: modified July 29, 2012, size 1567 kB

I don't feel like testing this new version for portability, though. (The installer is a bad sign. :( )

Re: QIcon Changer v1.0

Posted: Fri Feb 22, 2013 10:04 pm
by ajfudge
Hi there.

Here's a list of actions made by QIcon.
Detailed report of suspicious malware actions:

Checked for debuggers
Detected keylogger functionality
Got input locale identifiers
Traces of Max++

[ General information ]
* File name: D:\(folder)\(folder)\(folder)\(folder)\(folder)\(folder)\QIcon 1.0\{app}\QIconChanger.exe

[ Changes to filesystem ]
* No changes

[ Changes to registry ]
* Creates Registry key HKEY_LOCAL_MACHINE\software\classes\clsid\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}
* Creates Registry key HKEY_LOCAL_MACHINE\software\microsoft\SQMClient\Windows
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b19f7-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b19f8-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b19f9-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b1a13-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b1a14-7348-11e2-846c-806e6f6e6963}
old value empty
* Modifies value "NukeOnDelete=00000001" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume\{871b1a15-7348-11e2-846c-806e6f6e6963}
old value empty
* Empties value "_CommentFromDesktopINI" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{871b19f8-7348-11e2-846c-806e6f6e6963}
old value "_CommentFromDesktopINI=0000"
* Empties value "_CommentFromDesktopINI" in key HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{871b19f9-7348-11e2-846c-806e6f6e6963}
old value "_CommentFromDesktopINI=0000"
* Creates value "QIconChanger.exe=QIconChanger.exe" in key HKEY_CURRENT_USER\software\classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\D:\Station\Apps\DE\DESKSTYLE\ICON STYLES\ICON CHANGER\QIcon 1.0\{app}
binary data=5100490063006F006E004300680061006E006700650072002E006500780065000000

[ Network services ]
* No changes

[ Process/window/string information ]
* Keylogger functionality.
* Gets input locale identifiers.
* Checks for debuggers.
* Sleeps 10 seconds.
QIcon Changer (extracted via UniExtract) with analysis using Sandboxie and Buster Sandbox Analyzer.
I don't understand reg entries, so anyone who does might find this helpful.

Re: QIcon Changer v1.0

Posted: Sun Feb 24, 2013 2:42 am
by SYSTEM
ajfudge wrote: QIcon Changer (extracted via UniExtract) with analysis using Sandboxie and Buster Sandbox Analyzer.
I don't understand reg entries, so anyone who does might find this helpful.
Thanks. Based on that information, QIcon Changer is portable but not stealth. I have edited the entry.