Troubleshooting Weird Icons In Windows 7

[killpointik]

is this virus or? dont know what is it ...
thx for help
using KIS2016

 

[Balrog]

Hello. Is this a bussiness PC?

 

[killpointik]

yes clasik home desktop : WIN 7 with license: with KIS2016 no problem with virus/etc

 

[yigido]

Please copy the strings below and paste them into a textpad and save it as .bat file..not .txt
Then run it..

@echo off
cls
echo Explorer islemi kisayol simgesi veritabanini silmek icin kapatilmasi gerekiyor.
echo Devam etmeden önce tüm islemlerinizi kapatin!
pause
taskkill /IM explorer.exe /F
echo Kisayol simgesi veritabanini siliniyor...
If exist %userprofile%\AppData\Local\IconCache.db goto delID
echo Bir önceki kisayol simgesi veritabani bulunamadi...yeni bir veritabani olusturuluyor
goto :main

:delID
cd /d %userprofile%\AppData\Local
del IconCache.db /a
pause
echo Kisayol simgesi veritabani basariyla silindi.
goto main

:main
echo Kisayol simgesi veritabani olusturulmasi icin Windows'un yeniden baslatilmasi gerekiyor.
echo Yeniden baslat? (Y/N):
set /p choice=
If %choice% == y goto end
echo Yeniden baslatma iptal edildi...bu pencereyi kapatin
explorer.exe

:end
shutdown /r /t 0
exit

 

[DardiM]

Deleting the IconCache.db file must solves the issue.
That what allows the bat file content linked by @yigido
It will restart you PC.

 

[killpointik]

iygido: w/help tried it and nothing....only restarted PC
DardiM: what is solution?

 

[DardiM]

iygido: w/help tried it and nothing....only restarted PC
DardiM: what is solution?

Have you run the bat file by right click and "run as admin..." ?

- Manually go here :

%userprofile%\AppData\Local\​

show hidden files => IconCache.db

- Maybe under windows 7 it is localized on another path, will check

Try here :​

%localappdata%\

​

http://www.sevenforums.com/tutorials/49819-icon-cache-rebuild.html

 

[hjlbx]

First off, do you even have drives FTP1, FTP2, FTP3, FTP4 on your system ?

Screenshot is showing 6 partitions\drives plus 2 BD-ROM drives.

Is the system using virtual drive emulation - Daemon Tools, PowerISO, etc ?

Do you remember mounting all those drives ?

 

[Balrog]

First off, do you even have drives FTP1, FTP2, FTP3, FTP4 on your system ?

Screenshot is showing 6 partitions\drives plus 2 DVD drives.

That's what i'm saying.

 

[hjlbx]

If you did not create all those drives\partitions then post a thread on the malware removal assistance subforum here at MT.

 

[killpointik]

DardiM: yes right click like ADMIN: w/success

hjblx: yes its my HDDs on my machine

it was my mount drives for iso music: nothing problem now. unmounted

i didnt nothing with partitions on my drives.....ill go try rebuild with this link
http://www.sevenforums.com/tutorials/49819-icon-cache-rebuild.html

 

[killpointik]

blah: didnt work
OPTION 1: didnt work
OPTION 2: this command not valid :

• DEL "%localappdata%\Microsoft\Windows\Explorer\iconcache*" /A

OPTION 3 hard to understand for me this crap guideline

found AVG_REMOVER ..... very strange folder :O cant uninstall it ... damn it...wtf is it?

 

[DardiM]

DardiM: yes right click like ADMIN: w/success

hjblx: yes its my HDDs on my machine

it was my mount drives for iso music: nothing problem now. unmounted

i didnt nothing with partitions on my drives.....ill go try rebuild with this link


http://www.sevenforums.com/tutorials/49819-icon-cache-rebuild.html

Try to do it "manually" :

- Go to %userprofile%\AppData\Local

example : C:\Users\DardiM\AppData\Local​

- Disable hiding files :

"Open File Explorer > Folder Options > Views to show Hidden System Files" ​

=> IconCache.db file must appears​

- Delete IconCache.db manually

- Restart your PC

If the above method doesn't work :

(1) Kill Explorer.exe process :​

- Click Start button
- Hold down Ctrl+Shift & Right click
- Click on empty area in the Start Menu
- Click “Exit Explorer”.​

(2) Open the command prompt window :​

- Type each of the following and after every command, hit the Enter button:

cd /d %userprofile%\AppData\Local
attrib –h IconCache.db
del IconCache.db
start explorer
​

(3) If the both precedent methods don't solve your issue :​

=> That are the only methods I know for windows 7
=> your problem doesn't rely with IconCache.db​

 

[askmark]

For simplicity you could download and run this tool - it just automates the process you're trying to do manually.

Icon Cache Rebuilder
With Icon Cache Rebuilder, a user simply loads the application and once the IconCache.db is located will allow a user to click Rebuild to remove the file and restart Explorer.

Once this is done will allow a user to Restart their computer and once logged on the IconCache.db will be re-created.

Download: http://www.thewindowsclub.com/rebuild-corrupt-icon-cache-with-icon-cache-rebuilder

 

[DardiM]

For simplicity you could download and run this tool - it just automates the process you're trying to do manually.


Download: http://www.thewindowsclub.com/rebuild-corrupt-icon-cache-with-icon-cache-rebuilder

PARANOID MOD ON

"simplicity" <=> "security".
"it just automates the process you're trying to do manually" => are you 100 % sure it doesn't do other stuff ?
(I verified the scripts on above posts)
(When something so basic can be done with clear parts, it is always most secure, from my point of view)​

PARANOID MOD OFF

 

[BoraMurdar]

Don't worry @DardiM , program is completely safe to use. It just automates commands packed in a GUI

cd /d %userprofile%\AppData\Local
attrib –h IconCache.db
del IconCache.db
start explorer

 

[DardiM]

Don't worry @DardiM , program is completely safe to use. It just automates commands packed in a GUI

cd /d %userprofile%\AppData\Local
attrib –h IconCache.db
del IconCache.db
start explorer

I was beginning to analysis it, lol, thank you

 

[askmark]

Don't worry @DardiM , program is completely safe to use. It just automates commands packed in a GUI

cd /d %userprofile%\AppData\Local
attrib –h IconCache.db
del IconCache.db
start explorer

@BoraMurdar

I expected it to be safe but how can you be sure it's actually executing those commands?

 

[BoraMurdar]

@BoraMurdar

I expected it to be safe but how can you be sure it's actually executing those commands?

System Explorer / History Tab

 

[killpointik]

IconCache.db i cant see in folder...i have always uncheck hidden files