Solved Regedit.exe icon has changed and not able to restore it

[easwar2641993]

I don't know where I can put this thread in this forum.It is not a "crash" but something unusual.

See the attached images below,you can see that reg edit icon has changed.I don't know when was this happened but I noticed this very recently and tried some of the usual methods.
1)tried to change icon manually,but since this is an important windows file,I just can't see change icon option.
2)I have scanned the whole PC for viruses,malwares using MSE and Malwarebytes(Free).
3)I have ran sfc /SCANNOW and found no issues.
4)Since I don't know when this was happened,I just don't know which restore point will be suitable but I keep only one recent "stable" restore point and that won't fix this issue.

The only thing which will solve is Windows Reinstallation which I don't need since it takes a lot of time to install,update and delete temporary files after installing everything.For me it just takes 1 day!.

Besides,the system is so stable and no crashes,no BSODs and I am able to open regedit.

 

[jcgriff2]

Check the Properties tab -

. .

​

Timezone factors in, so your 14-7-2009 seems fine. Check size.

Regards. . .

jcgriff2

 

[jcgriff2]

Apologies for 2x-post.

I show a copy in:

C:\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5023a70bf589ad3e\regedit.exe

Here's a directory listing:

[FONT=lucida console]Directory of c:\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5023a70bf589ad3e[/FONT]
 
[FONT=lucida console]07/13/2009  23:20    <DIR>          .[/FONT]
[FONT=lucida console]07/13/2009  23:20    <DIR>          ..[/FONT]
[FONT=lucida console]07/13/2009  21:40            17,408 clb.dll[/FONT]
[FONT=lucida console][COLOR=red]07/13/2009  21:39           427,008 regedit.exe[/COLOR][/FONT]
[FONT=lucida console]07/13/2009  21:39            10,240 regedt32.exe[/FONT]
[FONT=lucida console]              3 File(s)        454,656 bytes[/FONT]
[FONT=lucida console]              2 Dir(s)  20,764,229,632 bytes free[/FONT]

Rename regedit.exe to regedit.exe.old

Copy the one from the folder named above to \windows

Activate the Hidden Admin user account since you'll need full admin perms -

http://www.sevenforums.com/tutorials/507-built-administrator-account-enable-disable.html

The "7600" in the folder name means SP0, but if the sizes are the same, I would see if the copy from \winsxs works.


Regards. . .

jcgriff2

 

[easwar2641993]

Apologies for 2x-post.

I show a copy in:

C:\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5023a70bf589ad3e\regedit.exe

Here's a directory listing:

[FONT=lucida console]Directory of c:\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5023a70bf589ad3e[/FONT]
 
[FONT=lucida console]07/13/2009  23:20    <DIR>          .[/FONT]
[FONT=lucida console]07/13/2009  23:20    <DIR>          ..[/FONT]
[FONT=lucida console]07/13/2009  21:40            17,408 clb.dll[/FONT]
[FONT=lucida console][COLOR=red]07/13/2009  21:39           427,008 regedit.exe[/COLOR][/FONT]
[FONT=lucida console]07/13/2009  21:39            10,240 regedt32.exe[/FONT]
[FONT=lucida console]              3 File(s)        454,656 bytes[/FONT]
[FONT=lucida console]              2 Dir(s)  20,764,229,632 bytes free[/FONT]

Rename regedit.exe to regedit.exe.old

Copy the one from the folder named above to \windows

Activate the Hidden Admin user account since you'll need full admin perms -

http://www.sevenforums.com/tutorials/507-built-administrator-account-enable-disable.html

The "7600" in the folder name means SP0, but if the sizes are the same, I would see if the copy from \winsxs works.


Regards. . .

jcgriff2

I have solved this in another way but quite interesting for me.I say it was your idea to prompt me to log in with hidden administrator account.When I did,I see that regedit.exe has the original default icon.So I suspected it may be the issue with current user account.So I logged in with current user and deleted the iconcache.dll or some dll file that is related with icon cache.And logged off and again logged in.The regedit has got the original icon.So the issue was the corruption of icon cache.
Thanks jcgriff2 and your solution was much informative for a beginner like me.

 

[jcgriff2]

Hi -

Your method proved much better here. I'm glad you found the corrupted user account before going further. Very nice find!

Good luck to you.

Regards. . .

jcgriff2