- Windows XP Hidden Cookie Cache (Updated) - Tor Browser Cookie Cache
- Windows XP Hidden Cookie Cache (Updated)
- This was a copy taken from modified CCleaner
- registry , if installed you can find it within
- HKEY_CURRENT_USER\Software\Piriform\CCleaner
- using regedit.exe from C:\WINDOWS\
- Owner = whatever user name you have. Mine is “Owner”
- Note ; Mozilla “.default” ID censored due
- to security. The full path remains exposed.
- Every Mozilla Firefox user has a different
- .default ID, so consider it xxxxxxxx.default
- - the paths shown is what you need to know.
- C:\\Program Files\\Mozilla Firefox\\|updater.exe"
- C:\\Program Files\\Mozilla Firefox\\|updater.ini"
- C:\\Program Files\\Mozilla Firefox\\|update.locale"
- C:\\Documents and Settings\\Default User\\Application Data\\Microsoft\\Internet Explorer\\|brndlog.bak"
- C:\\Documents and Settings\\Default User\\Application Data\\Microsoft\\Internet Explorer\\|brndlog.txt"
- C:\\Documents and Settings\\Default User\\Cookies\\|index.dat"
- C:\\Documents and Settings\\Default User\\Local Settings\\|History"
- C:\\Documents and Settings\\Default User\\Local Settings\\History\\History.IE5\\|*.*"
- C:\\Documents and Settings\\Default User\\Local Settings\\Temp\\|*.*"
- C:\\Documents and Settings\\Default User\\Local Settings\\Temporary Internet Files\\Content.IE5\\|*.*"
- C:\\Documents and Settings\\Default User\\NetHood\\|*.*"
- C:\\Documents and Settings\\Default User\\Cookies\\|*.*"
- C:\\Documents and Settings\\Owner\\Recent\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Feeds\\Microsoft Feeds~\\|*.*"
- C:\\Program Files\\Mozilla Firefox\\components\\|nsSessionStore.js"
- C:\\Program Files\\Mozilla Firefox\\components\\|aboutSessionRestore.js"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Feeds\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Microsoft\\CryptnetUrlCache\\|*.*"
- C:\\Documents and Settings\\All Users\\Application Data\\MFAData\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\bookmarkbackups\\|*.*"
- C:\\Documents and Settings\\Owner\\Favorites\\Microsoft Websites\\|*.*"
- C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\HTML Help\\|*.*"
- C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\MSDAIPP\\|*.*"
- C:\\Documents and Settings\\Default User\\Recent\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Mozilla Firefox\\updates\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Mozilla Firefox\\updates\\|*.*"
- C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\Network\\Downloader\\|*.*"
- C:\\Program Files\\Mozilla Firefox\\searchplugins\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|extensions.cache"
- C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|cookies.sqlite"
- C:\\Program Files\\Mozilla Firefox\\components\\|nsUpdateService.js"
- C:\\Program Files\\Mozilla Firefox\\components\\|nsUrlClassifierLib.js"
- C:\\Program Files\\Mozilla Firefox\\components\\|nsUrlClassifierListManager.js"
- C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|*.*"
- C:\\Documents and Settings\\Owner\\|avgui.log"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XPC.mfl"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XUL.mfl"
- C:\\Program Files\\Mozilla Firefox\\components\\|nsFormAutoComplete.js"
- C:\\Program Files\\Mozilla Firefox\\components\\|GPSDGeolocationProvider.js"
- C:\\Program Files\\Mozilla Firefox\\components\\|nsPlacesAutoComplete.js"
- C:\\Documents and Settings\\Owner\\Application Data\\.purple\\logs\\|*.*"
- C:\\Documents and Settings\\Default User\\Templates\\|*.*"
- C:\\Documents and Settings\\Owner\\|.recently-used.xbel"
- C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|~DF2AA8.tmp"
- C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|nss61.tmp"
- C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\nsx62.tmp\\|i"
- C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\nsx62.tmp\\|D"
- C:\\Program Files\\Mozilla Firefox\\extensions\\|*.*"
- C:\\Program Files\\Mozilla Firefox\\chrome\\|pippki.jar"
- C:\\Program Files\\Mozilla Firefox\\chrome\\|pippki.manifest"
- C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\WER896d.dir00\\"
- C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|~DFD751.tmp"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|urlclassifier3.sqlite"
- C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\WERe82a.dir00\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\WERec2d.dir00\\|*.*"
- C:\\Documents and Settings\\All Users\\Application Data\\AVG2012\\SetupBackup\\|Emailsx.cab"
- C:\\Documents and Settings\\All Users\\Application Data\\AVG2012\\SetupBackup\\|*.*"
- C:\\C:\\WINDOWS\\system32\\|netdde.exe"
- C:\\Documents and Settings\\Owner\\Application Data\\Identities\\{1F25A10D-203D-4411-9884-6CBBA98EB1EE}\\|*.*"
- C:\\Documents and Settings\\Owner\\Desktop\\|wiaservc.dll"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\4kdownload.com\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\|IconCache.db"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\|GDIPFONTCACHEV1.DAT"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Media Player\\|*.*"
- C:\\Documents and Settings\\Owner\\My Documents\\SnowFox Total Video Converter\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|secmod.db"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Xilisoft\\Online Video Downloader\\|*.*"
- C:\\WINDOWS\\l2schemas\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Infacta\\GroupMail\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\MPlayer\\|*.*"
- C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\Media Player\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Internet Explorer\\|MSIMGSIZ.DAT"
- C:\\Documents and Settings\\Default User\\Application Data\\Microsoft\\Media Player\\|*.*"
- C:\\WINDOWS\\system32\\|mnmsrvc.exe"
- C:\\Documents and Settings\\Owner\\Application Data\\SumatraPDF\\|*.*"
- C:\\Documents and Settings\\Owner\\IECompatCache\\|*.*"
- C:\\Documents and Settings\\Owner\\IETld\\|*.*"
- C:\\Documents and Settings\\Owner\\PrivacIE\\|*.*"
- C:\\Documents and Settings\\Owner\\Temporary Internet Files\\|*.*"
- C:\\Documents and Settings\\Owner\\Feeds Cache\\Local Settings\\Application Data\\Microsoft\\Feeds Cache\\|*.*"
- C:\\Documents and Settings\\NetworkService\\Local Settings\\Temporary Internet Files\\Content.IE5\\|*.*"
- C:\\Documents and Settings\\NetworkService\\Cookies\\|*.*"
- C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\Network\\Connections\\Pbk\\|*.*"
- C:\\Documents and Settings\\LocalService\\Local Settings\\Temporary Internet Files\\Content.IE5\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Microsoft\\CryptnetUrlCache\\MetaData\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Microsoft\\CryptnetUrlCache\\Content\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\bookmarkbackups\\|*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|extensions.cache"
- C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|cookies.sqlite"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XPC.mfl"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XUL.mfl"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|urlclassifier3.sqlite"
- C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|secmod.db"
- C:\\WINDOWS\\inf\\|iis.inf"
- C:\\WINDOWS\\inf\\|iis.PNF"
- C:\\Program Files\\Internet Explorer\\Connection Wizard\\|phone.icw"
- C:\\Program Files\\Internet Explorer\\Connection Wizard\\|phone.ver"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\4Media\\YouTube HD Video Converter\\cache\\|http*.*"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\4Media\\|YouTube HD Video Converter*.*"
- C:\\Program Files\\Common Files\\Microsoft Shared\\web server extensions\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\webappsstore.sqlite"
- C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\HelpCtr\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\Flash Player\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\Flash Player\\#SharedObjects\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\Flash Player\\macromedia.com\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|localstore.rdf"
- C:\\WINDOWS\\system32\\Macromed\\Flash\\|*.*"
- C:\\WINDOWS\\system32\\Macromed\\Flash\\|NPSWF32.dll"
- C:\\Documents and Settings\\Owner\\Application Data\\Adobe\\|*.*"
- C:\\Documents and Settings\\Owner\\Application Data\\Adobe\\Flash Player\\AssetCache\\|*.*"
- Here it is folks - the Windows XP spy machine.
- This list exposes where all the cookies are
- stored, all the user history logs, web cache,
- useless system cache, including where every cookie
- is planted - EVERYTHING is here. Total exposé.
- A lot of these files and cache paths will
- re-generate too, so you need something like
- CCleaner.exe to target and wipe this shit out
- at the very least once per day.
- And btw, those new systems are far worse!
- Here are some mirrors with the CCleaner, (2.75MB)
- including this list and the Tor cache exposé.
- http://f.lui.li/get_1119_b74f.html
- http://fileb.ag/tq0iqn3ofkfk
- http://www.sharedwe.com/files/742/56202_CCleaner_Cache_Exposé.zip.html
- http://duvaret.com/index.php/files/get/tJ2Jym5rOg/ccleaner-cache-expose.zip
- http://kranshy.net/files/get/CVCmv8A14B/ccleaner-cache-expose.zip
- http://www.quickupdown.com/files/get/92l7Tzlnm1/ccleaner-cache-expose.zip
- http://www.d4d.net//files/get/px6grr03WB/ccleaner-cache-expos.zip
- http://aydigital.net/upload/index.php/files/get/PxNLr3j2H5/ccleaner-cache-expose.zip
- - NOBODY
- DOWNLOAD
- Counter-spy_Manual.zip
- http://fileb.ag/yd7qsjzgjpbx
- Tor Browser Cookie Cache
- \\Tor Browser\\FirefoxPortable\\App\\Firefox\\|removed-files"
- \\Tor Browser\\FirefoxPortable\\App\\Firefox\\|updater.exe"
- \\Tor Browser\\FirefoxPortable\\App\\Firefox\\|updater.ini"
- \\Tor Browser\\FirefoxPortable\\App\\Firefox\\|update-settings.ini"
- \\Tor Browser\\FirefoxPortable\\App\\Firefox\\searchplugins\\|*.*"
- \\Tor Browser\\FirefoxPortable\\Data\\profile\\|cookies.sqlite"
- \\Tor Browser\\FirefoxPortable\\Data\\profile\\|cookies.sqlite-shm"
- \\Tor Browser\\FirefoxPortable\\Data\\profile\\|cookies.sqlite-wal"
- \\Tor Browser\\FirefoxPortable\\Data\\profile\\|formhistory.sqlite"
- \\Tor Browser\\FirefoxPortable\\Data\\profile\\|places.sqlite-shm"
- \\Tor Browser\\FirefoxPortable\\Data\\profile\\|places.sqlite"
- \\Tor Browser\\FirefoxPortable\\Data\\profile\\|places.sqlite-wal"
- \\Tor Browser\\FirefoxPortable\\Data\\profile\\bookmarkbackups\\|*.*"
- \\Tor Browser\\FirefoxPortable\\Data\\profile\\|signons.sqlite"
- \\Tor Browser\\FirefoxPortable\\Data\\profile\\startupCache\\|*.*"
- Tor stinks?
- http://cryptome.org/2013/10/nsa-tor-stinks.pdf
- “Use cookies to identify Tor users when
- they are not using Tor.”
- “Investigate Evercookie persistence.”
- Every cookie can be found within Windows systems
- and can be wiped out here ;
- C:\Documents and Settings\Owner\Application Data\Macromedia\
- Here is evercookie.sol found from an old
- bleach log.
- C:\Documents and Settings\Owner\Application Data\
- Macromedia\Flash Player\#SharedObjects\ED5YHQQU\
- bbcdn-bbnaut.ibillboard.com\server-static-files\
- bbnaut.swf\evercookie.sol
- - NOBODY