From Big Lechwe, 10 Years ago, written in Plain Text.
Embed
  1. Windows XP Hidden Cookie Cache (Updated) - Tor Browser Cookie Cache
  2.  
  3. Windows XP Hidden Cookie Cache (Updated)
  4.  
  5.  
  6.    
  7. This was a copy taken from modified CCleaner
  8. registry , if installed you can find it within
  9. HKEY_CURRENT_USER\Software\Piriform\CCleaner
  10. using regedit.exe from C:\WINDOWS\
  11.  
  12. Owner = whatever user name you have. Mine is “Owner”
  13.  
  14.  Note ; Mozilla “.default” ID censored due
  15. to security. The full path remains exposed.
  16. Every Mozilla Firefox user has a different
  17. .default ID, so consider it xxxxxxxx.default
  18. - the paths shown is what you need to know.
  19.  
  20.  
  21. C:\\Program Files\\Mozilla Firefox\\|updater.exe"
  22. C:\\Program Files\\Mozilla Firefox\\|updater.ini"
  23. C:\\Program Files\\Mozilla Firefox\\|update.locale"
  24. C:\\Documents and Settings\\Default User\\Application Data\\Microsoft\\Internet Explorer\\|brndlog.bak"
  25. C:\\Documents and Settings\\Default User\\Application Data\\Microsoft\\Internet Explorer\\|brndlog.txt"
  26. C:\\Documents and Settings\\Default User\\Cookies\\|index.dat"
  27. C:\\Documents and Settings\\Default User\\Local Settings\\|History"
  28. C:\\Documents and Settings\\Default User\\Local Settings\\History\\History.IE5\\|*.*"
  29. C:\\Documents and Settings\\Default User\\Local Settings\\Temp\\|*.*"
  30. C:\\Documents and Settings\\Default User\\Local Settings\\Temporary Internet Files\\Content.IE5\\|*.*"
  31. C:\\Documents and Settings\\Default User\\NetHood\\|*.*"
  32. C:\\Documents and Settings\\Default User\\Cookies\\|*.*"
  33. C:\\Documents and Settings\\Owner\\Recent\\|*.*"
  34. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
  35. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Feeds\\Microsoft Feeds~\\|*.*"
  36. C:\\Program Files\\Mozilla Firefox\\components\\|nsSessionStore.js"
  37. C:\\Program Files\\Mozilla Firefox\\components\\|aboutSessionRestore.js"
  38. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Feeds\\|*.*"
  39. C:\\Documents and Settings\\Owner\\Application Data\\Microsoft\\CryptnetUrlCache\\|*.*"
  40. C:\\Documents and Settings\\All Users\\Application Data\\MFAData\\|*.*"
  41. C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\bookmarkbackups\\|*.*"
  42. C:\\Documents and Settings\\Owner\\Favorites\\Microsoft Websites\\|*.*"
  43. C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\HTML Help\\|*.*"
  44. C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\MSDAIPP\\|*.*"
  45. C:\\Documents and Settings\\Default User\\Recent\\|*.*"
  46. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Mozilla Firefox\\updates\\|*.*"
  47. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
  48. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Mozilla Firefox\\updates\\|*.*"
  49. C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\Network\\Downloader\\|*.*"
  50. C:\\Program Files\\Mozilla Firefox\\searchplugins\\|*.*"
  51. C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|extensions.cache"
  52. C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|cookies.sqlite"
  53. C:\\Program Files\\Mozilla Firefox\\components\\|nsUpdateService.js"
  54. C:\\Program Files\\Mozilla Firefox\\components\\|nsUrlClassifierLib.js"
  55. C:\\Program Files\\Mozilla Firefox\\components\\|nsUrlClassifierListManager.js"
  56. C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|*.*"
  57. C:\\Documents and Settings\\Owner\\|avgui.log"
  58. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XPC.mfl"
  59. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XUL.mfl"
  60. C:\\Program Files\\Mozilla Firefox\\components\\|nsFormAutoComplete.js"
  61. C:\\Program Files\\Mozilla Firefox\\components\\|GPSDGeolocationProvider.js"
  62. C:\\Program Files\\Mozilla Firefox\\components\\|nsPlacesAutoComplete.js"
  63. C:\\Documents and Settings\\Owner\\Application Data\\.purple\\logs\\|*.*"
  64. C:\\Documents and Settings\\Default User\\Templates\\|*.*"
  65. C:\\Documents and Settings\\Owner\\|.recently-used.xbel"
  66. C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|~DF2AA8.tmp"
  67. C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|nss61.tmp"
  68. C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\nsx62.tmp\\|i"
  69. C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\nsx62.tmp\\|D"
  70. C:\\Program Files\\Mozilla Firefox\\extensions\\|*.*"
  71. C:\\Program Files\\Mozilla Firefox\\chrome\\|pippki.jar"
  72. C:\\Program Files\\Mozilla Firefox\\chrome\\|pippki.manifest"
  73. C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\WER896d.dir00\\"
  74. C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|~DFD751.tmp"
  75. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|urlclassifier3.sqlite"
  76. C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\WERe82a.dir00\\|*.*"
  77. C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\WERec2d.dir00\\|*.*"
  78. C:\\Documents and Settings\\All Users\\Application Data\\AVG2012\\SetupBackup\\|Emailsx.cab"
  79. C:\\Documents and Settings\\All Users\\Application Data\\AVG2012\\SetupBackup\\|*.*"
  80. C:\\C:\\WINDOWS\\system32\\|netdde.exe"
  81. C:\\Documents and Settings\\Owner\\Application Data\\Identities\\{1F25A10D-203D-4411-9884-6CBBA98EB1EE}\\|*.*"
  82. C:\\Documents and Settings\\Owner\\Desktop\\|wiaservc.dll"
  83. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\4kdownload.com\\|*.*"
  84. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\|IconCache.db"
  85. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\|GDIPFONTCACHEV1.DAT"
  86. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Media Player\\|*.*"
  87. C:\\Documents and Settings\\Owner\\My Documents\\SnowFox Total Video Converter\\|*.*"
  88. C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|secmod.db"
  89. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Xilisoft\\Online Video Downloader\\|*.*"
  90. C:\\WINDOWS\\l2schemas\\|*.*"
  91. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Infacta\\GroupMail\\|*.*"
  92. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\MPlayer\\|*.*"
  93. C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\Media Player\\|*.*"
  94. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Internet Explorer\\|MSIMGSIZ.DAT"
  95. C:\\Documents and Settings\\Default User\\Application Data\\Microsoft\\Media Player\\|*.*"
  96. C:\\WINDOWS\\system32\\|mnmsrvc.exe"
  97. C:\\Documents and Settings\\Owner\\Application Data\\SumatraPDF\\|*.*"
  98. C:\\Documents and Settings\\Owner\\IECompatCache\\|*.*"
  99. C:\\Documents and Settings\\Owner\\IETld\\|*.*"
  100. C:\\Documents and Settings\\Owner\\PrivacIE\\|*.*"
  101. C:\\Documents and Settings\\Owner\\Temporary Internet Files\\|*.*"
  102. C:\\Documents and Settings\\Owner\\Feeds Cache\\Local Settings\\Application Data\\Microsoft\\Feeds Cache\\|*.*"
  103. C:\\Documents and Settings\\NetworkService\\Local Settings\\Temporary Internet Files\\Content.IE5\\|*.*"
  104. C:\\Documents and Settings\\NetworkService\\Cookies\\|*.*"
  105. C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\Network\\Connections\\Pbk\\|*.*"
  106. C:\\Documents and Settings\\LocalService\\Local Settings\\Temporary Internet Files\\Content.IE5\\|*.*"
  107. C:\\Documents and Settings\\Owner\\Application Data\\Microsoft\\CryptnetUrlCache\\MetaData\\|*.*"
  108. C:\\Documents and Settings\\Owner\\Application Data\\Microsoft\\CryptnetUrlCache\\Content\\|*.*"
  109. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
  110. C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\bookmarkbackups\\|*.*"
  111. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
  112. C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|extensions.cache"
  113. C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|cookies.sqlite"
  114. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XPC.mfl"
  115. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XUL.mfl"
  116. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|urlclassifier3.sqlite"
  117. C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|secmod.db"
  118. C:\\WINDOWS\\inf\\|iis.inf"
  119. C:\\WINDOWS\\inf\\|iis.PNF"
  120. C:\\Program Files\\Internet Explorer\\Connection Wizard\\|phone.icw"
  121. C:\\Program Files\\Internet Explorer\\Connection Wizard\\|phone.ver"
  122. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\4Media\\YouTube HD Video Converter\\cache\\|http*.*"
  123. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\4Media\\|YouTube HD Video Converter*.*"
  124. C:\\Program Files\\Common Files\\Microsoft Shared\\web server extensions\\|*.*"
  125. C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\webappsstore.sqlite"
  126. C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\HelpCtr\\|*.*"
  127. C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\|*.*"
  128. C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\Flash Player\\|*.*"
  129. C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\Flash Player\\#SharedObjects\\|*.*"
  130. C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\Flash Player\\macromedia.com\\|*.*"
  131. C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|localstore.rdf"
  132. C:\\WINDOWS\\system32\\Macromed\\Flash\\|*.*"
  133. C:\\WINDOWS\\system32\\Macromed\\Flash\\|NPSWF32.dll"
  134. C:\\Documents and Settings\\Owner\\Application Data\\Adobe\\|*.*"
  135. C:\\Documents and Settings\\Owner\\Application Data\\Adobe\\Flash Player\\AssetCache\\|*.*"
  136.    
  137.    
  138. Here it is folks - the Windows XP spy machine.
  139.  
  140. This list exposes where all the cookies are
  141. stored, all the user history logs, web cache,
  142. useless system cache, including where every cookie
  143. is planted - EVERYTHING is here. Total exposé.
  144.    
  145. A lot of these files and cache paths will
  146. re-generate too, so you need something like
  147. CCleaner.exe to target and wipe this shit out
  148. at the very least once per day.
  149.  
  150. And btw, those new systems are far worse!
  151.    
  152. Here are some mirrors with the CCleaner, (2.75MB)
  153. including this list and the Tor cache exposé.
  154.  
  155. http://f.lui.li/get_1119_b74f.html
  156. http://fileb.ag/tq0iqn3ofkfk
  157. http://www.sharedwe.com/files/742/56202_CCleaner_Cache_Exposé.zip.html
  158. http://duvaret.com/index.php/files/get/tJ2Jym5rOg/ccleaner-cache-expose.zip
  159. http://kranshy.net/files/get/CVCmv8A14B/ccleaner-cache-expose.zip
  160. http://www.quickupdown.com/files/get/92l7Tzlnm1/ccleaner-cache-expose.zip
  161. http://www.d4d.net//files/get/px6grr03WB/ccleaner-cache-expos.zip
  162. http://aydigital.net/upload/index.php/files/get/PxNLr3j2H5/ccleaner-cache-expose.zip
  163.    
  164.    - NOBODY
  165.    
  166. DOWNLOAD
  167. Counter-spy_Manual.zip
  168. http://fileb.ag/yd7qsjzgjpbx
  169.  
  170.  
  171.  
  172. Tor Browser Cookie Cache
  173.  
  174. \\Tor Browser\\FirefoxPortable\\App\\Firefox\\|removed-files"
  175. \\Tor Browser\\FirefoxPortable\\App\\Firefox\\|updater.exe"
  176. \\Tor Browser\\FirefoxPortable\\App\\Firefox\\|updater.ini"
  177. \\Tor Browser\\FirefoxPortable\\App\\Firefox\\|update-settings.ini"
  178. \\Tor Browser\\FirefoxPortable\\App\\Firefox\\searchplugins\\|*.*"
  179. \\Tor Browser\\FirefoxPortable\\Data\\profile\\|cookies.sqlite"
  180. \\Tor Browser\\FirefoxPortable\\Data\\profile\\|cookies.sqlite-shm"
  181. \\Tor Browser\\FirefoxPortable\\Data\\profile\\|cookies.sqlite-wal"
  182. \\Tor Browser\\FirefoxPortable\\Data\\profile\\|formhistory.sqlite"
  183. \\Tor Browser\\FirefoxPortable\\Data\\profile\\|places.sqlite-shm"
  184. \\Tor Browser\\FirefoxPortable\\Data\\profile\\|places.sqlite"
  185. \\Tor Browser\\FirefoxPortable\\Data\\profile\\|places.sqlite-wal"
  186. \\Tor Browser\\FirefoxPortable\\Data\\profile\\bookmarkbackups\\|*.*"
  187. \\Tor Browser\\FirefoxPortable\\Data\\profile\\|signons.sqlite"
  188. \\Tor Browser\\FirefoxPortable\\Data\\profile\\startupCache\\|*.*"
  189.    
  190.    
  191. Tor stinks?
  192.  
  193. http://cryptome.org/2013/10/nsa-tor-stinks.pdf
  194.  
  195.  “Use cookies to identify Tor users when
  196. they are not using Tor.”
  197.  
  198. “Investigate Evercookie persistence.”
  199.  
  200. Every cookie can be found within Windows systems
  201. and can be wiped out here ;
  202.  
  203. C:\Documents and Settings\Owner\Application Data\Macromedia\
  204.  
  205. Here is evercookie.sol found from an old
  206. bleach log.
  207.  
  208. C:\Documents and Settings\Owner\Application Data\
  209. Macromedia\Flash Player\#SharedObjects\ED5YHQQU\
  210. bbcdn-bbnaut.ibillboard.com\server-static-files\
  211. bbnaut.swf\evercookie.sol
  212.    
  213.    
  214.   - NOBODY
  215.