Windows XP Hidden Cookie Cache (Updated) - Tor Browser Cookie Cache

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
Windows XP Hidden Cookie Cache (Updated) - Tor Browser Cookie Cache
Windows XP Hidden Cookie Cache (Updated)
This was a copy taken from modified CCleaner
registry , if installed you can find it within
HKEY_CURRENT_USER\Software\Piriform\CCleaner
using regedit.exe from C:\WINDOWS\
Owner = whatever user name you have. Mine is “Owner”
Note ; Mozilla “.default” ID censored due
to security. The full path remains exposed.
Every Mozilla Firefox user has a different
.default ID, so consider it xxxxxxxx.default
- the paths shown is what you need to know.
C:\\Program Files\\Mozilla Firefox\\|updater.exe"
C:\\Program Files\\Mozilla Firefox\\|updater.ini"
C:\\Program Files\\Mozilla Firefox\\|update.locale"
C:\\Documents and Settings\\Default User\\Application Data\\Microsoft\\Internet Explorer\\|brndlog.bak"
C:\\Documents and Settings\\Default User\\Application Data\\Microsoft\\Internet Explorer\\|brndlog.txt"
C:\\Documents and Settings\\Default User\\Cookies\\|index.dat"
C:\\Documents and Settings\\Default User\\Local Settings\\|History"
C:\\Documents and Settings\\Default User\\Local Settings\\History\\History.IE5\\|*.*"
C:\\Documents and Settings\\Default User\\Local Settings\\Temp\\|*.*"
C:\\Documents and Settings\\Default User\\Local Settings\\Temporary Internet Files\\Content.IE5\\|*.*"
C:\\Documents and Settings\\Default User\\NetHood\\|*.*"
C:\\Documents and Settings\\Default User\\Cookies\\|*.*"
C:\\Documents and Settings\\Owner\\Recent\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Feeds\\Microsoft Feeds~\\|*.*"
C:\\Program Files\\Mozilla Firefox\\components\\|nsSessionStore.js"
C:\\Program Files\\Mozilla Firefox\\components\\|aboutSessionRestore.js"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Feeds\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Microsoft\\CryptnetUrlCache\\|*.*"
C:\\Documents and Settings\\All Users\\Application Data\\MFAData\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\bookmarkbackups\\|*.*"
C:\\Documents and Settings\\Owner\\Favorites\\Microsoft Websites\\|*.*"
C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\HTML Help\\|*.*"
C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\MSDAIPP\\|*.*"
C:\\Documents and Settings\\Default User\\Recent\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Mozilla Firefox\\updates\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Mozilla Firefox\\updates\\|*.*"
C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\Network\\Downloader\\|*.*"
C:\\Program Files\\Mozilla Firefox\\searchplugins\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|extensions.cache"
C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|cookies.sqlite"
C:\\Program Files\\Mozilla Firefox\\components\\|nsUpdateService.js"
C:\\Program Files\\Mozilla Firefox\\components\\|nsUrlClassifierLib.js"
C:\\Program Files\\Mozilla Firefox\\components\\|nsUrlClassifierListManager.js"
C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|*.*"
C:\\Documents and Settings\\Owner\\|avgui.log"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XPC.mfl"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XUL.mfl"
C:\\Program Files\\Mozilla Firefox\\components\\|nsFormAutoComplete.js"
C:\\Program Files\\Mozilla Firefox\\components\\|GPSDGeolocationProvider.js"
C:\\Program Files\\Mozilla Firefox\\components\\|nsPlacesAutoComplete.js"
C:\\Documents and Settings\\Owner\\Application Data\\.purple\\logs\\|*.*"
C:\\Documents and Settings\\Default User\\Templates\\|*.*"
C:\\Documents and Settings\\Owner\\|.recently-used.xbel"
C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|~DF2AA8.tmp"
C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|nss61.tmp"
C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\nsx62.tmp\\|i"
C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\nsx62.tmp\\|D"
C:\\Program Files\\Mozilla Firefox\\extensions\\|*.*"
C:\\Program Files\\Mozilla Firefox\\chrome\\|pippki.jar"
C:\\Program Files\\Mozilla Firefox\\chrome\\|pippki.manifest"
C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\WER896d.dir00\\"
C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\|~DFD751.tmp"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|urlclassifier3.sqlite"
C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\WERe82a.dir00\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Temp\\WERec2d.dir00\\|*.*"
C:\\Documents and Settings\\All Users\\Application Data\\AVG2012\\SetupBackup\\|Emailsx.cab"
C:\\Documents and Settings\\All Users\\Application Data\\AVG2012\\SetupBackup\\|*.*"
C:\\C:\\WINDOWS\\system32\\|netdde.exe"
C:\\Documents and Settings\\Owner\\Application Data\\Identities\\{1F25A10D-203D-4411-9884-6CBBA98EB1EE}\\|*.*"
C:\\Documents and Settings\\Owner\\Desktop\\|wiaservc.dll"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\4kdownload.com\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\|IconCache.db"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\|GDIPFONTCACHEV1.DAT"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Media Player\\|*.*"
C:\\Documents and Settings\\Owner\\My Documents\\SnowFox Total Video Converter\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|secmod.db"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Xilisoft\\Online Video Downloader\\|*.*"
C:\\WINDOWS\\l2schemas\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Infacta\\GroupMail\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\MPlayer\\|*.*"
C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\Media Player\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\Internet Explorer\\|MSIMGSIZ.DAT"
C:\\Documents and Settings\\Default User\\Application Data\\Microsoft\\Media Player\\|*.*"
C:\\WINDOWS\\system32\\|mnmsrvc.exe"
C:\\Documents and Settings\\Owner\\Application Data\\SumatraPDF\\|*.*"
C:\\Documents and Settings\\Owner\\IECompatCache\\|*.*"
C:\\Documents and Settings\\Owner\\IETld\\|*.*"
C:\\Documents and Settings\\Owner\\PrivacIE\\|*.*"
C:\\Documents and Settings\\Owner\\Temporary Internet Files\\|*.*"
C:\\Documents and Settings\\Owner\\Feeds Cache\\Local Settings\\Application Data\\Microsoft\\Feeds Cache\\|*.*"
C:\\Documents and Settings\\NetworkService\\Local Settings\\Temporary Internet Files\\Content.IE5\\|*.*"
C:\\Documents and Settings\\NetworkService\\Cookies\\|*.*"
C:\\Documents and Settings\\All Users\\Application Data\\Microsoft\\Network\\Connections\\Pbk\\|*.*"
C:\\Documents and Settings\\LocalService\\Local Settings\\Temporary Internet Files\\Content.IE5\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Microsoft\\CryptnetUrlCache\\MetaData\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Microsoft\\CryptnetUrlCache\\Content\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\bookmarkbackups\\|*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\OfflineCache\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|extensions.cache"
C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|cookies.sqlite"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XPC.mfl"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|XUL.mfl"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|urlclassifier3.sqlite"
C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|secmod.db"
C:\\WINDOWS\\inf\\|iis.inf"
C:\\WINDOWS\\inf\\|iis.PNF"
C:\\Program Files\\Internet Explorer\\Connection Wizard\\|phone.icw"
C:\\Program Files\\Internet Explorer\\Connection Wizard\\|phone.ver"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\4Media\\YouTube HD Video Converter\\cache\\|http*.*"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\4Media\\|YouTube HD Video Converter*.*"
C:\\Program Files\\Common Files\\Microsoft Shared\\web server extensions\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\webappsstore.sqlite"
C:\\Documents and Settings\\Owner\\Local Settings\\Application Data\\Microsoft\\HelpCtr\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\Flash Player\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\Flash Player\\#SharedObjects\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Macromedia\\Flash Player\\macromedia.com\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Mozilla\\Firefox\\Profiles\\████████.default\\|localstore.rdf"
C:\\WINDOWS\\system32\\Macromed\\Flash\\|*.*"
C:\\WINDOWS\\system32\\Macromed\\Flash\\|NPSWF32.dll"
C:\\Documents and Settings\\Owner\\Application Data\\Adobe\\|*.*"
C:\\Documents and Settings\\Owner\\Application Data\\Adobe\\Flash Player\\AssetCache\\|*.*"
Here it is folks - the Windows XP spy machine.
This list exposes where all the cookies are
stored, all the user history logs, web cache,
useless system cache, including where every cookie
is planted - EVERYTHING is here. Total exposé.
A lot of these files and cache paths will
re-generate too, so you need something like
CCleaner.exe to target and wipe this shit out
at the very least once per day.
And btw, those new systems are far worse!
Here are some mirrors with the CCleaner, (2.75MB)
including this list and the Tor cache exposé.
http://f.lui.li/get_1119_b74f.html
http://fileb.ag/tq0iqn3ofkfk
http://www.sharedwe.com/files/742/56202_CCleaner_Cache_Exposé.zip.html
http://duvaret.com/index.php/files/get/tJ2Jym5rOg/ccleaner-cache-expose.zip
http://kranshy.net/files/get/CVCmv8A14B/ccleaner-cache-expose.zip
http://www.quickupdown.com/files/get/92l7Tzlnm1/ccleaner-cache-expose.zip
http://www.d4d.net//files/get/px6grr03WB/ccleaner-cache-expos.zip
http://aydigital.net/upload/index.php/files/get/PxNLr3j2H5/ccleaner-cache-expose.zip
- NOBODY
DOWNLOAD
Counter-spy_Manual.zip
http://fileb.ag/yd7qsjzgjpbx
Tor Browser Cookie Cache
\\Tor Browser\\FirefoxPortable\\App\\Firefox\\|removed-files"
\\Tor Browser\\FirefoxPortable\\App\\Firefox\\|updater.exe"
\\Tor Browser\\FirefoxPortable\\App\\Firefox\\|updater.ini"
\\Tor Browser\\FirefoxPortable\\App\\Firefox\\|update-settings.ini"
\\Tor Browser\\FirefoxPortable\\App\\Firefox\\searchplugins\\|*.*"
\\Tor Browser\\FirefoxPortable\\Data\\profile\\|cookies.sqlite"
\\Tor Browser\\FirefoxPortable\\Data\\profile\\|cookies.sqlite-shm"
\\Tor Browser\\FirefoxPortable\\Data\\profile\\|cookies.sqlite-wal"
\\Tor Browser\\FirefoxPortable\\Data\\profile\\|formhistory.sqlite"
\\Tor Browser\\FirefoxPortable\\Data\\profile\\|places.sqlite-shm"
\\Tor Browser\\FirefoxPortable\\Data\\profile\\|places.sqlite"
\\Tor Browser\\FirefoxPortable\\Data\\profile\\|places.sqlite-wal"
\\Tor Browser\\FirefoxPortable\\Data\\profile\\bookmarkbackups\\|*.*"
\\Tor Browser\\FirefoxPortable\\Data\\profile\\|signons.sqlite"
\\Tor Browser\\FirefoxPortable\\Data\\profile\\startupCache\\|*.*"
Tor stinks?
http://cryptome.org/2013/10/nsa-tor-stinks.pdf
“Use cookies to identify Tor users when
they are not using Tor.”
“Investigate Evercookie persistence.”
Every cookie can be found within Windows systems
and can be wiped out here ;
C:\Documents and Settings\Owner\Application Data\Macromedia\
Here is evercookie.sol found from an old
bleach log.
C:\Documents and Settings\Owner\Application Data\
Macromedia\Flash Player\#SharedObjects\ED5YHQQU\
bbcdn-bbnaut.ibillboard.com\server-static-files\
bbnaut.swf\evercookie.sol
- NOBODY