Hi,

 

 

When we are troubleshooting or just being curious, we sometimes want to know where an infected file is/was located.

In the alerts from Webroot, the locations are often described using "percentage-sign named folders", such as

 

%restore%, %cache%, %temp%, %appdata% and ?: 

In most cases, it's straightforward to translate these names into real folder names (some are even known system variables in Windows), but at other times it's not easy at all to figure out. For example, is %cache% pointing to the 'Temporary Internet Files' folder used by Internet Explorer (or Edge), and/or would the name be any different if the user had been using Firefox or Chrome to download the mailicous file? And which drive is the ?: drive

 

Is there a complete list of the abbreviated folder names available somewhere?

 

Thanks and best regards,

Erik