
Malware would need to know where...
"The malware would also need to know exactly where to look on the machine in order to get the cookies."
The malware "needs" to know, in advance? It couldn't be programmed to execute a clever search within the most likely folders?