Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

My pc was stolen and I had Chrome with sync active on it.

Now I'm login into Chrome from a new pc and I'm seeing an autofill entry with a name and address I don't recognize, my theory is that it must be an autofill used by someone who has the computer now (the robber or a 2nd hand buyer)

I can use SQlite browser but I have no idea where to look for the synced autofill records so I can check the create date. Any ideas?

share|improve this question
    
Ha! That’s awesome. If only all criminals could be this dumb. So what happened? Did you give the address to the police to track down? –  Synetech Sep 8 '13 at 0:18

1 Answer 1

up vote 3 down vote accepted

Download SQLite Database Browser. Head over to %localappdata%\Google\Chrome\User Data\Default and copy Web Data file to a separate folder.

Now open Web Data with the SQL Lite browser. Click on Execute SQL and type

SELECT *
FROM   autofill
WHERE  VALUE LIKE 'your-autofill-entry' 

enter image description here

Make a note of the pair id, and type in

SELECT *
FROM   autofill_dates
WHERE  pair_id = number-obtained-from-above-step

That'll get you the Unix epoch of when the autofill entry was created

enter image description here

Head over to Epoch converter and you'll get the Epoch converted to the date/time you're familiar with.

share|improve this answer
    
Worked brilliantly, thanks for the clear post with the screenshots. –  Pedro Jan 20 '12 at 22:33
    
glad to help @Pedro! –  Sathya Jan 21 '12 at 4:57

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.