%LOCALAPPDATA%\NordVPN\ProfileOptimization
new catalogue created
%LOCALAPPDATA%\NordVPN\logs
new catalogue created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky
new catalogue created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0
new catalogue created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\user.config
file renamed
%LOCALAPPDATA%\NordVPN\Updates
new catalogue created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\system32\gameux.dll,-10103
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\system32\gameux.dll,-10059
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\system32\gameux.dll,-10057
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\system32\gameux.dll,-10209
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\system32\gameux.dll,-10058
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\system32\gameux.dll,-10060
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\system32\gameux.dll,-10061
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\LPRES.DLL,-107
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\LPRES.DLL,-103
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\LPRES.DLL,-102
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\LPRES.DLL,-104
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\LPRES.DLL,-101
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\PROGRA~2\COMMON~1\LIGHTS~1\lssmui\lssmui.dll,-106
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\PROGRA~2\COMMON~1\LIGHTS~1\lssmui\lssmui.dll,-108
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\PROGRA~2\COMMON~1\LIGHTS~1\lssmui\lssmui.dll,-110
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\system32\sdcpl.dll,-101
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\system32\recdisc.exe,-2000
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\Windows\system32\msra.exe,-100
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\PROGRA~2\MUVEET~1\MUVEER~1\LANGUA~1\shortcut.dll,-101
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\PROGRA~2\MUVEET~1\MUVEER~1\LANGUA~1\shortcut.dll,-104
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\PROGRA~2\HEWLET~1\HPTCS~1\Shortcut.dll,-101
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@C:\PROGRA~2\WIC4A1~1\FAMILY~1\fsui.dll,-32000
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@gameux.dll,-10060
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@gameux.dll,-10101
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@gameux.dll,-10058
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@gameux.dll,-10061
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@gameux.dll,-10059
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@gameux.dll,-10055
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@gameux.dll,-10057
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@gameux.dll,-10103
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@gameux.dll,-10056
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@gameux.dll,-10054
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@gameux.dll,-10102
new registry key parameter created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\QWDESB0UJ9BI08CDKFM4.temp
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\76435HJSK1WJW3U66WQ3.temp
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\b6b60df95259c8e5.customDestinations-ms~RF48a15a9.TMP
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\b6b60df95259c8e5.customDestinations-ms~RF48a15a9.TMP
file renamed
HKEY_USERS\%ID-USER-SID%_CLASSES\NordVPN.Notification
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\NordVPN.Notification\\URL Protocol
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\NordVPN.Notification\shell
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\NordVPN.Notification\shell\open
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\NordVPN.Notification\shell\open\command
new registry key created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@%SystemRoot%\system32\qagentrt.dll,-10
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@%SystemRoot%\System32\fveui.dll,-843
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@%SystemRoot%\System32\fveui.dll,-844
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\D\52C64B7E\\@%SystemRoot%\System32\wuaueng.dll,-400
new registry key parameter created
%LOCALAPPDATA%\NordVPN\logs\app-2021-02-13.nwl
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\xmoisob2.tmp
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\E4COB80DEV37NT4JC7E5.temp
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\xmoisob2.newcfg
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\U5DC7R8G3Z02GRCX9GZN.temp
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\bokp5odt.tmp
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\1ab724316049531.customDestinations-ms~RF265635.TMP
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\bokp5odt.newcfg
new file created
%APPDATA%\Microsoft\Windows\Recent\CustomDestinations\1ab724316049531.customDestinations-ms~RF265635.TMP
file renamed
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\pv4pqmiz.tmp
new file created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\8d\B1A07F78\\@%SystemRoot%\system32\dnsapi.dll,-103
new registry key parameter created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\pv4pqmiz.newcfg
new file created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\8d\B1A07F78\\@%SystemRoot%\System32\fveui.dll,-843
new registry key parameter created
%LOCALAPPDATA%\IsolatedStorage
new catalogue created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\8d\B1A07F78\\@%SystemRoot%\System32\fveui.dll,-844
new registry key parameter created
%LOCALAPPDATA%\IsolatedStorage\ssdglqj4.yy1
new catalogue created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\8d\B1A07F78\\@%SystemRoot%\System32\wuaueng.dll,-400
new registry key parameter created
%LOCALAPPDATA%\IsolatedStorage\ssdglqj4.yy1\53x204ha.yj3
new catalogue created
HKEY_USERS\%ID-USER-SID%_Classes\Local Settings\MuiCache\8d\B1A07F78\\@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
new registry key parameter created
%LOCALAPPDATA%\IsolatedStorage\ssdglqj4.yy1\53x204ha.yj3\Publisher.ez3xxnhlnj2ozmc2ojle3nkxt5bx5f3j
new catalogue created
%LOCALAPPDATA%\IsolatedStorage\ssdglqj4.yy1\53x204ha.yj3\Publisher.ez3xxnhlnj2ozmc2ojle3nkxt5bx5f3j\identity.dat
new file created
%LOCALAPPDATA%\NordVPN\logs\app-2021-01-11.nwl
new file created
%LOCALAPPDATA%\IsolatedStorage\ssdglqj4.yy1\53x204ha.yj3\Publisher.ez3xxnhlnj2ozmc2ojle3nkxt5bx5f3j\Url.siilh4zpw52bywxu1hu1xqttvpm2ncq0
new catalogue created
%LOCALAPPDATA%\IsolatedStorage\ssdglqj4.yy1\53x204ha.yj3\Publisher.ez3xxnhlnj2ozmc2ojle3nkxt5bx5f3j\Url.siilh4zpw52bywxu1hu1xqttvpm2ncq0\identity.dat
new file created
%LOCALAPPDATA%\IsolatedStorage\ssdglqj4.yy1\53x204ha.yj3\Publisher.ez3xxnhlnj2ozmc2ojle3nkxt5bx5f3j\Url.siilh4zpw52bywxu1hu1xqttvpm2ncq0\Files
new catalogue created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\eohmok5n.tmp
new file created
%LOCALAPPDATA%\NordVPN\Updates\channel-23
new catalogue created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\eohmok5n.newcfg
new file created
%LOCALAPPDATA%\NordVPN\Updates\channel-23\6.23.11.0
new catalogue created
%LOCALAPPDATA%\NordVPN\Updates\channel-23\6.23.11.0\zv0ua1vw.exe
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\tx5f1phv.tmp
new file created
%LOCALAPPDATA%\IsolatedStorage\ssdglqj4.yy1\53x204ha.yj3\Publisher.ez3xxnhlnj2ozmc2ojle3nkxt5bx5f3j\info.dat
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\tx5f1phv.newcfg
new file created
%LOCALAPPDATA%\IsolatedStorage\ssdglqj4.yy1\53x204ha.yj3\Publisher.ez3xxnhlnj2ozmc2ojle3nkxt5bx5f3j\Url.siilh4zpw52bywxu1hu1xqttvpm2ncq0\Files\StoredUpdates.dat
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\kurmebde.tmp
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\trededs2.tmp
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\kurmebde.newcfg
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\trededs2.newcfg
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\uiqr3gg0.tmp
new file created
%LOCALAPPDATA%\NordVPN\ProfileOptimization\Startup.profile
new file created
%LOCALAPPDATA%\NordVPN\NordVPN.exe_Url_htakemwyuyjotcmrvjkhtpa53zxkjlky\6.23.11.0\uiqr3gg0.newcfg
new file created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\F\52C64B7E\\@C:\Windows\system32\AccessibilityCpl.dll,-10
new registry key parameter created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\F\52C64B7E\\@C:\Windows\System32\ie4uinit.exe,-737
new registry key parameter created
%LOCALAPPDATA%\NordVPN\Updates\channel-33
new catalogue created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\F\52C64B7E\\@C:\Windows\system32\wucltux.dll,-1
new registry key parameter created
%LOCALAPPDATA%\NordVPN\Updates\channel-33\6.23.11.0
new catalogue created
HKEY_USERS\%ID-USER-SID%_CLASSES\Local Settings\MuiCache\F\52C64B7E\\@C:\Program Files\Windows Sidebar\sidebar.exe,-1005
new registry key parameter created
%LOCALAPPDATA%\NordVPN\Updates\channel-33\6.23.11.0\vpkwjjmn.exe
new file created