Nord VPN is keeping local logs, how to automate log purging?OpenVPN DNS: VPN DNS stomping local VPNLog...

School performs periodic password audits. Is my password compromised?

What would be the most expensive material to an intergalactic society?

How can I portion out frozen cookie dough?

Why would /etc/passwd be used every time someone executes `ls -l` command?

Help! My Character is too much for her story!

Why do we call complex numbers “numbers” but we don’t consider 2-vectors numbers?

Create chunks from an array

Why do phishing e-mails use faked e-mail addresses instead of the real one?

Rationale to prefer local variables over instance variables?

Does an unused member variable take up memory?

Why isn't P and P/poly trivially the same?

Why aren't there more Gauls like Obelix?

How would an energy-based "projectile" blow up a spaceship?

What exactly is the meaning of "fine wine"?

A running toilet that stops itself

Why is there an extra space when I type "ls" on the Desktop?

Use Mercury as quenching liquid for swords?

Boss Telling direct supervisor I snitched

I've given my players a lot of magic items. Is it reasonable for me to give them harder encounters?

Inorganic chemistry handbook with reaction lists

I am the person who abides by rules but breaks the rules . Who am I

ESPP--any reason not to go all in?

Short SF story. Females use stingers to implant eggs in yearfathers

Professor forcing me to attend a conference, I can't afford even with 50% funding



Nord VPN is keeping local logs, how to automate log purging?


OpenVPN DNS: VPN DNS stomping local VPNLog internet requests made by vpn clientVPN Log Files WindowsAutomate downloads which could be interrupted by VPN/ Download failuresAccess local network resources remotely using OpenVPNSafety of local network over VPNCan't access point to point VPN from behind local serverVPN and local Apache port forwardingWindows Remote access and shares issueUsing VPN to connect local office resources to odoo webserver













1















I have found that Nord VPN is keeping detailed logs on its user's computers.



It stores them in: C:UsersUserNameAppDataLocalNordVPNlogs
Each is labeled by day



I spoke with Nord support and they told me their is no way to stop them from being created.
I am not a good programmer, does anyone know of a way to automatically purge/delete the log files?



An auto purging application could also help me clear out the logs of some other pesky programs as well.



Thank you in advance!










share|improve this question













migrated from security.stackexchange.com 10 hours ago


This question came from our site for information security professionals.



















  • You could try setting the access control list (ACL) on the directory to disallow file creation by any user except SYSTEM. Might cause Nord to crash though, depending on how it handles errors in logging.

    – Polynomial
    yesterday











  • @Polynomial I like your thinking. If worse comes to worse I will give that a try for sure. In the meantime I hope I can find some automagical program that can regularly cure me off all of these nasty logs. Like CC Cleaner only more competent.

    – TritiumCat
    yesterday











  • From a security perspective, @Polynomial's solution is the best you can get outside of disabling logging all together. With whatever program you want, your logs will still be on the disk (and recoverable if deleted insecurely). You want them to never be written ideally.

    – Sirens
    yesterday











  • @Sirens I can't "disable logging all together" or I would. These logs are generated by Nord VPN itself. Recovering data is not easy, but that's why I used the term purge. Encrypting/Hashing the files then deleting them on a section of the disk that is set to be overwritten would work fine and should not be hard. Most AV have the feature built in. What I am looking to do is some simple automation but hardly anyone saw this post so I guess I'll look for some third party tools then try Polynomial's idea.

    – TritiumCat
    23 hours ago
















1















I have found that Nord VPN is keeping detailed logs on its user's computers.



It stores them in: C:UsersUserNameAppDataLocalNordVPNlogs
Each is labeled by day



I spoke with Nord support and they told me their is no way to stop them from being created.
I am not a good programmer, does anyone know of a way to automatically purge/delete the log files?



An auto purging application could also help me clear out the logs of some other pesky programs as well.



Thank you in advance!










share|improve this question













migrated from security.stackexchange.com 10 hours ago


This question came from our site for information security professionals.



















  • You could try setting the access control list (ACL) on the directory to disallow file creation by any user except SYSTEM. Might cause Nord to crash though, depending on how it handles errors in logging.

    – Polynomial
    yesterday











  • @Polynomial I like your thinking. If worse comes to worse I will give that a try for sure. In the meantime I hope I can find some automagical program that can regularly cure me off all of these nasty logs. Like CC Cleaner only more competent.

    – TritiumCat
    yesterday











  • From a security perspective, @Polynomial's solution is the best you can get outside of disabling logging all together. With whatever program you want, your logs will still be on the disk (and recoverable if deleted insecurely). You want them to never be written ideally.

    – Sirens
    yesterday











  • @Sirens I can't "disable logging all together" or I would. These logs are generated by Nord VPN itself. Recovering data is not easy, but that's why I used the term purge. Encrypting/Hashing the files then deleting them on a section of the disk that is set to be overwritten would work fine and should not be hard. Most AV have the feature built in. What I am looking to do is some simple automation but hardly anyone saw this post so I guess I'll look for some third party tools then try Polynomial's idea.

    – TritiumCat
    23 hours ago














1












1








1








I have found that Nord VPN is keeping detailed logs on its user's computers.



It stores them in: C:UsersUserNameAppDataLocalNordVPNlogs
Each is labeled by day



I spoke with Nord support and they told me their is no way to stop them from being created.
I am not a good programmer, does anyone know of a way to automatically purge/delete the log files?



An auto purging application could also help me clear out the logs of some other pesky programs as well.



Thank you in advance!










share|improve this question














I have found that Nord VPN is keeping detailed logs on its user's computers.



It stores them in: C:UsersUserNameAppDataLocalNordVPNlogs
Each is labeled by day



I spoke with Nord support and they told me their is no way to stop them from being created.
I am not a good programmer, does anyone know of a way to automatically purge/delete the log files?



An auto purging application could also help me clear out the logs of some other pesky programs as well.



Thank you in advance!







vpn logging openvpn automation






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked yesterday







TritiumCat











migrated from security.stackexchange.com 10 hours ago


This question came from our site for information security professionals.









migrated from security.stackexchange.com 10 hours ago


This question came from our site for information security professionals.















  • You could try setting the access control list (ACL) on the directory to disallow file creation by any user except SYSTEM. Might cause Nord to crash though, depending on how it handles errors in logging.

    – Polynomial
    yesterday











  • @Polynomial I like your thinking. If worse comes to worse I will give that a try for sure. In the meantime I hope I can find some automagical program that can regularly cure me off all of these nasty logs. Like CC Cleaner only more competent.

    – TritiumCat
    yesterday











  • From a security perspective, @Polynomial's solution is the best you can get outside of disabling logging all together. With whatever program you want, your logs will still be on the disk (and recoverable if deleted insecurely). You want them to never be written ideally.

    – Sirens
    yesterday











  • @Sirens I can't "disable logging all together" or I would. These logs are generated by Nord VPN itself. Recovering data is not easy, but that's why I used the term purge. Encrypting/Hashing the files then deleting them on a section of the disk that is set to be overwritten would work fine and should not be hard. Most AV have the feature built in. What I am looking to do is some simple automation but hardly anyone saw this post so I guess I'll look for some third party tools then try Polynomial's idea.

    – TritiumCat
    23 hours ago



















  • You could try setting the access control list (ACL) on the directory to disallow file creation by any user except SYSTEM. Might cause Nord to crash though, depending on how it handles errors in logging.

    – Polynomial
    yesterday











  • @Polynomial I like your thinking. If worse comes to worse I will give that a try for sure. In the meantime I hope I can find some automagical program that can regularly cure me off all of these nasty logs. Like CC Cleaner only more competent.

    – TritiumCat
    yesterday











  • From a security perspective, @Polynomial's solution is the best you can get outside of disabling logging all together. With whatever program you want, your logs will still be on the disk (and recoverable if deleted insecurely). You want them to never be written ideally.

    – Sirens
    yesterday











  • @Sirens I can't "disable logging all together" or I would. These logs are generated by Nord VPN itself. Recovering data is not easy, but that's why I used the term purge. Encrypting/Hashing the files then deleting them on a section of the disk that is set to be overwritten would work fine and should not be hard. Most AV have the feature built in. What I am looking to do is some simple automation but hardly anyone saw this post so I guess I'll look for some third party tools then try Polynomial's idea.

    – TritiumCat
    23 hours ago

















You could try setting the access control list (ACL) on the directory to disallow file creation by any user except SYSTEM. Might cause Nord to crash though, depending on how it handles errors in logging.

– Polynomial
yesterday





You could try setting the access control list (ACL) on the directory to disallow file creation by any user except SYSTEM. Might cause Nord to crash though, depending on how it handles errors in logging.

– Polynomial
yesterday













@Polynomial I like your thinking. If worse comes to worse I will give that a try for sure. In the meantime I hope I can find some automagical program that can regularly cure me off all of these nasty logs. Like CC Cleaner only more competent.

– TritiumCat
yesterday





@Polynomial I like your thinking. If worse comes to worse I will give that a try for sure. In the meantime I hope I can find some automagical program that can regularly cure me off all of these nasty logs. Like CC Cleaner only more competent.

– TritiumCat
yesterday













From a security perspective, @Polynomial's solution is the best you can get outside of disabling logging all together. With whatever program you want, your logs will still be on the disk (and recoverable if deleted insecurely). You want them to never be written ideally.

– Sirens
yesterday





From a security perspective, @Polynomial's solution is the best you can get outside of disabling logging all together. With whatever program you want, your logs will still be on the disk (and recoverable if deleted insecurely). You want them to never be written ideally.

– Sirens
yesterday













@Sirens I can't "disable logging all together" or I would. These logs are generated by Nord VPN itself. Recovering data is not easy, but that's why I used the term purge. Encrypting/Hashing the files then deleting them on a section of the disk that is set to be overwritten would work fine and should not be hard. Most AV have the feature built in. What I am looking to do is some simple automation but hardly anyone saw this post so I guess I'll look for some third party tools then try Polynomial's idea.

– TritiumCat
23 hours ago





@Sirens I can't "disable logging all together" or I would. These logs are generated by Nord VPN itself. Recovering data is not easy, but that's why I used the term purge. Encrypting/Hashing the files then deleting them on a section of the disk that is set to be overwritten would work fine and should not be hard. Most AV have the feature built in. What I am looking to do is some simple automation but hardly anyone saw this post so I guess I'll look for some third party tools then try Polynomial's idea.

– TritiumCat
23 hours ago










1 Answer
1






active

oldest

votes


















0














No need for an application: a simple script can handle this.



If the drive is encrypted, using the native del /q would do. If the drive is not encrypted, you'd need to overwrite the files: I recommend Sysinternals SDelete as it's a command line tool you can use as a replacement in the same script. Keep in mind that SDelete might not work on SSD drives.



This deleteNordVPNlogs.cmd script will loop through the Nord VPN log files and remove every log file except for today's log which may still be in use and possibly cause Nord VPN to crash. You can run this manually or e.g. through the Task Scheduler. Depending on your regional settings you may need to correct the offsets for extracting the year, month and day from %DATE%. Choose between del and sdelete etc.



:: A .cmd script for removing Nord VPN logs.
:: https://security.stackexchange.com/questions/204992/
@echo off

:: Change the offsets (~10, ~4, ~7) depending on your regional settings!
:: You can find the correct positions from 'echo %DATE%'
set year=%date:~10,4%
set month=%date:~4,2%
set day=%date:~7,2%

set logdirpath=%LocalAppData%NordVPNlogs

:: Deleting the active log file might cause problems.
set "todayslog=%logdirpath%app-%year%-%month%-%day%.nwl"

echo Removing all Nord VPN log files except %todayslog% ...

:: Loop through the log files
for /r %logdirpath% %%i in ( "app-*.nwl" ) do (
if not %%i==%todayslog% (
echo I just copypasted this instead of modifying the script.
REM Choose one:
REM del /q "%%i"
REM "C:Program FilesSysinternalsSuitesdelete.exe" -p 7 -r "%%i"
)
)


This can be modified for any other logs by altering the logdirpath and log file naming pattern.






share|improve this answer























    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "3"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1412484%2fnord-vpn-is-keeping-local-logs-how-to-automate-log-purging%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown
























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    No need for an application: a simple script can handle this.



    If the drive is encrypted, using the native del /q would do. If the drive is not encrypted, you'd need to overwrite the files: I recommend Sysinternals SDelete as it's a command line tool you can use as a replacement in the same script. Keep in mind that SDelete might not work on SSD drives.



    This deleteNordVPNlogs.cmd script will loop through the Nord VPN log files and remove every log file except for today's log which may still be in use and possibly cause Nord VPN to crash. You can run this manually or e.g. through the Task Scheduler. Depending on your regional settings you may need to correct the offsets for extracting the year, month and day from %DATE%. Choose between del and sdelete etc.



    :: A .cmd script for removing Nord VPN logs.
    :: https://security.stackexchange.com/questions/204992/
    @echo off

    :: Change the offsets (~10, ~4, ~7) depending on your regional settings!
    :: You can find the correct positions from 'echo %DATE%'
    set year=%date:~10,4%
    set month=%date:~4,2%
    set day=%date:~7,2%

    set logdirpath=%LocalAppData%NordVPNlogs

    :: Deleting the active log file might cause problems.
    set "todayslog=%logdirpath%app-%year%-%month%-%day%.nwl"

    echo Removing all Nord VPN log files except %todayslog% ...

    :: Loop through the log files
    for /r %logdirpath% %%i in ( "app-*.nwl" ) do (
    if not %%i==%todayslog% (
    echo I just copypasted this instead of modifying the script.
    REM Choose one:
    REM del /q "%%i"
    REM "C:Program FilesSysinternalsSuitesdelete.exe" -p 7 -r "%%i"
    )
    )


    This can be modified for any other logs by altering the logdirpath and log file naming pattern.






    share|improve this answer




























      0














      No need for an application: a simple script can handle this.



      If the drive is encrypted, using the native del /q would do. If the drive is not encrypted, you'd need to overwrite the files: I recommend Sysinternals SDelete as it's a command line tool you can use as a replacement in the same script. Keep in mind that SDelete might not work on SSD drives.



      This deleteNordVPNlogs.cmd script will loop through the Nord VPN log files and remove every log file except for today's log which may still be in use and possibly cause Nord VPN to crash. You can run this manually or e.g. through the Task Scheduler. Depending on your regional settings you may need to correct the offsets for extracting the year, month and day from %DATE%. Choose between del and sdelete etc.



      :: A .cmd script for removing Nord VPN logs.
      :: https://security.stackexchange.com/questions/204992/
      @echo off

      :: Change the offsets (~10, ~4, ~7) depending on your regional settings!
      :: You can find the correct positions from 'echo %DATE%'
      set year=%date:~10,4%
      set month=%date:~4,2%
      set day=%date:~7,2%

      set logdirpath=%LocalAppData%NordVPNlogs

      :: Deleting the active log file might cause problems.
      set "todayslog=%logdirpath%app-%year%-%month%-%day%.nwl"

      echo Removing all Nord VPN log files except %todayslog% ...

      :: Loop through the log files
      for /r %logdirpath% %%i in ( "app-*.nwl" ) do (
      if not %%i==%todayslog% (
      echo I just copypasted this instead of modifying the script.
      REM Choose one:
      REM del /q "%%i"
      REM "C:Program FilesSysinternalsSuitesdelete.exe" -p 7 -r "%%i"
      )
      )


      This can be modified for any other logs by altering the logdirpath and log file naming pattern.






      share|improve this answer


























        0












        0








        0







        No need for an application: a simple script can handle this.



        If the drive is encrypted, using the native del /q would do. If the drive is not encrypted, you'd need to overwrite the files: I recommend Sysinternals SDelete as it's a command line tool you can use as a replacement in the same script. Keep in mind that SDelete might not work on SSD drives.



        This deleteNordVPNlogs.cmd script will loop through the Nord VPN log files and remove every log file except for today's log which may still be in use and possibly cause Nord VPN to crash. You can run this manually or e.g. through the Task Scheduler. Depending on your regional settings you may need to correct the offsets for extracting the year, month and day from %DATE%. Choose between del and sdelete etc.



        :: A .cmd script for removing Nord VPN logs.
        :: https://security.stackexchange.com/questions/204992/
        @echo off

        :: Change the offsets (~10, ~4, ~7) depending on your regional settings!
        :: You can find the correct positions from 'echo %DATE%'
        set year=%date:~10,4%
        set month=%date:~4,2%
        set day=%date:~7,2%

        set logdirpath=%LocalAppData%NordVPNlogs

        :: Deleting the active log file might cause problems.
        set "todayslog=%logdirpath%app-%year%-%month%-%day%.nwl"

        echo Removing all Nord VPN log files except %todayslog% ...

        :: Loop through the log files
        for /r %logdirpath% %%i in ( "app-*.nwl" ) do (
        if not %%i==%todayslog% (
        echo I just copypasted this instead of modifying the script.
        REM Choose one:
        REM del /q "%%i"
        REM "C:Program FilesSysinternalsSuitesdelete.exe" -p 7 -r "%%i"
        )
        )


        This can be modified for any other logs by altering the logdirpath and log file naming pattern.






        share|improve this answer













        No need for an application: a simple script can handle this.



        If the drive is encrypted, using the native del /q would do. If the drive is not encrypted, you'd need to overwrite the files: I recommend Sysinternals SDelete as it's a command line tool you can use as a replacement in the same script. Keep in mind that SDelete might not work on SSD drives.



        This deleteNordVPNlogs.cmd script will loop through the Nord VPN log files and remove every log file except for today's log which may still be in use and possibly cause Nord VPN to crash. You can run this manually or e.g. through the Task Scheduler. Depending on your regional settings you may need to correct the offsets for extracting the year, month and day from %DATE%. Choose between del and sdelete etc.



        :: A .cmd script for removing Nord VPN logs.
        :: https://security.stackexchange.com/questions/204992/
        @echo off

        :: Change the offsets (~10, ~4, ~7) depending on your regional settings!
        :: You can find the correct positions from 'echo %DATE%'
        set year=%date:~10,4%
        set month=%date:~4,2%
        set day=%date:~7,2%

        set logdirpath=%LocalAppData%NordVPNlogs

        :: Deleting the active log file might cause problems.
        set "todayslog=%logdirpath%app-%year%-%month%-%day%.nwl"

        echo Removing all Nord VPN log files except %todayslog% ...

        :: Loop through the log files
        for /r %logdirpath% %%i in ( "app-*.nwl" ) do (
        if not %%i==%todayslog% (
        echo I just copypasted this instead of modifying the script.
        REM Choose one:
        REM del /q "%%i"
        REM "C:Program FilesSysinternalsSuitesdelete.exe" -p 7 -r "%%i"
        )
        )


        This can be modified for any other logs by altering the logdirpath and log file naming pattern.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered 20 hours ago









        Esa JokinenEsa Jokinen

        55028




        55028






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Super User!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1412484%2fnord-vpn-is-keeping-local-logs-how-to-automate-log-purging%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Couldn't open a raw socket. Error: Permission denied (13) (nmap)Is it possible to run networking commands...

            VNC viewer RFB protocol error: bad desktop size 0x0I Cannot Type the Key 'd' (lowercase) in VNC Viewer...

            Why not use the yoke to control yaw, as well as pitch and roll? Announcing the arrival of...