

(This could be done, because the original Reverser wanted to hide the changes in the plugin-dll and to prevent others from update it to newer versions.) We still dont know! The test which were done by different people here and other places show so far nothing suspicious. At the moment we have no proof that the release (windows) is safe, means it could be there is some malware code hidden, which we cant see with virustotal, since the binary is obfuscated by Themida/Code Virtualizer and thats why also this regkey is needed. The release is not safe in terms of having all ip adresses anf things patched, it does connect to some unknown amazon server, which is not the case for the legit Nexus3 Plugin.
