You could do an
nvram show | more
and see if anything jumps out at you.
Running the command shows me a couple af "astrill_xxxx" entries, so it could seem they are easy to find.. Is there a command to "extract" all the astrill entries from nvram? Sorry, i'm not that familiar with linux command line