How can I detect spyware or keylogger programs directly installed on my computer?

Question

Hello,
I have a serious problem. My ex had physical access to my MacBook Air and I believe he installed either spyware or a key logger program directly on my computer, as he had administrative access. It could be a program like WebWatcher or Spector Pro. There are a number of programs that allow someone to install this software by downloading it from the internet directly onto your computer.
Unfortunately, I'm a physician whose been involved in reaserch which has classified information on it. It never occurred to me that someone would do something like this, but I am very worried that he has installed something. I recently installed MacScan and Little Snitch to determine if anything was detected.
MacScan Displayed the following:
Last Spware Scan Run on: Sat 4/26/14 01:15 am
Spyware Detected on Last Scan: 0
Total Spyware Detected in all Scans: 148
I'm unsure if what was detected by Mac Scan were simply cookies.
I also tried Linc Davis' suggestion and here are my results:
Re: Detect spyware and determine who is spying on my imac 
Apr 26, 2014 8:49 AM (in response to Linc Davis)
Hello Linc,
This time it asked for my password and I got:
Last login: Sat Apr 26 11:45:48 on ttys000
Olivias-MacBook-Air:~ MD$ kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
at.obdev.nke.LittleSnitch (4050)
Olivias-MacBook-Air:~ MD$ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfi x|x)/{print $3}'
Password:
com.oracle.java.Helper-Tool
com.microsoft.office.licensing.helper
com.google.keystone.daemon
com.adobe.fpsaud
at.obdev.littlesnitchd
Olivias-MacBook-Air:~ MD$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
com.microsoft.autoupdate.fba.42800
com.microsoft.Office365Service.30128
com.microsoft.Word.27840
com.bodymedia.BodyMedia-SYNC.35760
com.linebreak.CloudAppMacOSX.48784
com.oracle.java.Java-Updater
com.google.keystone.system.agent
at.obdev.LittleSnitchUIAgent
com.genieo.completer.update
com.genieo.completer.download
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae
Olivias-MacBook-Air:~ MD$ ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null
/Library/Components:
/Library/Extensions:
ATTOCelerityFC8.kext
ATTOExpressSASHBA2.kext
ATTOExpressSASRAID2.kext
ArcMSR.kext
CalDigitHDProDrv.kext
HighPointIOP.kext
HighPointRR.kext
LittleSnitch.kext
PromiseSTEX.kext
SoftRAID.kext
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
Adobe AIR.framework
AudioMixEngine.framework
EWSMac.framework
NyxAudioAnalysis.framework
PluginManager.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
AdobePDFViewerNPAPI.plugin
AmazonMP3DownloaderPlugin101750.plugin
Default Browser.plugin
Flash Player.plugin
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
Silverlight.plugin
Unity Web Player.plugin
flashplayer.xpt
googletalkbrowserplugin.plugin
nsIQTScriptablePlugin.xpt
o1dbrowserplugin.plugin
/Library/Keyboard Layouts:
/Library/LaunchAgents:
at.obdev.LittleSnitchUIAgent.plist
com.google.keystone.agent.plist
com.oracle.java.Java-Updater.plist
/Library/LaunchDaemons:
at.obdev.littlesnitchd.plist
com.adobe.fpsaud.plist
com.google.keystone.daemon.plist
com.microsoft.office.licensing.helper.plist
com.oracle.java.Helper-Tool.plist
/Library/PreferencePanes:
BodyMedia SYNC.prefPane
Flash Player.prefPane
JavaControlPanel.prefPane
/Library/PrivilegedHelperTools:
com.microsoft.office.licensing.helper
/Library/QuickLook:
iBooksAuthor.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
/Library/ScriptingAdditions:
/Library/Spotlight:
Microsoft Office.mdimporter
iBooksAuthor.mdimporter
iWork.mdimporter
/Library/StartupItems:
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
YMsgrCallABPlugin.bundle
YMsgrMsnABPlugin.bundle
YMsgrSmsABPlugin.bundle
YMsgrYimABPlugin.bundle
Library/Fonts:
Library/Frameworks:
EWSMac.framework
Library/Input Methods:
.localized
Library/Internet Accounts:
V1
Library/Internet Plug-Ins:
Library/Keyboard Layouts:
Library/LaunchAgents:
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist
[e-mail]
com.genieo.completer.download.plist
com.genieo.completer.update.plist
Library/PreferencePanes:
Library/Services:
.localized
Olivias-MacBook-Air:~ MD$ osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
iTunesHelper, Yahoo! Messenger, Dropbox, Cloud, AdobeResourceSynchronizer, BodyMedia SYNC, TuneupMyMac
Olivias-MacBook-Air:~ MD$
CAN ANYONE HELP ME?
Thank you so much.

Answer 1

I am adding information from Webwatcher's own site:
Q. Is WebWatcher easy to use?
A. Yes. WebWatcher is very easy to use and you can begin monitoring immediately without having to read a lengthy manual. Our web based interface is user-friendly and can be conveniently accessed from any computer in the world with an Internet connection.
Q. How does WebWatcher compare to other monitoring software?
A. It's the most powerful and intuitive tool on the market. As the only web-based program, WebWatcher ensures the security of your data while providing you with the flexibility to monitor any computer from anywhere in the world. While some products email data, email is NOT a secure means of transporting information. Anything sent by email is extremely vulnerable, and can be seen by dozens of people before it reaches its destination. WebWatcher, however, uses 128-bit encryption guaranteeing the safety and security of your information.
Q. Is WebWatcher PC or Mac compatible?
A. WebWatcher is PC compatible, as well as Mac OS X compatible.
Q. Is WebWatcher truly invisible?
A. Absolutely! WebWatcher is 100% invisible. It doesn't run as a service, it doesn't appear in the list of running processes and there are no visible files that can be seen. Not only does WebWatcher work invisibly, but it's also friendly with all known firewall software and hardware allowing you to gather the information you need without raising any red flags.
Q. How will I know WebWatcher is working?
A. Just login to your secure online account to see the recorded data. Or you can enter the hotkey sequence on the monitored computer to view the WebWatcher status panel.
Q. If I buy WebWatcher now, how soon will I receive the software?
A. Immediately. Within minutes you'll receive a confirmation email that contains the username and password needed to download WebWatcher.
Q. How do I install WebWatcher?
A. Within minutes of completing your purchase, you'll receive an email with a link to the Setup Wizard. Just follow the onscreen instructions. Once the Setup Wizard is complete you'll receive a link to download the software. Important: you can complete the Setup Wizard from any computer, but the SOFTWARE MUST BE INSTALLED ON THE COMPUTER YOU WISH TO MONITOR.
Q. Do I install WebWatcher on my computer or on the computer I want to monitor?
A. The Setup Wizard can be installed on any computer, but the actual monitoring software must be installed on the computer you wish to monitor. Since WebWatcher is web based, you won't have to download the software onto the computer you'll use for viewing the recorded information.
Q. Can I use different computers to check what's been recorded?
A. Yes. Once the software is installed on the computer you wish to monitor, you can view the data from any computer in the world with Internet access.
Q. Do WebWatcher icons or messages appear on my computer or on the monitored computer?
A. No. Since WebWatcher runs invisibly, no icons or messages will appear on your computer or on the monitored computer.
Q. Will WebWatcher email the recorded information to me?
A. No. Email isn't secure for transmitting information. Any program that emails your data puts your private information at serious risk. WebWatcher offers the only web based monitoring system of its kind. We use 128-bit encryption to ensure the highest level of data security.
Q. How do I retrieve the information that WebWatcher has recorded?
A. Just log into our secure web based interface from any computer in the world with a standard web browser. Visit our demo to see actual screenshots of the program.
Q. Will WebWatcher work on a laptop?
A. Yes. WebWatcher will record computer activities and upload the data to your account when the monitored computer is reconnected to the Internet.
Q. Does WebWatcher record emails?
A. Yes. WebWatcher records emails and you'll be able to see the subject of the email, who sent it, who received it, the time and date email is sent and received, the contents and any attachments. Our email recorder is compatible with all of the most popular email programs including web based email.
Q. Does WebWatcher record IMs?
A. Yes. WebWatcher records instant messages. Our software is compatible with all of the most popular instant message programs including AOL Instant Messenger (AIM), MSN Messenger, Windows Messenger and Yahoo Messenger.
Q. Does WebWatcher record websites visited?
A. Yes. WebWatcher records websites visited. With just a click, you'll be able to visit the exact website visited and see what was viewed including searches performed.
Q. Can WebWatcher block websites?
A. Yes. WebWatcher can both block websites and record websites. When it encounters an Alert Word on a site, it can block that page or take a screenshot for later review. You can also block specific URL addresses.
Q. Does WebWatcher have a keylogger?
A. Yes. Our invisible key logger records every keystroke, even when a user is offline.
Q. Do I need one license for every computer that I wish to monitor?
A. Yes. An individual license is required for every computer that you wish to monitor. We offervolume discounts for multi-license purchases.