Keylogger on my macbook?

Hi All,
I simply can´t think about another way than that my ex installed a keylogger on my macbook - he knows every step I make, emails, simply much too much without being here anymore. Looking this up I´ve found the following thread:
I believe that I have a keylogger or some sort of spyware installed on my mac, please help!
So I´ve followed the described steps und would ask anyone with appropiate skills for help. I urgently don´t want to be followed, spied etc anymore!
Thanks for any help, OS is 10.5.8, here is the output:
Step 1
com.vmware.kext.vmx86 (1.1.1fc2)
com.vmware.kext.vmci (1.1.1fc2)
com.vmware.kext.vmioplug (1.1.1fc2)
com.vmware.kext.vmnet (1.1.1fc2)
Step 2
org.samba.smbd
org.samba.nmbd
com.vmware.launchd.vmware
com.microsoft.office.licensing.helper
Step 3
com.hp.launchurlagent
com.adobe.ARM.925793fb327152fd34795896fa1fb9ffa268b2a852256fe56609efa3
Step 4
/Library/Address Book Plug-Ins:
/Library/Components:
/Library/Frameworks:
AECore.framework
Adobe AIR.framework
Compressor.framework
FxPlug.framework
HPDeviceModel.framework
HPPml.framework
HPServicesInterface.framework
HPSmartPrint.framework
HPSmartX.framework
MacFUSE.framework
MediaServerAPI.framework
Motion.framework
PluginManager.framework
ProFX.framework
ProMetadataSupport.framework
Qmaster.framework
StuffIt.framework
Xerces-c-cw8.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
DRM Plugin.bundle
EPPEX Plugin.plugin
Flash Player.plugin
JavaPluginCocoa.bundle
NP-PPC-Dir-Shockwave
NPSVG3.zip
NPSVG3Carbon
NPSVG3ReadMe.html
Quartz Composer.webplugin
QuickTime Plugin.plugin
QuickTime Plugin.webplugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
VerifiedDownloadPlugin.plugin
Windows Media Plugin
flashplayer.xpt
iPhotoPhotocast.plugin
nsIQTScriptablePlugin.xpt
/Library/Keyboard Layouts:
/Library/LaunchAgents:
com.hp.launchurlagent.plist
/Library/LaunchDaemons:
com.microsoft.office.licensing.helper.plist
com.vmware.launchd.vmware.plist
/Library/PreferencePanes:
ATIRemoteWonderSP.prefPane
Apple Qmaster.prefPane
DejaVu.prefPane
Flash Player.prefPane
Icon?
MacFUSE.prefPane
/Library/PrivilegedHelperTools:
com.microsoft.office.licensing.helper
/Library/QuickLook:
GBQLGenerator.qlgenerator
QuickLookEyeTV.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AppleHDVCodec.component
AppleIntermediateCodec.component
AppleMPEG2Codec.component
AppleProRes422.component
DVCPROHDCodec.component
DVCPROHDMuxer.component
DVCPROHDVideoDigitizer.component
DVCPROHDVideoOutput.component
DVCPROHDVideoOutputClock.component
DVCPROHDVideoOutputCodec.component
DesktopVideoOut.component
DivX 6 Decoder.component
EyeTV MPEG Support.component
FCP Uncompressed 422.component
IMXCodec.component
LiveType.component
Motion.component
/Library/ScriptingAdditions:
.DS_Store
Adobe Unit Types
QXPScriptingAdditions.osax
/Library/Spotlight:
AppleWorks.mdimporter
GBSpotlightImporter.mdimporter
Microsoft Entourage.mdimporter
Microsoft Office.mdimporter
iWeb.mdimporter
iWork.mdimporter
/Library/StartupItems:
.DS_Store
HP IO
HP Trap Monitor
Qmaster
WDBMService
/etc/mach_init.d:
dashboardadvisoryd.plist
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
RemoteUI.plist
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
Library/Fonts:
ACaslonPro-Bold.otf
ACaslonPro-BoldItalic.otf
ACaslonPro-Italic.otf
ACaslonPro-Regular.otf
ACaslonPro-Semibold.otf
ACaslonPro-SemiboldItalic.otf
AGaramondPro-Bold.otf
AGaramondPro-BoldItalic.otf
AGaramondPro-Italic.otf
AGaramondPro-Regular.otf
AGaramondPro-Semibold.otf
AGaramondPro-SemiboldItalic.otf
AJensonPro-Bold.otf
AJensonPro-BoldCapt.otf
AJensonPro-BoldDisp.otf
AJensonPro-BoldIt.otf
AJensonPro-BoldItCapt.otf
AJensonPro-BoldItDisp.otf
AJensonPro-BoldItSubh.otf
AJensonPro-BoldSubh.otf
AJensonPro-Capt.otf
AJensonPro-Disp.otf
AJensonPro-It.otf
AJensonPro-ItCapt.otf
AJensonPro-ItDisp.otf
AJensonPro-ItSubh.otf
AJensonPro-Lt.otf
AJensonPro-LtCapt.otf
AJensonPro-LtDisp.otf
AJensonPro-LtIt.otf
AJensonPro-LtItCapt.otf
AJensonPro-LtItDisp.otf
AJensonPro-LtItSubh.otf
AJensonPro-LtSubh.otf
AJensonPro-Regular.otf
AJensonPro-Semibold.otf
AJensonPro-SemiboldCapt.otf
AJensonPro-SemiboldDisp.otf
AJensonPro-SemiboldIt.otf
AJensonPro-SemiboldItCapt.otf
AJensonPro-SemiboldItDisp.otf
AJensonPro-SemiboldItSubh.otf
AJensonPro-SemiboldSubh.otf
AJensonPro-Subh.otf
Arial
Brush Script
CalcitePro-Black.otf
CalcitePro-Bold.otf
CalcitePro-Regular.otf
LithosPro-Black.otf
LithosPro-Bold.otf
LithosPro-ExtraLight.otf
LithosPro-Light.otf
LithosPro-Regular.otf
MinionPro-Bold.otf
MinionPro-BoldCapt.otf
MinionPro-BoldCn.otf
MinionPro-BoldCnCapt.otf
MinionPro-BoldCnDisp.otf
MinionPro-BoldCnIt.otf
MinionPro-BoldCnItCapt.otf
MinionPro-BoldCnItDisp.otf
MinionPro-BoldCnItSubh.otf
MinionPro-BoldCnSubh.otf
MinionPro-BoldDisp.otf
MinionPro-BoldIt.otf
MinionPro-BoldItCapt.otf
MinionPro-BoldItDisp.otf
MinionPro-BoldItSubh.otf
MinionPro-BoldSubh.otf
MinionPro-Capt.otf
MinionPro-Cn.otf
MinionPro-CnCapt.otf
MinionPro-CnDisp.otf
MinionPro-CnIt.otf
MinionPro-CnItCapt.otf
MinionPro-CnItDisp.otf
MinionPro-CnItSubh.otf
MinionPro-CnSubh.otf
MinionPro-Disp.otf
MinionPro-It.otf
MinionPro-ItCapt.otf
MinionPro-ItDisp.otf
MinionPro-ItSubh.otf
MinionPro-Regular.otf
MinionPro-Semibold.otf
MinionPro-SemiboldCapt.otf
MinionPro-SemiboldCn.otf
MinionPro-SemiboldCnCapt.otf
MinionPro-SemiboldCnDisp.otf
MinionPro-SemiboldCnIt.otf
MinionPro-SemiboldCnItCapt.otf
MinionPro-SemiboldCnItDisp.otf
MinionPro-SemiboldCnItSubh.otf
MinionPro-SemiboldCnSubh.otf
MinionPro-SemiboldDisp.otf
MinionPro-SemiboldIt.otf
MinionPro-SemiboldItCapt.otf
MinionPro-SemiboldItDisp.otf
MinionPro-SemiboldItSubh.otf
MinionPro-SemiboldSubh.otf
MinionPro-Subh.otf
Moonglow-Bold.otf
Moonglow-BoldCond.otf
Moonglow-BoldExt.otf
Moonglow-Cond.otf
Moonglow-Ext.otf
Moonglow-Light.otf
Moonglow-LightCond.otf
Moonglow-LightExt.otf
Moonglow-Regular.otf
Moonglow-Semibold.otf
Moonglow-SemiboldCond.otf
Moonglow-SemiboldExt.otf
MyriadPro-Black.otf
MyriadPro-BlackCond.otf
MyriadPro-BlackCondIt.otf
MyriadPro-BlackIt.otf
MyriadPro-BlackSemiExt.otf
MyriadPro-BlackSemiExtIt.otf
MyriadPro-Bold.otf
MyriadPro-BoldCond.otf
MyriadPro-BoldCondIt.otf
MyriadPro-BoldIt.otf
MyriadPro-BoldSemiExt.otf
MyriadPro-BoldSemiExtIt.otf
MyriadPro-Cond.otf
MyriadPro-CondIt.otf
MyriadPro-It.otf
MyriadPro-Light.otf
MyriadPro-LightCond.otf
MyriadPro-LightCondIt.otf
MyriadPro-LightIt.otf
MyriadPro-LightSemiExt.otf
MyriadPro-LightSemiExtIt.otf
MyriadPro-Regular.otf
MyriadPro-SemiExt.otf
MyriadPro-SemiExtIt.otf
MyriadPro-Semibold.otf
MyriadPro-SemiboldCond.otf
MyriadPro-SemiboldCondIt.otf
MyriadPro-SemiboldIt.otf
MyriadPro-SemiboldSemiExt.otf
MyriadPro-SemiboldSemiExtIt.otf
SilentiumPro-RomanI.otf
SilentiumPro-RomanII.otf
TektonPro-Bold.otf
TektonPro-BoldCond.otf
TektonPro-BoldCondObl.otf
TektonPro-BoldExt.otf
TektonPro-BoldExtObl.otf
TektonPro-BoldObl.otf
TektonPro-Cond.otf
TektonPro-CondObl.otf
TektonPro-Ext.otf
TektonPro-ExtObl.otf
TektonPro-Light.otf
TektonPro-LightCond.otf
TektonPro-LightCondObl.otf
TektonPro-LightExt.otf
TektonPro-LightExtObl.otf
TektonPro-LightObl.otf
TektonPro-Obl.otf
TektonPro-Regular.otf
Times New Roman
Verdana
WarnockPro-Bold.otf
WarnockPro-BoldCapt.otf
WarnockPro-BoldDisp.otf
WarnockPro-BoldIt.otf
WarnockPro-BoldItCapt.otf
WarnockPro-BoldItDisp.otf
WarnockPro-BoldItSubh.otf
WarnockPro-BoldSubh.otf
WarnockPro-Capt.otf
WarnockPro-Disp.otf
WarnockPro-It.otf
WarnockPro-ItCapt.otf
WarnockPro-ItDisp.otf
WarnockPro-ItSubh.otf
WarnockPro-Light.otf
WarnockPro-LightCapt.otf
WarnockPro-LightDisp.otf
WarnockPro-LightIt.otf
WarnockPro-LightItCapt.otf
WarnockPro-LightItDisp.otf
WarnockPro-LightItSubh.otf
WarnockPro-LightSubh.otf
WarnockPro-Regular.otf
WarnockPro-Semibold.otf
WarnockPro-SemiboldCapt.otf
WarnockPro-SemiboldDisp.otf
WarnockPro-SemiboldIt.otf
WarnockPro-SemiboldItCapt.otf
WarnockPro-SemiboldItDisp.otf
WarnockPro-SemiboldItSubh.otf
WarnockPro-SemiboldSubh.otf
WarnockPro-Subh.otf
Wingdings
Wingdings 2
Wingdings 3
Library/Internet Plug-Ins:
Library/Keyboard Layouts:
Library/LaunchAgents:
com.adobe.ARM.925793fb327152fd34795896fa1fb9ffa268b2a852256fe56609efa3.plist
com.apple.FolderActions.enabled.plist
com.apple.FolderActions.folders.plist
jp.co.canon.Inkjet_Extended_Survey_Agent.plist
Library/PreferencePanes:
Opera Preferences
Step5
iTunesHelper, EyeTV Helper, Adobe Photoshop CS, AdobeResourceSynchronizer, Microsoft AU Daemon, Canon IJ Network Scanner Selector2, SE Media Sync Helper

There is no keylogger, but there are plenty of other ways in which your privacy could be violated or your safety threatened. You should be talking to a lawyer or the police.

Similar Messages

I have a question in regards to spyware / keylogger for my MacBook Pro. My employer recently asked for my MacBook to "make sure it running smoothly" I currently have no issues. I haven't yet gave it to them. How can I tell if keylogger/spyware added?

so I havent gave them my MacBook yet but I highly suspect they will be adding keylogger or spyware of some sort. It there a easy way to help me tell if they have added something before i hand it over to them so I can't tell what they have done?

If the computer is owned by your employer, not by you, then you should use it as it's given to you. Use it only for work, not for anything personal. Don't have any expectation of privacy while using it. Don't connect it to your home network. Assume that a keylogger or any other kind of monitoring software is installed.

Keylogger in MacBook Pro

Rumor has it Dell laptops have a 4Meg keylogger, for "support".
Links directly between the keyboard and the ethernet controller.
Does Apple have any key loggers built in???

Rumor has it Dell laptops have a 4Meg keylogger, for
"support".
Links directly between the keyboard and the ethernet
controller.
Does Apple have any key loggers built in???
No. Nor does the Dell...as you said "rumor has it" and that is exactly what it is...a rumor. It's a hoax. Don't worry you wont find it in either brand.
http://www.snopes.com/computer/internet/dellbug.asp
http://www.engadget.com/2005/06/16/the-dell-keylogger-conspiracy-hoax/
Just for a couple quick links.
Maybe the dude that reported it won a free Dell 600m courtesy of DHS for a good reason? lol

Keylogger and spy on macbook

I am the IT guy at my company, but my boss brought in if sisters macbook. she is experiencing strange behaviors that to me say "Key logger and spy ware" or Remote accessed. if she types anything with her ex husbands name it literally disappears. photos have disapearred and shown up elsewhere such as her husbands lawyers. etc...I have been assigned the task of finding this key logging software and find out where it is sending stuff and so forth, document it and give any iformation to her lawyer, if anyone can help me, I would appreciate it. is there an antivirus boot disk for a mac I can download, such as Clamware or something? thanks.
Message was edited by: xwindowuser

As was already said, there aren't any viruses in the Mac world. There are a couple possibilities that suggest themselves to me.
First, as for things moving around on their own, that suggests that her ex-husband has remote access to the machine. Go to System Preferences -> MobileMe, click Back to My Mac, and make sure it's turned off. Then click the Open Sharing Preferences button and make sure that all the check boxes are unchecked. Then go to System Preferences -> Security and make sure the firewall is set to block incoming connections.
Next, the issue of typing her husband's name and having it disappear sounds to me like a misuse of the benign utility [TypeIt4Me|http://ettoresoftware.com/EttoreSoftware/About_TypeIt4Me.html], which allows you to set up replacement strings. Typical use of such software would be to have text like "hth" automatically replaced by the text "Hope this helps!" However, it would be easy to set it to replace "John Smith" with " ". Make sure this software is not installed, or if she is using it, check the settings and make sure that there aren't any unwanted entries.
As for saving this kind of thing for a lawyer so they can press charges... I'm not a lawyer, but I suspect this is going to be a difficult case to win. You can't point to a picture on the hard drive and say "Look, my ex-husband put this here!" How do you prove that she didn't put it there to get him in trouble. You'd have to prove that he is repeatedly logging in remotely and doing malicious things, which would have to involve a third party, since anything on her machine is easily forged. For example, I could open /var/log/secure.log in any text editor and forge a line that says someone logged in to my machine on a certain day at a certain time...

I followed previous keylogger detection instructions from an older post - how do I interpret the results that appeared in Terminal?

I have a Macbook pro that I suspect my exhusband installed keylogger software on. I followed the keylogger detection instructions posted on an older post, but I do not know how to interpret the Terminal results. What should I be looking for in the strings that result?

You don't have an off-the-shelf commercial keylogger installed. I can't rule out a well-hidden rootkit. That would only be possible If the attacker is a computer expert, or if he had help from an expert. If you suspect that, you'll either have to consult an expert yourself or (less expensively) erase your hard drive, reinstall OS X and all your other software from known-good copies, and restore only your documents and settings from a backup.
I should add that there are hardware keyloggers on the market that don't install any software at all. The cheap ones can't be accessed remotely, but with enough money you can buy pretty much anything. A highly motivated attacker could plant listening devices in your home, your car, or your office.

How to reset my macbook back to factory settings with no install disk

So I purchased a 2009 White 2.26GHZ macbook on ebay. It came with just the macbook and charger, no disc. And when I opened it to start it up, it was the "new user" screen asking for my Apple ID, create admin ID, wifi network setup, and such. When I logged on it was the new Mountain Lion OS. (The previous had stated that he had upgraded) My question is, since I bought this used, I would like to wipe the hard drive before I really start using it because who knows what the person before me has done to it, (keylogger, tracker, etc) but how can I bring back Mountain Lion if I don't have any installation disc? And what about the fact that this computer probably originally came with Leppord since it was from 2009? If I restart will I have Leppord or Mountain Lion? Also, how the heck did the seller get to that "new user" setup screen for me when I turned it on??? The fact that I was like this leads me to believe that I must be able to do this... Wipe my 2009 macbook hard drive, and turn it on to a brand new Mountain Lion OS. I am brand new to macs, and am looking forward to using this but I just want to make sure that I'm starting fresh!

Legally the Mountain Lion installation is actually tied to the person who purchased it and put it on the MacBook. He/she should have removed it before sale as well as provided you with the original disks.
Your best bet now, if you cannot get the original disk from your seller, is to contact Apple using www.apple.com/support/contact if you are in a country that supports it or call the appropriate phone number on this page, they can send your the original disks that came with the computer for a minimal fee.
If you want to bring the computer's OS up to Mountain Lion, you can then purchase Snow Leopard from Apple online and install it, then go to the Mac app store and get Mountain Lion there.
Best of luck.

How can I detect spyware or keylogger programs directly installed on my computer?

Hello,
I have a serious problem. My ex had physical access to my MacBook Air and I believe he installed either spyware or a key logger program directly on my computer, as he had administrative access. It could be a program like WebWatcher or Spector Pro. There are a number of programs that allow someone to install this software by downloading it from the internet directly onto your computer.
Unfortunately, I'm a physician whose been involved in reaserch which has classified information on it. It never occurred to me that someone would do something like this, but I am very worried that he has installed something. I recently installed MacScan and Little Snitch to determine if anything was detected.
MacScan Displayed the following:
Last Spware Scan Run on: Sat 4/26/14 01:15 am
Spyware Detected on Last Scan: 0
Total Spyware Detected in all Scans: 148
I'm unsure if what was detected by Mac Scan were simply cookies.
I also tried Linc Davis' suggestion and here are my results:
Re: Detect spyware and determine who is spying on my imac
Apr 26, 2014 8:49 AM (in response to Linc Davis)
Hello Linc,
This time it asked for my password and I got:
Last login: Sat Apr 26 11:45:48 on ttys000
Olivias-MacBook-Air:~ MD$ kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
at.obdev.nke.LittleSnitch (4050)
Olivias-MacBook-Air:~ MD$ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfi x|x)/{print $3}'
Password:
com.oracle.java.Helper-Tool
com.microsoft.office.licensing.helper
com.google.keystone.daemon
com.adobe.fpsaud
at.obdev.littlesnitchd
Olivias-MacBook-Air:~ MD$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
com.microsoft.autoupdate.fba.42800
com.microsoft.Office365Service.30128
com.microsoft.Word.27840
com.bodymedia.BodyMedia-SYNC.35760
com.linebreak.CloudAppMacOSX.48784
com.oracle.java.Java-Updater
com.google.keystone.system.agent
at.obdev.LittleSnitchUIAgent
com.genieo.completer.update
com.genieo.completer.download
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae
Olivias-MacBook-Air:~ MD$ ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null
/Library/Components:
/Library/Extensions:
ATTOCelerityFC8.kext
ATTOExpressSASHBA2.kext
ATTOExpressSASRAID2.kext
ArcMSR.kext
CalDigitHDProDrv.kext
HighPointIOP.kext
HighPointRR.kext
LittleSnitch.kext
PromiseSTEX.kext
SoftRAID.kext
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
Adobe AIR.framework
AudioMixEngine.framework
EWSMac.framework
NyxAudioAnalysis.framework
PluginManager.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
AdobePDFViewerNPAPI.plugin
AmazonMP3DownloaderPlugin101750.plugin
Default Browser.plugin
Flash Player.plugin
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
Silverlight.plugin
Unity Web Player.plugin
flashplayer.xpt
googletalkbrowserplugin.plugin
nsIQTScriptablePlugin.xpt
o1dbrowserplugin.plugin
/Library/Keyboard Layouts:
/Library/LaunchAgents:
at.obdev.LittleSnitchUIAgent.plist
com.google.keystone.agent.plist
com.oracle.java.Java-Updater.plist
/Library/LaunchDaemons:
at.obdev.littlesnitchd.plist
com.adobe.fpsaud.plist
com.google.keystone.daemon.plist
com.microsoft.office.licensing.helper.plist
com.oracle.java.Helper-Tool.plist
/Library/PreferencePanes:
BodyMedia SYNC.prefPane
Flash Player.prefPane
JavaControlPanel.prefPane
/Library/PrivilegedHelperTools:
com.microsoft.office.licensing.helper
/Library/QuickLook:
iBooksAuthor.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
/Library/ScriptingAdditions:
/Library/Spotlight:
Microsoft Office.mdimporter
iBooksAuthor.mdimporter
iWork.mdimporter
/Library/StartupItems:
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
YMsgrCallABPlugin.bundle
YMsgrMsnABPlugin.bundle
YMsgrSmsABPlugin.bundle
YMsgrYimABPlugin.bundle
Library/Fonts:
Library/Frameworks:
EWSMac.framework
Library/Input Methods:
.localized
Library/Internet Accounts:
V1
Library/Internet Plug-Ins:
Library/Keyboard Layouts:
Library/LaunchAgents:
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist
com.apple.CSConfigDotMacCert-ph.dio.....@me.com-SharedServices.Agent.plist
com.genieo.completer.download.plist
com.genieo.completer.update.plist
Library/PreferencePanes:
Library/Services:
.localized
Olivias-MacBook-Air:~ MD$ osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
iTunesHelper, Yahoo! Messenger, Dropbox, Cloud, AdobeResourceSynchronizer, BodyMedia SYNC, TuneupMyMac
Olivias-MacBook-Air:~ MD$
CAN ANYONE HELP ME?
Thank you so much.

I am adding information from Webwatcher's own site:
Q. Is WebWatcher easy to use?
A. Yes. WebWatcher is very easy to use and you can begin monitoring immediately without having to read a lengthy manual. Our web based interface is user-friendly and can be conveniently accessed from any computer in the world with an Internet connection.
Q. How does WebWatcher compare to other monitoring software?
A. It's the most powerful and intuitive tool on the market. As the only web-based program, WebWatcher ensures the security of your data while providing you with the flexibility to monitor any computer from anywhere in the world. While some products email data, email is NOT a secure means of transporting information. Anything sent by email is extremely vulnerable, and can be seen by dozens of people before it reaches its destination. WebWatcher, however, uses 128-bit encryption guaranteeing the safety and security of your information.
Q. Is WebWatcher PC or Mac compatible?
A. WebWatcher is PC compatible, as well as Mac OS X compatible.
Q. Is WebWatcher truly invisible?
A. Absolutely! WebWatcher is 100% invisible. It doesn't run as a service, it doesn't appear in the list of running processes and there are no visible files that can be seen. Not only does WebWatcher work invisibly, but it's also friendly with all known firewall software and hardware allowing you to gather the information you need without raising any red flags.
Q. How will I know WebWatcher is working?
A. Just login to your secure online account to see the recorded data. Or you can enter the hotkey sequence on the monitored computer to view the WebWatcher status panel.
Q. If I buy WebWatcher now, how soon will I receive the software?
A. Immediately. Within minutes you'll receive a confirmation email that contains the username and password needed to download WebWatcher.
Q. How do I install WebWatcher?
A. Within minutes of completing your purchase, you'll receive an email with a link to the Setup Wizard. Just follow the onscreen instructions. Once the Setup Wizard is complete you'll receive a link to download the software. Important: you can complete the Setup Wizard from any computer, but the SOFTWARE MUST BE INSTALLED ON THE COMPUTER YOU WISH TO MONITOR.
Q. Do I install WebWatcher on my computer or on the computer I want to monitor?
A. The Setup Wizard can be installed on any computer, but the actual monitoring software must be installed on the computer you wish to monitor. Since WebWatcher is web based, you won't have to download the software onto the computer you'll use for viewing the recorded information.
Q. Can I use different computers to check what's been recorded?
A. Yes. Once the software is installed on the computer you wish to monitor, you can view the data from any computer in the world with Internet access.
Q. Do WebWatcher icons or messages appear on my computer or on the monitored computer?
A. No. Since WebWatcher runs invisibly, no icons or messages will appear on your computer or on the monitored computer.
Q. Will WebWatcher email the recorded information to me?
A. No. Email isn't secure for transmitting information. Any program that emails your data puts your private information at serious risk. WebWatcher offers the only web based monitoring system of its kind. We use 128-bit encryption to ensure the highest level of data security.
Q. How do I retrieve the information that WebWatcher has recorded?
A. Just log into our secure web based interface from any computer in the world with a standard web browser. Visit our demo to see actual screenshots of the program.
Q. Will WebWatcher work on a laptop?
A. Yes. WebWatcher will record computer activities and upload the data to your account when the monitored computer is reconnected to the Internet.
Q. Does WebWatcher record emails?
A. Yes. WebWatcher records emails and you'll be able to see the subject of the email, who sent it, who received it, the time and date email is sent and received, the contents and any attachments. Our email recorder is compatible with all of the most popular email programs including web based email.
Q. Does WebWatcher record IMs?
A. Yes. WebWatcher records instant messages. Our software is compatible with all of the most popular instant message programs including AOL Instant Messenger (AIM), MSN Messenger, Windows Messenger and Yahoo Messenger.
Q. Does WebWatcher record websites visited?
A. Yes. WebWatcher records websites visited. With just a click, you'll be able to visit the exact website visited and see what was viewed including searches performed.
Q. Can WebWatcher block websites?
A. Yes. WebWatcher can both block websites and record websites. When it encounters an Alert Word on a site, it can block that page or take a screenshot for later review. You can also block specific URL addresses.
Q. Does WebWatcher have a keylogger?
A. Yes. Our invisible key logger records every keystroke, even when a user is offline.
Q. Do I need one license for every computer that I wish to monitor?
A. Yes. An individual license is required for every computer that you wish to monitor. We offervolume discounts for multi-license purchases.

Should I do a clean OS install after buying second hand MacBook?

I just bought a second hand MacBook 2010 for my girlfriend. It came with a clean Lion installed. What is making me paranoid is that I use tracking software Prey on my own MBP and now how can I be sure that the new one hasn't got tracking software installed for opposite reason (to steal it and sell again)?
I know it might sound stupid, but I like to be prepared for the worst. So should I format the drive and install Lion again? What would you do?

I would never run a used Mac "as is"; there is too much potential for security violations or just software problems. I strongly recommend, unless you completely trust the person from whom you purchased the Mac, that you erase the hard drive and reinstal Mac OS X. That way you start fresh, without any of the cruft that accumulates on any OS, and of course remove any potential for malware such as a keylogger.
Regards.

Can anyone help me decipher if I have a Keylogger in my Terminal description?

Hello there - I followed some good sounding advice on the discussion board here: https://discussions.apple.com/thread/4243511 and have the list of output from my Terminal.
Does anyone mind looking below to see if there seems to be a keylogger in the midst? Would be really appreciated..
Here is the output I received. If you need something else, please let me know.
com.paceap.pacesupport
com.rim.BBDaemon
com.google.keystone.daemon
com.adobe.SwitchBoard
com.adobe.fpsaud
-MacBook-Pro:~ $ ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null
/Library/Components:
/Library/Extensions:
/Library/Frameworks:
Adobe AIR.framework
DAE.framework
DHS.framework
DSI.framework
DSPManager.framework
DUI.framework
DigiMachOServices.framework
DigiPlugInHelper.framework
DigidesignFWDriver.framework
DigidesignUSBDriver.framework
DirectIO.framework
NyxAudioAnalysis.framework
PluginManager.framework
RIM_VSP.framework
RimBlackBerryUSB.framework
Snapfish.framework
TSLicense.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
Disabled Plug-Ins
Flash Player.plugin
Flip4Mac WMV Plugin.plugin
Flip4Mac WMV Plugin.webplugin
Google Earth Web Plug-in.plugin
JavaAppletPlugin.plugin
NP-PPC-Dir-Shockwave
Quartz Composer.webplugin
QuickTime Plugin.plugin
RealPlayer Plugin.plugin
Silverlight.plugin
flashplayer.xpt
googletalkbrowserplugin.plugin
iPhotoPhotocast.plugin
npgtpo3dautoplugin.plugin
nsIQTScriptablePlugin.xpt
o1dbrowserplugin.plugin
/Library/Keyboard Layouts:
/Library/LaunchAgents:
com.adobe.AAM.Updater-1.0.plist
com.adobe.CS5ServiceManager.plist
com.flipvideo.FlipShare.AutoRun.plist
com.google.keystone.agent.plist
com.hp.help.tocgenerator.plist
com.rim.BBAlbumArtCacher.plist
com.rim.BBLaunchAgent.plist
/Library/LaunchDaemons:
PACESupport.plist
com.adobe.SwitchBoard.plist
com.adobe.fpsaud.plist
com.google.keystone.daemon.plist
com.rim.BBDaemon.plist
/Library/PreferencePanes:
DigidesignMbox2.prefPane
Flash Player.prefPane
/Library/PrivilegedHelperTools:
Google Drive Icon Helper
/Library/QuickLook:
GBQLGenerator.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
Flip4Mac WMV Advanced.component
Flip4Mac WMV Export.component
Flip4Mac WMV Import.component
QTMpeg4Codec.component
SoundboothScoreCodec.component
/Library/ScriptingAdditions:
Adobe Unit Types.osax
/Library/Spotlight:
AppleWorks.mdimporter
GBSpotlightImporter.mdimporter
Microsoft Office.mdimporter
iWork.mdimporter
/Library/StartupItems:
Digidesign Mbox 2
DigidesignLoader
HP Trap Monitor
PACESupport
/etc/mach_init.d:
dashboardadvisoryd.plist
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
com.adobe.SwitchBoard.monitor.plist
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
Library/Fonts:
ALBAM___.TTF
ALBA____.TTF
Alice_in_Wonderland_3.ttf
BTTF.ttf
Bonus - Base - BC.ttf
Bonus - Bling Bling - BC.ttf
Confessions.ttf
Confusions on a Dancefloor.ttf
DiscoDiva.ttf
FUTRFW.TTF
Friday13v12.ttf
Lutin_Paniquangoisse.ttf
MISFITS_.TTF
Market_Deco.ttf
NASHVILL.TTF
Neon.ttf
PEPSI_pl.ttf
Thirties Gold.ttf
[z] Arista ExtraFilled.ttf
[z] Arista light.ttf
[z] Arista.ttf
budmo jiggler.ttf
budmo jigglish.ttf
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
FacebookVideoCalling.bundle
Library/Keyboard Layouts:
Library/LaunchAgents:
com.adobe.AAM.Updater-1.0.plist
com.adobe.ARM.925793fb327152fd34795896fa1fb9ffa268b2a852256fe56609efa3.plist
com.facebook.videochat..plist
com.rim.bbdmmediaserver.plist
com.rim.rmsstatus.plist
com.spotify.webhelper.plist
Library/PreferencePanes:
Growl.prefPane
-MacBook-Pro:~ $ osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
GrowlHelperApp, iTunesHelper, Skype, BitTorrent, Google Drive, Dropbox, Spotify, HP Product Research, HPEventHandler

Look at iOS Troubleshooting Wi-Fi networks and connections http://support.apple.com/kb/TS1398
 Cheers, Tom

Possible hacking of my MacBook

For the last couple of weeks I keep getting locked out from my email accounts.
I have several emails on Aol, Hotmail and Yahoo and when I'm trying to log in I'm getting messages like "We have detected unusual activity on this account and for your security are temporarily blocking access. To regain access to this account, please change your password." When I try to change the password as instructed, I get stuck on the security answer part because I answer incorrectly. For some reason the email host's support seems indifferent in helping me as I am being ignored most of the time.
I am starting to suspect that my MacBook has been somehow hacked or infected with a virus. I know it sounds silly – I mean it's Mac, you don't even need an anti-virus etc. – but I find no other logical explanation. It seems like someone is digging in my email accounts for payment/banking accounts or whatever reason it is that they are doing this.
I have an excel file buried deep on my hard disk which keeps track of all of my accounts names, passwords and security questions/answers, including those email accounts I am talking about, but excluding any account that is money related – bank accounts, PayPal, etc. There is absolutely no chance of me changing my password or security answer without remembering and I am the only one who uses my MacBook since I live alone. I also have never shared an account's password with anyone else.
I need help because now I'm afraid to even log in with my payment accounts – whose info I keep on my mind. I sincerely apologize in advance if my post is in an irrelevant section. Thank you for all the help.

Thank you Thomas for your reply. I think it most likely is a keylogger, as you mentioned, only how could I make sure of it and how could I block it?
"you've managed to name three of the most often hacked e-mail systems I know of"
Could you suggest a more safe email host? I only use Aol, Hotmail and Yahoo because they are the most popular hosts besides gmail, I think.
"if you use weak passwords, or if you use the same passwords on multiple sites, or if you use easily predictable security questions, or if you connect in an insecure way while on an open wireless network, all these things could result in your e-mail account being hacked."
• I do not use weak passwords, or the same ones on multiple sites.
• My parents or friends could not possibly predict my security answers.
• I only connect with my MacBook from my home's WiFi connection. When I am out I simply don't login to any of my accounts.
Also, I forgot to mention that I never register with websites I think might be unsafe.
Any other suggestions from anyone who could spend a minute to write are appreciated beyond words.

Macbook Pro – Some Keys Not Working!

Hi
I'm running a 15-inch ( mid 2010 ) Macbook Pro with OS X 10.8.5.
Some of my keys have stopped working.
I've been throughout his forum but found nothing that helps.
The 't' key sometimes does nothing and sometimes this... IORTUY
other keys that dont work are: number 5, hypens, square brackets and volume up.
Random I know.
Anyone experienced this?
Thanks
B

I'm on a MacBookPro8,2,
Intel Core i7 2.3 GHz
Boot ROM Version: MBP81.0047.B27
SMC Version (system): 1.69f4
OS X 10.9.2 (13C64)
I have the same issue with some of my keys, it comes and goes, but it's mostly there.
I have to carry a small Bluetooth keyboard with me now, this really *****.
I'm paranoid thinking this might have something to do with a keylogger process, or maybe just some process in the system that keeps taking all the IO bandwidth for the keyboard, I don't think it's hardware related
I've installed an antivirus and performed an exhaustive scan and found nothing wrong.
When I started typing this post I had to go and get the external keyboard, now I'm typing back again with the keyboard, no clue what might be causing it.

Perfect Key Logger on Macbook pro?

Hi,
I have reason to believe my boyfriend has downloaded a key logger onto my computer. I started noticing weird programs being downloaded that had to do with unarchiving files and unencrypting text and I looked into it and found an icon that said "PKL.app". So I googled it and perfect key logger came up. I tried to download it myself and when I did, it would download and never open. I know they are supposed to open the first time but then otherwise run in the background and only open with hot keys. I have tried a couple of variations with no luck. When I click the PKL.app icon (I saved it to my desktop after I found it) and press "open" nothing happens. If I press "get info" it says the date it was downloaded, last time it was opened ect. Also, within the "get info" area on the app icon there is a option to click that says "hide extensions" which is clicked and I am unable to unclick it. He has open access to my computer and I haven't had any credit card theft or anything like that which leads me to believe it is someone that doesn't have a desire to do anything other than on my personal level. Can someone take a look at what the terminal showed and give me any insight? If nothing shows up does anyone know what this PKL app that I can't open is? Also I tried removing the app and it wouldn't let me. Here are my terminal results:
Last login: Thu Feb 12 20:41:34 on ttys000
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
com.zeobit.kext.Firewall (2.3.4)
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfi x|x)/{print $3}'
com.zeobit.MacKeeper.AntiVirus
com.microsoft.office.licensing.helper
com.adobe.fpsaud
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
com.zeobit.MacKeeper.Helper
com.spotify.webhelper
com.google.keystone.user.agent
com.BT.PKL
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null
/Library/Components:
/Library/Extensions:
hp_io_enabler_compound.kext
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
Adobe AIR.framework
AudioMixEngine.framework
NyxAudioAnalysis.framework
PluginManager.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
AdobePDFViewerNPAPI.plugin
Flash Player.plugin
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
Silverlight.plugin
flashplayer.xpt
nsIQTScriptablePlugin.xpt
/Library/Keyboard Layouts:
/Library/LaunchAgents:
/Library/LaunchDaemons:
com.adobe.fpsaud.plist
com.apple.remotepairtool.plist
com.microsoft.office.licensing.helper.plist
com.zeobit.MacKeeper.AntiVirus.plist
/Library/PreferencePanes:
Flash Player.prefPane
/Library/PrivilegedHelperTools:
com.microsoft.office.licensing.helper
/Library/QuickLook:
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
/Library/ScriptingAdditions:
/Library/Spotlight:
Microsoft Office.mdimporter
iWork.mdimporter
/Library/StartupItems:
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
Library/Fonts:
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
Library/Keyboard Layouts:
Library/LaunchAgents:
com.BT.PKL.plist
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist
com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.45B48A27-9871-4335-99D8-FA1 FA534FCE0.plist
com.apple.CSConfigDotMacCert-(email deleted for privacy)SharedServices.Agent.plist
com.google.keystone.agent.plist
com.spotify.webhelper.plist
com.zeobit.MacKeeper.Helper.plist
Library/PreferencePanes:
(name deleted for privacy)-MacBook-Pro-2:~(name deleted for privacy)$ osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
iTunesHelper, Dropbox, AdobeResourceSynchronizer, Google Drive
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$

Yes, a keylogger is installed. What you should do next depends on the circumstances.
If you're an adult, and the keylogger was installed on your personal computer without your permission, then the computer may be evidence of a crime or a civil wrong. Consider the legal implications before you do anything. Assume that everything you've done with the computer is known to the party who installed the keylogger.
If you just want to clean up the machine, see below.
The only way you can be sure that the computer is not compromised is to erase at least the startup volume and restore it to something like the status quo ante. The easiest approach is to recover the entire system from a backup that predates the attack. Obviously, that's only practical if you know when the attack took place, and it was recent, and you have such a backup. You will lose all changes to data, such as email, that were made after the time of the snapshot. Some of those changes can be restored from a later backup.
If you don't know when the attack happened, or if it was too long ago for a complete rollback to be feasible, then you should erase and install OS X. If you don't already have at least two complete, independent backups of all data, then you must make them first. One backup is not enough to be safe.
When you restart after the installation, you'll be prompted to go through the initial setup process for a new computer. That’s when you transfer the data from a backup in Setup Assistant.
Select only users in the Setup Assistant dialog—not Applications, Other files and folders, or Computer & Network Settings. Don't transfer the Guest account, if it was enabled.
Reinstall third-party software from original media or fresh downloads—not from a backup, which may be contaminated. Don't reinstall "MacKeeper," which is a scam.
Unless you were the target of an improbably sophisticated attack, this procedure will leave you with a clean system. If you have reason to think that you were the target of a sophisticated attack, then you need expert help.
That being done, change all Internet passwords and check all financial accounts for unauthorized transactions. Do this after the system has been secured, not before.

New Terminal Results 4 Spyware / Keylogger Detection Review

For Linc and all knowledgeable,
My MBPro webcam was taken over a few months ago and video was recorded of me without my knowledge. At the time I thought it was taken over from a website and was unaware of the potential of spyware that could be installed on my local harddrive. In just the last week I have reason to believe that there maybe a keylogger on my machine recording my writing in MS Word and otherwise. All of this is part of a greater and very serious stalking/harassment/surveilence threat I'm having to face down... So I'm in the process of overhauling my entire internet/Mac security set-up. I am thankful I'm on a Mac at least...
I followed the terminal scripts that Linc posted and here is the output I got.
Thanks to Linc and all who can respond with constructive help!
Step 1
com.microsoft.driver.MicrosoftMouse (8.2)
com.microsoft.driver.MicrosoftMouseUSB (8.2)
com.avg.Antivirus.OnAccess.kext (14.0)
Step 2
com.zeobit.MacKeeper.plugin.AntiTheft.daemon
com.raynersw.nshctldo
com.microsoft.office.licensing.helper
com.avg.Antivirus
com.avg.Antivirus.infosd
com.adobe.SwitchBoard
com.adobe.fpsaud
Step 3
com.zeobit.MacKeeper.plugin.AntiTheft.daemon
com.raynersw.nshctldo
com.microsoft.office.licensing.helper
com.avg.Antivirus
com.avg.Antivirus.infosd
com.adobe.SwitchBoard
com.adobe.fpsaud
new-host:~ MacBookPro$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
com.extensis.FMCore
com.avg.Antivirus
com.adobe.CS5ServiceManager
com.adobe.CS4ServiceManager
com.adobe.AdobeCreativeCloud
com.zeobit.MacKeeper.Helper
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae
com.adobe.AAM.Scheduler-1.0
Step 4
/Library/Components:
/Library/Extensions:
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
Adobe AIR.framework
AudioMixEngine.framework
EWSMac.framework
ExtensisPlugins.framework
NyxAudioAnalysis.framework
PluginManager.framework
TSLicense.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobeAAMDetect.plugin
AdobeExManDetect.plugin
AdobePDFViewer.plugin
AdobePDFViewerNPAPI.plugin
Flash Player.plugin
Flip4Mac WMV Plugin.plugin
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
Silverlight.plugin
SurveillanceClient.plugin
flashplayer.xpt
iPhotoPhotocast.plugin
npContributeMac.bundle
nsIQTScriptablePlugin.xpt
/Library/Keyboard Layouts:
/Library/LaunchAgents:
com.adobe.AAM.Updater-1.0.plist
com.adobe.AdobeCreativeCloud.plist
com.adobe.CS4ServiceManager.plist
com.adobe.CS5ServiceManager.plist
com.avg.Antivirus.gui.plist
com.extensis.FMCore.plist
/Library/LaunchDaemons:
com.adobe.SwitchBoard.plist
com.adobe.fpsaud.plist
com.avg.Antivirus.infosd.plist
com.avg.Antivirus.services.plist
com.microsoft.office.licensing.helper.plist
com.raynersw.nshctldo.plist
com.zeobit.MacKeeper.plugin.AntiTheft.daemon.plist
/Library/PreferencePanes:
Flash Player.prefPane
Flip4Mac WMV.prefPane
Microsoft Mouse.prefPane
/Library/PrivilegedHelperTools:
com.microsoft.office.licensing.helper
com.raynersw.nshctldo
/Library/QuickLook:
GBQLGenerator.qlgenerator
iBooksAuthor.qlgenerator
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
Flip4Mac WMV Advanced.component
Flip4Mac WMV Export.component
Flip4Mac WMV Import.component
SoundboothScoreCodec.component
/Library/ScriptingAdditions:
Adobe Unit Types.osax
/Library/Spotlight:
GBSpotlightImporter.mdimporter
Microsoft Office.mdimporter
iBooksAuthor.mdimporter
iWork.mdimporter
/Library/StartupItems:
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
com.adobe.SwitchBoard.monitor.plist
Library/Extensis:
Suitcase Fusion
com.extensis.FMCore-LaunchInfo.conf
Library/Fonts:
Library/Frameworks:
EWSMac.framework
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
EMusic.plugin
RealPlayer Plugin.plugin
Library/Keyboard Layouts:
Library/LaunchAgents:
com.adobe.AAM.Updater-1.0.plist
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist
com.zeobit.MacKeeper.Helper.plist
Library/PreferencePanes:
Step 5
iTunesHelper

know my webcam was hijacked at one point. I believe it was probably done through a website and not installed malware.
There is no known method for remotely accessing a modern Mac's webcam in this manner. Unless your Mac was one of a few specific models made in 2008 and earlier, which were found to have a webcam vulnerability, or unless you granted permission to a website that asked to access your webcam, it's not known to be possible to do what you say happened. A webcam hack would have to be delivered through malware or physical access to your Mac.
What specifically happened that makes you believe your webcam was accessed?
The most suspicious activity that I HAVE seen actually occur on my MacBook Pro was after coming back to my Mac from dinner and waking my Mac up from sleep there was a dialog box saying that my computer had been booted off the network and another computer had been added to the network
That sounds like a very common IP address conflict message, which occurs when one or more devices on your network are misconfigured. This is not indicative of any kind of hack, just a problem with the setup of your network. Probably, some device on your network is set to have a static IP address on your network, and that address is within the range of addresses reserved by the router to assign to devices that join the network. When your computer woke up, the router tried to assign it an address that should have been free, only to find that something was using it.
I believe I read that Maverick itself has a anti keylogger feature that scrambles all keys entered at the root level of the software to prevent a keylogger program from producing any readable output.
That's not something that I've ever heard of. I think you must have misinterpreted something, perhaps a story about address space layout randomization (ASLR), a security feature that randomizes data storage in RAM. ASLR has been in place in limited fashion in Mac OS X as far back as 10.5 (Leopard), and became system-wide in 10.8 (Mountain Lion). It would not protect you against a keylogger.
Mac OS X also has basic anti-malware protections built in, but that is also not new to Mavericks. See How does Mac OS X protect me?.
(Fair disclosure: The Safe Mac is my site, and contains a Donate button, so I may receive compensation for providing links to The Safe Mac. Donations are not required.)

How to reformat macbook pro

hi i want to reformat my macbook pro mid 2012 because i think theres a keylogger in it. my moms email has been hacked recently and i feel that a part of it is because of the teamviewer app (remote dekstop app). i have deleted the app but the perpetrator may have embeded a keylogger in my moms laptop.
the thing is, macbook pros mid 2012 when we bought, the os was already built it. so how do we reformat? help pls!

Here are instructions on reinstalling Mt. Lion. Note that all user data will be erased.
http://support.apple.com/kb/ph11273
Ciao.

Think i just downloaded a keylogger or malicious software

Think i just downloaded a keylogger or malicious software on a mac?
i was strolling through my email on yahoo and saw an .exe file...i ran the virus scanner that comes with yahoo and accidentally clicked and downloaded it while on my safari browser, apparently it came up clean but you never know because .exe files can stay hidden for days. The file was sent from an android phone i believe. it was supposed to be an image file from the looks of it im not too sure. But i just deleted the file as fast as i could and then emptied my trash can hoping it would be gone for good. i tend to use paypal a lot on my computer and i want to make sure that it is 100% safe to use and my password wont be compromised. is there any advice anyone would have for me? Can an .exe file compromise a macbook computer? Is my computer safe to use?

A small correction to wuzradioman's notes.
.exe files don't just load software onto PC computers. An .exe is a Windows program application. Just as if you were launching a Mac program in the OS X Applications folder.
An .exe can load software onto a PC, but that's just a program to install the actual program you want to use onto the hard drive. Macs do the same thing. A .dmg is just a container. It doesn't do anything after opening it until you either drag the application out of the .dmg to your hard drive (doesn't have an installer app), or you run the installer in the .dmg to get the actual app onto your drive.
Getting an .exe to run on a Mac takes a lot more than "a few conniptions". You need to be running Windows on your Mac in order to run a Windows .exe program. Without Windows itself, an .exe is completely useless on a Mac and can't run in any way. Just trash it.

Keylogger on my macbook?

Similar Messages

Maybe you are looking for