Perfect Key Logger on Macbook pro?

Hi,
I have reason to believe my boyfriend has downloaded a key logger onto my computer.  I started  noticing weird programs being downloaded that had to do with unarchiving files and unencrypting text and I looked into it and found an icon that said "PKL.app".  So I googled it and perfect key logger came up.  I tried to download it myself and when I did, it would download and never open.  I know they are supposed to open the first time but then otherwise run in the background and only open with hot keys.  I have tried a couple of variations with no luck.  When I click the PKL.app icon (I saved it to my desktop after I found it) and press "open" nothing happens.  If I press "get info" it says the date it was downloaded, last time it was opened ect.  Also, within the "get info" area on the app icon there is a option to click that says "hide extensions" which is clicked and I am unable to unclick it.  He has open access to my computer and I haven't had any credit card theft or anything like that which leads me to believe it is someone that doesn't have a desire to do anything other than on my personal level.  Can someone take a look at what the terminal showed and give me any insight?  If nothing shows up does anyone know what this PKL app that I can't open is?  Also I tried removing the app and it wouldn't let me.  Here are my terminal results:
Last login: Thu Feb 12 20:41:34 on ttys000
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
com.zeobit.kext.Firewall (2.3.4)
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfi x|x)/{print $3}' 
com.zeobit.MacKeeper.AntiVirus
com.microsoft.office.licensing.helper
com.adobe.fpsaud
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}' 
com.zeobit.MacKeeper.Helper
com.spotify.webhelper
com.google.keystone.user.agent
com.BT.PKL
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$ ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null 
/Library/Components:
/Library/Extensions:
hp_io_enabler_compound.kext
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
Adobe AIR.framework
AudioMixEngine.framework
NyxAudioAnalysis.framework
PluginManager.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
AdobePDFViewerNPAPI.plugin
Flash Player.plugin
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
Silverlight.plugin
flashplayer.xpt
nsIQTScriptablePlugin.xpt
/Library/Keyboard Layouts:
/Library/LaunchAgents:
/Library/LaunchDaemons:
com.adobe.fpsaud.plist
com.apple.remotepairtool.plist
com.microsoft.office.licensing.helper.plist
com.zeobit.MacKeeper.AntiVirus.plist
/Library/PreferencePanes:
Flash Player.prefPane
/Library/PrivilegedHelperTools:
com.microsoft.office.licensing.helper
/Library/QuickLook:
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
/Library/ScriptingAdditions:
/Library/Spotlight:
Microsoft Office.mdimporter
iWork.mdimporter
/Library/StartupItems:
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
SkypeABDialer.bundle
SkypeABSMS.bundle
Library/Fonts:
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
Library/Keyboard Layouts:
Library/LaunchAgents:
com.BT.PKL.plist
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist
com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.45B48A27-9871-4335-99D8-FA1 FA534FCE0.plist
com.apple.CSConfigDotMacCert-(email deleted for privacy)SharedServices.Agent.plist
com.google.keystone.agent.plist
com.spotify.webhelper.plist
com.zeobit.MacKeeper.Helper.plist
Library/PreferencePanes:
(name deleted for privacy)-MacBook-Pro-2:~(name deleted for privacy)$ osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null 
iTunesHelper, Dropbox, AdobeResourceSynchronizer, Google Drive
(name deleted for privacy)-MacBook-Pro-2:~ (name deleted for privacy)$

Yes, a keylogger is installed. What you should do next depends on the circumstances.
If you're an adult, and the keylogger was installed on your personal computer without your permission, then the computer may be evidence of a crime or a civil wrong. Consider the legal implications before you do anything. Assume that everything you've done with the computer is known to the party who installed the keylogger.
If you just want to clean up the machine, see below.
The only way you can be sure that the computer is not compromised is to erase at least the startup volume and restore it to something like the status quo ante. The easiest approach is to recover the entire system from a backup that predates the attack. Obviously, that's only practical if you know when the attack took place, and it was recent, and you have such a backup. You will lose all changes to data, such as email, that were made after the time of the snapshot. Some of those changes can be restored from a later backup.
If you don't know when the attack happened, or if it was too long ago for a complete rollback to be feasible, then you should erase and install OS X. If you don't already have at least two complete, independent backups of all data, then you must make them first. One backup is not enough to be safe.
When you restart after the installation, you'll be prompted to go through the initial setup process for a new computer. That’s when you transfer the data from a backup in Setup Assistant.
Select only users in the Setup Assistant dialog—not Applications, Other files and folders, or Computer & Network Settings. Don't transfer the Guest account, if it was enabled.
Reinstall third-party software from original media or fresh downloads—not from a backup, which may be contaminated. Don't reinstall "MacKeeper," which is a scam.
Unless you were the target of an improbably sophisticated attack, this procedure will leave you with a clean system. If you have reason to think that you were the target of a sophisticated attack, then you need expert help.
That being done, change all Internet passwords and check all financial accounts for unauthorized transactions. Do this  after the system has been secured, not before.

Similar Messages

  • Is there a key on the MacBook Pro to toggle display options for a projector

    I have had some difficulty getting my InFocus projector to consistently work correctly with my MacBook Pro. Is there a key on the MacBook Pro that toggles the options for projector display? There was one on my last MacBook and my previous PowerBook.
    Thanks -
    Dudley Warner

    No, there is no longer a key to control external display modes (it's F7 on my 1st gen MBP, but the option was removed along with the embedded numeric keypad in the Early 2008 models). There's not a substitute keyboard shortcut (with the exception of installing a macro player like Keyboard Maestro). Your main option is System Preferences > Displays (as stated, ticking the box to show Displays in the menu bar provides a helpful shortcut).

  • The volume keys on my MacBook Pro stop working after using headphones.

    The volume keys on my MacBook Pro recently stopped controling the volume after I've used headphones. I still have sound; I just can't make the volume increase or decrease. The mute, however, still works just fine. Because I have sound from the intenral speakers I know the computer doesn't think the headphones are still in the jack. A reboot fixes the problem, but as soon as I use headphones the problem starts up again. I want to fix this permanently.
    I don't know if this helps but all the other keys (brightness, play/pause, etc) still work. I recently had to reset the PRAM because my computer refused to sleep when the lid was shut. I've checked system preferences and everything seems to be in order.
    Can someone please help!?

    I found this advice on another thread after encountering the same problem - I did the reboot and it worked fine and dandy!
    I spoke with Applecare to fix my Macbook volume. Apparently there are pins inside the speaker/headphone jack that can get jammed. We fixed mine by doing some sort of reboot:
    Turn off laptop.
    Hold down the Option, Command, P, and R keys (all four at once, it's tricky!) and while holding down the four keys, turn on the computer. When you hear the second chime, release the four keys.
    This re-set the sound toggle to internal speakers. Now I'm afraid to insert headphones again, but I assume this reboot will work over and over.

  • Is there a way one can safely remove the keys on a macbook pro lap top and clean under them without causing damage? Or is it best to just take it in for that.... say if one spilled a small amount of maple syrup? Help please.

    Is there a way to remove, clean, and safely re-affix the keys on a macbook pro without causing damage.... or is it best to let the Pro's do it?

    i would let the pros do it. ive dismantled my mbp before and its a pain with all the little parts. you basically have to remove everything from the bottom up (logic board, ram, all cables, cd drive) to get to the keyboard.
    how much junk you got under those keys? the space between the metal and keys are small, unlike a pc laptop (though most pc laptops have easier keyboards to remove) .

  • The "A" key on my macbook pro is not working Can I fix it myself?

    The "A" key on my macbook pro will not work.  How can I fix it?
          -----Earnie---------

    Don't use any cleaning spray. Wipe with a moist but not wet microfiber cloth.
    1. Reset SMC.     http://support.apple.com/kb/HT3964
        Choose the method for:
        "Resetting SMC on portables with a battery you should not remove on your own"
    2.Reset PRAM. http://support.apple.com/kb/PH4405

  • One of the key on my macbook pro is not working properly, can it be fixed by a cleaning spray or something. there is lot of dust in where I live and thought that might be the culprit. thanks Jason

    one of the key on my macbook pro is not working properly, can it be fixed by a cleaning spray or something. there is lot of dust in where I live and thought that might be the culprit. thanks Jason

    Don't use any cleaning spray. Wipe with a moist but not wet microfiber cloth.
    1. Reset SMC.     http://support.apple.com/kb/HT3964
        Choose the method for:
        "Resetting SMC on portables with a battery you should not remove on your own"
    2.Reset PRAM. http://support.apple.com/kb/PH4405

  • I need a new Delete key for my MacBook Pro

    My daughter ripped my delete key off my MacBook Pro and I need a new one. Anyone know where to get one from and how much they would be? Thanks!

    Do a Google search or call an Apple store or an AASP.  Ask them about the cost.

  • My key to increase backlighting of keys for my MacBook Pro isn't functioning

    My Key to increase backlighting of Keys for my MacBook Pro isn't functioning.

    Check your settings in System Preferences>Keyboard.
    Try a SMC reset:
    http://support.apple.com/kb/ht3964
    Ciao.

  • Did Apple changed the Expose & Dashboard keys in the MacBook Pro?

    The new MacBook Air came with two new keys, mission control and launchpad. Did Apple changed the keys in the MacBook Pro they are selling or are they selling them with no change, because since now the dashboard is in a different place the key is useless.

    No they did not, but I fell like they should replace the icons on F3 and F4 since they are so much easier to get to using gestures.

  • What is the key Combination to send CTRL-BREAK Key sequence on MacBook Pro

    I need to send a CTRL-BREAK key sequence to a router via console terminal. what is the key Combination to send CTRL-BREAK Key sequence on MacBook Pro
    I can't seem to find any documentation on how to send a CTRL-BREAK sequence
    TIA

    In the Terminal application, select the 'Help > Terminal Help' menu item. In the help window that opens, click on the link 'Shortcuts for Terminal.' Scroll down to the line beginning 'Send break.'

  • How do you turn off the keyboard volume key clicks on macbook pro?

    how do you turn off the keyboard volume key clicks on macbook pro?
    Thanks for the help!!

    Thanks! That was easy.
    All the Best!

  • Question using numpad key commands on MacBook Pro

    Hi, I'm using a MacBook Pro which does not contain the imbeded numpad. I am always using these key within Logic. Does anyone know a workaround for this or would I have to remapped certain keys? Many thanks.
    Ed

    Previous Mac laptops had the numpad inbedded in the keyboard, but now it is no longer there. I'm trying to find out if there is a way to map these keys on a MacBook Pro, and if so which keys there are. In Logic, the numpad is a very important feature for me. Thank you for any help on this...

  • "num" key on a Macbook Pro

    Hi there.
    Where can I find the "num" key on a Macbook Pro (bought in 2011), please: activating the numbers on the keys instead of characters?
    French keyboard
    Thanks in advance

    Get this:
    http://pqrs.org/macosx/keyremap4macbook/

  • How do I replace keys on my macbook Pro Keyboard

    how do I replace a key on my MacBook Pro keyboard?

    You send it to Apple to get it repaired or you take it to an Apple Store or Apple Authorized Service Provider.
    http://www.apple.com/retail/geniusbar/
    http://concierge.apple.com/reservation/us/en/
    Regards,

  • Shift key on the macbook pro 15 inch retina is unresponsive

    I bought the macbook pro 15 inch retina just over a week ago and i'm definitely regretting it because the shift key is really unresponsive; what does this mean? I also want to know how to extend the track time on garage band. Anyone know how to? It's really bugging me because I need to type effencianly for a £2000 pound laptop it should be perfect to be honest.
    I have the 2.5 ghz, 16 gb of ram and 512 gb flash storage.
    The battery only runs out just browsing the web and it heats up very fast by only watching youtube...

    MEMORY
    Built-in Memory    8 or 16 GB PC3-12800 (1600 MHz) DDR3L on-board memory
    Maximum Memory    16 GB
    Memory Slots    None
    Interleaving Support    Yes
    DISPLAY
    Built-in Display    15.4-inch (diagonal) LED-backlit display with IPS technology at 220 pixels per inch
    Resolutions    2880 by 1800 pixels (Retina); scaled resolutions: 1920 by 1200, 1680 by 1050, 1280 by 800, and 1024 by 640 pixels
    GRAPHICS
    Graphics Card    NVIDIA GeForce GT 650M and Intel HD Graphics 4000
    Graphics Memory    1 GB GDDR5 (GeForce GT) 512 MB DDR3 (HD Graphics) shared with main memory
    Display Connection    1 - HDMI port or Thunderbolt digital video output (Supports an HDMI-compatible device while using one Thunderbolt display or support for two Thunderbolt displays)
    Display Modes    Dual display extended, video mirroring, and AirPlay Mirroring
    External Resolution    Up to 2560 by 1600 pixels on up to two external displays
    Camera    720p FaceTime HD camera
    Use this to access all the resolutions
    http://www.madrau.com/indexSRX4.html

Maybe you are looking for