Key logger or Monitoring Service

[immobilus]

I think someone may have been a key logger or some form of monitoring service on my macbook. I don't want to get into specifics because I'm on it now. I've done searches and pay recommend checking things in the command line or checking your logs. I don't understand the command line read outs and everything in the logs looks suspicious. I also don't recognize normal from not so normal processes and services.

One crazy thing is my media player will randomly open by itself and start playing files. Weird **** like that, plus things far more personal. I need answers really bad.

Can someone please help me identify things that might be suspicious?

 

[GGJstudios]

I think someone may have been a key logger or some form of monitoring service on my macbook.

Unless you installed it yourself or gave someone access to your computer, that's not possible. Check Activity Monitor to see what processes are running.

You can check the following locations for apps that automatically launch on startup and delete any you don't need/want:

• System Preferences > Users & Groups > yourusername > Login Items (SL and older: System Preferences > Accounts > yourusername > Login Items)
• In Finder, click Go > Go to Folder > /Library/LaunchAgents
• In Finder, click Go > Go to Folder > ~/Library/LaunchAgents
• In Finder, click Go > Go to Folder > /Library/StartupItems

After you delete items from the list, restart your Mac and those processes should not be running.

 

[randomgeeza]

I think someone may have been a key logger or some form of monitoring service on my macbook. I don't want to get into specifics because I'm on it now. I've done searches and pay recommend checking things in the command line or checking your logs. I don't understand the command line read outs and everything in the logs looks suspicious. I also don't recognize normal from not so normal processes and services.

One crazy thing is my media player will randomly open by itself and start playing files. Weird **** like that, plus things far more personal. I need answers really bad.

Can someone please help me identify things that might be suspicious?

The first thing I would do, is disable all sharing services, in System Preferences. Also do you see the screen sharing icon in the top tool bar... it looks like two boxes linked.

If that is all turned off, I would try running ClamX AV which is a free app from the App Store. It's a non intrusive virus scanner, whether it checks for key-loggers I'm not entirely sure, but it shouldn't do any harm.

netstat -n in Terminal will show all active network connections... The top of the list shows local connections.

Have you recently split from a significant other? Sounds like a little bunny boiler-ish behaviour to me.

I'm sure others will come up with better ideas, but the above is where I would start.

Oh and it might be worth changing your admin password, but until you are sure that there is no key-logger, monitor on your unit, it would be pointless.

Good luck.