I have reason to believe my ex installed a keylogger on my Macbook. He gave my laptop to me for Xmas and did me the "favor" of setting it up for me. I know they are nearly impossible to detect, and at this point I know I need to do a system restore to be sure that my computer isnt being compromised....but is there any way to know whether he did this?
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Keylogger
- Thread starter oliver100
- Start date
- Sort by reaction score
there are keyloggers for osx that parents install to watch what their kids are doing. I looked up a few on google "keylogger mac", and they brag that they are indetectable.
Safest thing to do is just erase your hard disk and reinstall from the install disks.
Safest thing to do is just erase your hard disk and reinstall from the install disks.
If you're that untrusting of the person, then I think you have a bigger issue than a key logger. Installing a program like Little Snitch would likely be able to block any key logger from sending out any log details. A fresh install would be a good idea though.
There is a way, Activity Monitor.app. Wouldn't really help though. You would need to know the process' name. I really doubt it would be named "KEYLOGGER_IBESPYINONU", or something like that.
LOL!!!! I should make one just to name it that.
Most of them boast that Activity Monitor won't show them running though.
Do a full reinstall. If a rootkit has been installed, chances are it's actually in charge of the operating system, rather than just leeching off the top of it.
I almost replied to this... why do people keep resurrecting threads from months (or even YEARS) ago?
Because if the topic IS the same - its saves costs of the domain owner, makes searches more useful/relevant as all information is in one place, and well for me this IS helpful.
I'm curious, if these "rootkit" keyloggers are undetectable;
1) is Apple working on a way to patch this in updates?
2) Is there a generic command to invoke these apps to load a GUI front end, or txt front end in Terminal to actually SEE if its installed? Saving the op, and others from purging data needlessly and starting everything from scratch?!
