Spy Software

Discussion in 'Mac Basics and Help' started by saberahul, Aug 15, 2012.

  1. saberahul macrumors 68040

    Joined:
    Nov 6, 2008
    Location:
    USA
    #1
    I recently gave my Mac to the IT team at my school so that they could install Office 2011 for me (they don’t just give us the license).

    I left my laptop with the tech for about 30 minutes. Is there a possibility that he could have installed something which could track what I do? Is there a way for me to check for suspicious behavior running on this laptop? THanks.
     
  2. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #2
    It's very unlikely they installed anything other than Office. You can check your /Applications folder for any new apps. You can also check the following locations for things that launch when you startup:
    • System Preferences > Accounts > yourusername > Login Items
      (Lion and ML users: System Preferences > Users & Groups > yourusername > Login Items)

    • /Library/LaunchAgents/
      (Lion and ML users: In Finder, click Go > Go to Folder > then enter the path above)

    • ~/Library/LaunchAgents/
      (Lion and ML users: In Finder, click Go > Go to Folder > then enter the path above)

    • /Library/StartupItems/
      (Lion and ML users: In Finder, click Go > Go to Folder > then enter the path above)
    You can also check the Console.app for any logs that may indicate something being installed.

    Really, though, all that is unnecessary, as a school or business isn't likely to risk a lawsuit for invasion of privacy.
     
  3. saberahul thread starter macrumors 68040

    Joined:
    Nov 6, 2008
    Location:
    USA
    #3
    Thanks for the response. I’ve attached the screenshot of what /Library/LaunchAgents/ shows me. I checked console but its all gibberish to me…

    I do not see any new apps other than the typical 2011 office apps (outlook, word, ppt, excel, RDM, messenger, communicator).
     

    Attached Files:

  4. tninety macrumors regular

    Joined:
    Apr 18, 2010
    Location:
    Banned!
    #4
    It's the feds, they're tracking your every move :eek:
     
  5. AZREOSpecialist macrumors 68000

    AZREOSpecialist

    Joined:
    Mar 15, 2009
  6. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #6
    I assume you already had LogMeIn and TeamViewer installed, right?
     
  7. gmanist1000 macrumors 68030

    gmanist1000

    Joined:
    Sep 22, 2009
    #7
    If not.... wow. They are tracking him!
     
  8. saberahul thread starter macrumors 68040

    Joined:
    Nov 6, 2008
    Location:
    USA
    #8
    Yup. You’re correct.

    ----------

    Lol, they aren’t running anyways.
     
  9. sofianito macrumors 65816

    sofianito

    Joined:
    Jan 14, 2011
    Location:
    Spain
    #9
    Worst would be a trojan... You have to checksum all your apps... :D

    Try Bitdefender or MacScan...
     
  10. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #10
    That's not necessary, as the school isn't going to install malware. :rolleyes:
     
  11. sofianito macrumors 65816

    sofianito

    Joined:
    Jan 14, 2011
    Location:
    Spain
    #11
    I won't trust them. They could perfectly install a RootKit. He probably gave them the root password...

    I would also install LittleSnitch and monitor incoming and outgoing connections...
     
  12. robgendreau macrumors 68030

    Joined:
    Jul 13, 2008
    #12
    Why not just change your password on your user account?

    And delete any other accounts that are there?

    And is that laptop really yours, or the school's? Some employers do install software (like Team Viewer or LogMeIn) for remote control so that they can provide tech support, install updates, etc. Less likely on a laptop, and super unlikely if YOU own it.
     
  13. alphaod macrumors Core

    alphaod

    Joined:
    Feb 9, 2008
    Location:
    NYC
    #13
    Your school IT cannot legally install other software on your computer without your permission unless they expect a lot of lawsuits and fines.
     
  14. saberahul thread starter macrumors 68040

    Joined:
    Nov 6, 2008
    Location:
    USA
    #14
    The laptop is mine. The software was installed under another Admin account which is now deleted. I don’t know of any rootkit or root password; however, currently, I am the only admin on this laptop.

    Is little snitch recommended? I don’t want to risk installing monitoring softwares if they use too much processing power and/or memory.
     
  15. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #15
    You don't need Little Snitch or anything else. You're fine.
     
  16. Apple fanboy macrumors P6

    Apple fanboy

    Joined:
    Feb 21, 2012
    Location:
    Behind the Lens, UK
    #16
    Have you got some bad history with your school? Or are you just paranoid? I think you are maybe a bit worried someone at your school will see what you do on your laptop!
     
  17. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #17
    As already stated, a school isn't going to risk the legal problems they would have if they did something that foolish.
     
  18. Stooby Mcdoobie macrumors 6502a

    Stooby Mcdoobie

    Joined:
    Jun 26, 2012
    #18
    Yeah, that's not going to happen.
     
  19. munkery macrumors 68020

    munkery

    Joined:
    Dec 18, 2006
    #19
    I doubt you will find any thing but, if you're worried, install ClamXav from the Mac App Store. Then, run a scan.

    Also, run a search using Finder for "/System/Library/Extensions/logKext.kext".

    logKext is a fairly well known open source keylogger for Mac that includes remote access capability.

    It requires password authentication by an admin to install but it sounds like the IT staff were given that level of access to the system.

    If doing these tasks doesn't find anything, then you have peace of mind.
     

Share This Page