Keylogger found on mac

Hello everyone,

First and foremost, I don't own a mac. I'm writing this for a friend who's in a bit of a situation.

She broke up with her boyfriend a couple of months ago, a boyfriend who in the past admitted to spying on some of her communication. A few days ago she found out he appearantly still has access to the things she writes to her friends, not just via mail or facebook, but also msn.

Saturday she found a keylogger called logkext installed on the computer, something she is 100 percent sure she didn't do, and there's not many people who had access to her computer.

Now since they've broken up he has had no direct access to the computer, but I was wondering what kind of programs there are out there that could forward these logs to an emailadress and how she should go about finding them.

He denies everything but she's very sure he can still monitor her because he recently let out some very private information he could not have known otherwise.

Any help would be appreciated

Quite frankly she should just back up her personal files, then wipe the computer clean and reinstall OS X from scratch. Make a new username, new password (one he'd never know or guess), and be done with it. There's just no telling what other ways he may have compromised her system.

She could install Little Snitch which will warn her of any outbound/inbound traffic that she doesn't want to authorize.

Little Snitch

lifeisabeach said:

Quite frankly she should just back up her personal files, then wipe the computer clean and reinstall OS X from scratch. Make a new username, new password (one he'd never know or guess), and be done with it. There's just no telling what other ways he may have compromised her system.

Click to expand...

Excellent suggestion

schweb said:

She could install Little Snitch which will warn her of any outbound/inbound traffic that she doesn't want to authorize.

Little Snitch

Click to expand...

Also a good idea, but not a substitute for the above.

But also, she should also change all of her passwords for the services she uses, including Facebook, all email accounts, all IM/Chat accounts, any school or work accounts.

technologist said:

But also, she should also change all of her passwords for the services she uses, including Facebook, all email accounts, all IM/Chat accounts, any school or work accounts.

Click to expand...

That's a good point too. If the computer is compromised, then anything she has ever accessed from it is compromised as well. But don't change usernames/passwords for anything from that Mac until it has been formatted and OS X cleanly reinstalled. Otherwise, he might just be able to re-grab them.

Plus I would take him to court. This activity is MOST DEFINITELY against the law.