Possible Key Logger

Question

Level 1

0 points

Possible Key Logger

Hey guys. I have reason to believe there is a key logger on my computer. I play the game, World of Warcraft. Recently my account was broken into. They messed a lot of things up. They also had access to my e-mail.

I changed all my passwords from computers at my college as soon as I found out. I have yet to type a password on my computer now. I just copy and paste them when I need to check my e-mail, or play the game.

I am normally pretty safe with my computer I thought. I always have my firewall turned on. At the time, I did not have an anti virus installed however. Many times people suggest people couple key loggers with addons downloaded for the game. I think its very possible thats where it came from. I deleted all the addons for the game I had. I ran Symantec/Norton anti-virus. It didn't come up with anything, but there were quite a few files it "didnt have permission to check." Most of these seemed like normal mac files, but I am a little frightened by it. I got the noscript addon for firefox to hopefully maybe prevent it i nthe future

I guess my question is- how can I be sure there is a key logger. What is a good way to get rid of it. Does doing an archive and install work, or should I just reformat.

Any help is greatly appreciated. Thanks

Macbook Pro, Mac OS X (10.5.6)

Posted on Apr 17, 2009 7:47 AM

Reply

Answer 1

nerowolfe

Level 6

13,090 points

Apr 17, 2009 10:40 AM in response to Chaznasty

Do you typically run your computer as an administrator? That's really not good when "sharing" your computer with the world. Apple recommends not casually using the computer administrator account unless actually administrating. Playing games is not an administrative task, AFAIK.

Scan your computer from MacScan website.
Install LittleSnitch. This will alert you of a keylogger, but if there is one, it's too late. If you have a keylogger installed, presume the worst. All personal data are compromised.

Never play games online that let others use or access your computer unless you are prepared for an intrusion.
Your best bet is to use your TM backup and restore your system to a time prior to this event.
And if you have been the victim of an attack, protect your identity with one of hte available services.

Reply

Answer 2

Chaznasty Author

Level 1

0 points

Apr 17, 2009 11:26 AM in response to nerowolfe

Ok thanks for the reply. Will little snitch detect key loggers that are already present? I just want to confirms that I actually do have before I reformat my computer. Also, if it does find one, should I reformat, or is there a better options? Thanks for the administrator tips I never thought about. Unfortunately the game I play can be exploited pretty bad to make real money, so often times hackers target related websites with keyloggers and things. Thanks for your help

Reply

Answer 3

Dogcow-Moof

Level 8

36,941 points

Apr 17, 2009 2:49 PM in response to Chaznasty

Little Snitch alerts you of outgoing network connections.

This means it will not alert you if you have a key logger installed, but it will alert you if a key logger on your system tries to send that information to someone else.

So for example, you may have a key logger installed, but without the network connection only people with local access to your Mac could get to the information.

Reply

Answer 4

Apr 22, 2009 4:09 AM in response to Chaznasty

ProteMac KeyBag (http://www.actymac.com/ProteMac_KeyBag) is one of the most popular keystroke recorders for Mac OS. So, I guess, it can be installed on your computer. Try to contact the developers to find out how you can detect the keylogger.

Reply