Almost positive I've got a keylogger...

Delete FB account. Create new email address. Create new Facebook account with very secure PW.

Problem solved.

Sounds a bit like "people are trying to steal your house, so set it on fire and build a new one", but that's effective too.

On Facebook, under the Account menu, you get Application Settings. There you can check'n'delet'em.

I think you're right on your way!

Christopher --
I agree.

Start everything new.
All new passwords for everything, all completely different.
Invite only the people you want to.
You could spend 4 more weeks (and much emotional energy) trying to figure out what he did.
Just ditch it all and start fresh.

I'm going through the same situation. In a nutshell I've changed gmail, facebook and mobileme passwords multiple times yet someone is still able to access these sites and harass me.

I own MacScan but it comes up clean but that doesn't assuage my fear that there's something logging my keystrokes. How else can you piece together how someone is able to access three different websites all with different passwords?

I've thought about deleting fb but if I recreate a new one I haven't really found the problem have I and I'm likely doomed to make the same mistake.

My thing now is to attempt to configure my potentially affected mac remotely using updated passwords done on work computers and added to my 1password apps on Mac and iPhone/iPad. This way I can hopefully see if I can rule out a keylogger because i'm not typing in any passwords.

I've also downloaded Lil Snitch but they only let you do 3 hours worth of network monitoring. Clearly there is a big security breach somewhere. I really have little faith that any computer company can deliver on hyped claims of security. It appears that with a little effort and fortitude someone can make your life a pita by simply mucking with your email and social networks.

I'll keep you guys/gals informed but this stuff is happening to more than just a few people. I know someone else going through the same things.

I own MacScan but it comes up clean but that doesn't assuage my fear that there's something logging my keystrokes.

If the responses on this thread are not relevant to you for some reason, you should start your own thread. This one's long enough, we don't need to take it off in another direction. We were able to eliminate a lot of possibilities in this case due to the fact that the attacker was known.

I've also downloaded Lil Snitch but they only let you do 3 hours worth of network monitoring.

You can always just restart it and run it for another 3 hours. Or buy it.

The responses are very relevant in fact i'm going through the same situation. I've got a couple of hunches who it may be but nothing solid.

Password resets have no effect (seemingly) which seem to portend the use of keyloggers. I'll probably buy Lil Snitch because it's pretty handy once set up properly.

I noticed this thread is still categorized as "not answered" so I thought i'd chime in. Definitely don't want to take things of course and looking for good suggestions (besides what has already been offered).

All the best.

hmurchison wrote:
I own MacScan but it comes up clean but that doesn't assuage my fear that there's something logging my keystrokes. How else can you piece together how someone is able to access three different websites all with different passwords?

My guess would be that if he can get into your email, he can do "forgot password" and have a new password sent to that email address for all the other sites.