Silent key logger

Question

Level 1

4 points

Silent key logger

I am a victim of domestic violence. My ex put perfect key logger for Mac on my old MacBook. I removed it some years ago but now I need evidence it was on there for court. I have IMs of him admitting it and how to remove but I wondered if there was a digital footprint of exactly when it was installed? He was FTPing all my data to his ex gfs shared hosting space. He maintains he never had my banking passwords or financial records but I know he harvested all of my email going back years. So not new key strokes - maybe using passwords?

Please be kind in responses, I realise that some things may not be accepted as evidence but after PTSD treatment I feel having the full facts and proof it really was on there would be good closure. And am ready to deal with this legally.

Thanks for any help and being kind.

Posted on Jan 28, 2022 2:45 AM

Reply

Answer 1

Top-ranking reply

ku4hx

Level 7

23,586 points

Jan 28, 2022 2:58 AM in response to di188

We are a community dedicated to solving Apple device problems; hardware and software. Your device is apparently operating normally and that indicates no problems we can deal with.

It will be virtually impossible to recover anything from your Mac as the drive has had its space overwritten many times over during the years since removal of the key logger. Essentially you destroyed the evidence/electronic trail.

If you wish to try and recover data you'll need too contact a data recovery company.

Understand, I'm no lawyer but I have dealt with a situation similar to yours. I assume you have a lawyer; follow his or her advice. Good luck

Reply

Answer 2

ku4hx

Level 7

23,586 points

Jan 28, 2022 8:49 AM in response to di188

You'll have to enter TimeMachine and find out; do not use Finder. But the way TM works, old data is purged as new data needs space. It depends on exactly how long ago "several years" was.

Reply

Answer 3

di188 Author

Level 1

4 points

Jan 28, 2022 3:17 AM in response to ku4hx

Thanks for your speedy reply. I presume my Time Machine will be of no use here? I realise it was a long shot; I doubt I could get any forensic recovery with my limited resources.

Thanks anyway.

Reply