Finding a keylogger on my macbook pro computer
Hi,
I think someone has put a keylogger on my computer and I'm trying to locate it. They have told me two pieces of info, and the only way they would know is by some how having access to my computer. Only I know the password. I'm not under 18 nor an employee. Please look through the list off my computer terminal which I got to see if there's any keylogger clues.
Is this spyware: google.keystone.agent.plist
Do you see any spyware or keylogger?
Once I find out the spy software, how do I find out who put it on?
Perhaps there are other keyloggers or spyware, do you see any?
I'm quite sure that someone has put a keylogger on my macbook pro. I followed the directions here: https://discussions.apple.com/thread/4243511 And I came up with the following. Does you see any keylogger info here? Please include any helpful info. Thank you so much for your assistance. I greatly appreciate it and I look forward to reading your response.
1.
com.mcafee.kext.Virex (1.1.0d1)
Ellies-MacBook-Pro:~ healthyinspiration$
2.
com.mcafee.reporter
com.mcafee.menulet
com.google.keystone.system.agent
com.adobe.CS4ServiceManager
Ellies-MacBook-Pro:~ healthyinspiration$
Ellies-MacBook-Pro:~ healthyinspiration$ ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null/Library/Components:
/Library/Extensions:
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
AVEngine.framework
AudioMixEngine.framework
NyxAudioAnalysis.framework
PluginManager.framework
ScanBooster.framework
VirusScanPreferences.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobeAAMDetect.plugin
Flash Player.plugin
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
flashplayer.xpt
googletalkbrowserplugin.plugin
npgtpo3dautoplugin.plugin
nsIQTScriptablePlugin.xpt
o1dbrowserplugin.plugin
/Library/Keyboard Layouts:
/Library/LaunchAgents:
com.adobe.AAM.Updater-1.0.plist
com.adobe.CS4ServiceManager.plist
com.google.keystone.agent.plist
com.mcafee.menulet.plist
com.mcafee.reporter.plist
/Library/LaunchDaemons:
com.adobe.fpsaud.plist
com.apple.remotepairtool.plist
com.google.keystone.daemon.plist
com.mcafee.ssm.Eupdate.plist
com.mcafee.ssm.ScanFactory.plist
com.mcafee.ssm.ScanManager.plist
com.mcafee.virusscan.fmpd.plist
com.microsoft.office.licensing.helper.plist
com.wdc.WDDMservice.plist
com.wdc.WDSmartWareServer.plist
/Library/PreferencePanes:
Flash Player.prefPane
/Library/PrivilegedHelperTools:
com.microsoft.office.licensing.helper
/Library/QuickLook:
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
/Library/ScriptingAdditions:
Adobe Unit Types.osax
/Library/Spotlight:
Microsoft Office.mdimporter
iWork.mdimporter
/Library/StartupItems:
cma
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
Library/Fonts:
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
Google Earth Web Plug-in.plugin
Picasa.plugin
Library/Keyboard Layouts:
Library/LaunchAgents:
com.apple.CSConfigDotMacCert-healthyinspiration@me.com-SharedServices.Agent.plist
Library/PreferencePanes:
Ellies-MacBook-Pro:~ healthyinspiration$
Ellies-MacBook-Pro:~ healthyinspiration$ osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null
iTunesHelper, HP Scheduler
Ellies-MacBook-Pro:~ healthyinspiration$
Ellies-MacBook-Pro:~ healthyinspiration$ kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'
com.mcafee.kext.Virex (1.1.0d1)
Ellies-MacBook-Pro:~ healthyinspiration$ sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfi x|x)/{print $3}'
Password:
com.wdc.WDSmartWareServer
com.wdc.WDDMservice
com.microsoft.office.licensing.helper
com.mcafee.virusscan.fmpd
com.mcafee.ssm.ScanManager
com.mcafee.virusscan.ssm.ScanFactory
com.mcafee.ssm.Eupdate
com.google.keystone.daemon
com.adobe.fpsaud
Ellies-MacBook-Pro:~ healthyinspiration$
3.
Password:
com.wdc.WDSmartWareServer
com.wdc.WDDMservice
com.microsoft.office.licensing.helper
com.mcafee.virusscan.fmpd
com.mcafee.ssm.ScanManager
com.mcafee.virusscan.ssm.ScanFactory
com.mcafee.ssm.Eupdate
com.google.keystone.daemon
com.adobe.fpsaud
Ellies-MacBook-Pro:~ healthyinspiration$ launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'
com.mcafee.reporter
com.mcafee.menulet
com.google.keystone.system.agent
com.adobe.CS4ServiceManager
Ellies-MacBook-Pro:~ healthyinspiration$
4.
com.mcafee.reporter
com.mcafee.menulet
com.google.keystone.system.agent
com.adobe.CS4ServiceManager
Ellies-MacBook-Pro:~ healthyinspiration$ ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta} * L*/Fonts 2> /dev/null/Library/Components:
/Library/Extensions:
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
AVEngine.framework
AudioMixEngine.framework
NyxAudioAnalysis.framework
PluginManager.framework
ScanBooster.framework
VirusScanPreferences.framework
iTunesLibrary.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobeAAMDetect.plugin
Flash Player.plugin
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
flashplayer.xpt
googletalkbrowserplugin.plugin
npgtpo3dautoplugin.plugin
nsIQTScriptablePlugin.xpt
o1dbrowserplugin.plugin
/Library/Keyboard Layouts:
/Library/LaunchAgents:
com.adobe.AAM.Updater-1.0.plist
com.adobe.CS4ServiceManager.plist
com.google.keystone.agent.plist
com.mcafee.menulet.plist
com.mcafee.reporter.plist
/Library/LaunchDaemons:
com.adobe.fpsaud.plist
com.apple.remotepairtool.plist
com.google.keystone.daemon.plist
com.mcafee.ssm.Eupdate.plist
com.mcafee.ssm.ScanFactory.plist
com.mcafee.ssm.ScanManager.plist
com.mcafee.virusscan.fmpd.plist
com.microsoft.office.licensing.helper.plist
com.wdc.WDDMservice.plist
com.wdc.WDSmartWareServer.plist
/Library/PreferencePanes:
Flash Player.prefPane
/Library/PrivilegedHelperTools:
com.microsoft.office.licensing.helper
/Library/QuickLook:
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
/Library/ScriptingAdditions:
Adobe Unit Types.osax
/Library/Spotlight:
Microsoft Office.mdimporter
iWork.mdimporter
/Library/StartupItems:
cma
/etc/mach_init.d:
/etc/mach_init_per_login_session.d:
/etc/mach_init_per_user.d:
Library/Address Book Plug-Ins:
Library/Fonts:
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
Google Earth Web Plug-in.plugin
Picasa.plugin
Library/Keyboard Layouts:
Library/LaunchAgents:
com.apple.CSConfigDotMacCert-healthyinspiration@me.com-SharedServices.Agent.plist
Library/PreferencePanes:
Ellies-MacBook-Pro:~ healthyinspiration$
Ellies-MacBook-Pro:~ healthyinspiration$
5.
iTunesHelper, HP Scheduler
Ellies-MacBook-Pro:~ healthyinspiration$
Ellies-MacBook-Pro:~ healthyinspiration$
MacBook Pro (15-inch Late 2011), Mac OS X (10.7.5)