Keylogger, remote access, virus or

Question

Level 1

0 points

Keylogger, remote access, virus or

faulty trackpad?

My MacBook Pro (running on Yosemite) has recently started acting strangely.

If I'm browsing the internet, watching something online, the curser has started to move by itself and sometimes zooms in and out of the screen.

When I try to take control, the track pad is very unresponsive and the curser moves quickly around the desktop on one occasion grabbing items on the dashboard and making them disappear, during which I panicked & switched the laptop off.

The other day, when I was offline, the curser moved along the dashboard, hovering over some applications. It opened face time, emails, both of which aren't set up properly.

Also launchpad and the browser kept opening, screens minimised made full sized etc.

Checked my sharing preferences and 'files' was selected (usually I have everything set to 'off') but my firewall was on so I don't think this was open.

I've researched some similar questions on here and run a code in terminal as linc has suggested on previous posts.

Please could you tell me if everything looks normal? (See below)

It might not be relevant but I should add that a couple of people have recently had physical access to my laptop.

Output after Step 1:

(nothing)

Output after Step 2:

com.adobe.fpsaud

Output after Step 3:

com.microsoft.autoupdate.fba.62228

com.microsoft.Word.41780

uk.co.markallan.clamxav.ClamXav-Sentry.10256

com.microsoft.entourage.database_daemon.43484

Output after Step 4:

/Library/Components:

/Library/Extensions:

ACS6x.kext

ATTOCelerityFC8.kext

ATTOExpressSASHBA2.kext

ATTOExpressSASRAID2.kext

ArcMSR.kext

BJUSBLoad.kext

CIJUSBLoad.kext

CalDigitHDProDrv.kext

HighPointIOP.kext

HighPointRR.kext

PromiseSTEX.kext

SoftRAID.kext

/Library/Frameworks:

AEProfiling.framework

AERegistration.framework

AudioMixEngine.framework

NyxAudioAnalysis.framework

PluginManager.framework

iTunesLibrary.framework

/Library/Input Methods:

/Library/Internet Plug-Ins:

DefaultBrowser.plugin

FlashPlayer.plugin

OfficeLiveBrowserPlugin.plugin

QuartzComposer.webplugin

QuickTimePlugin.plugin

Silverlight.plugin

flashplayer.xpt

nsIQTScriptablePlugin.xpt

/Library/Keyboard Layouts:

/Library/LaunchAgents:

/Library/LaunchDaemons:

com.adobe.fpsaud.plist

/Library/PreferencePanes:

FlashPlayer.prefPane

/Library/QuickLook:

iBooksAuthor.qlgenerator

iWork.qlgenerator

/Library/QuickTime:

AppleIntermediateCodec.component

AppleMPEG2Codec.component

/Library/ScriptingAdditions:

/Library/Spotlight:

MicrosoftOffice.mdimporter

iBooksAuthor.mdimporter

iWork.mdimporter

/Library/StartupItems:

/etc/mach_init.d:

/etc/mach_init_per_login_session.d:

/etc/mach_init_per_user.d:

Library/Fonts:

Library/Input Methods:

.localized

Library/Internet Plug-Ins:

Library/Keyboard Layouts:

Library/LanguageModeling:

da-dynamic.lm

de-dynamic.lm

en-dynamic.lm

es-dynamic.lm

fr-dynamic.lm

it-dynamic.lm

nl-dynamic.lm

pt-dynamic.lm

sv-dynamic.lm

tr-dynamic.lm

Library/LaunchAgents:

Library/PreferencePanes:

Library/Services:

iTunesHelper,ClamXavSentry

MacBook Pro, OS X Yosemite (10.10.3)

Posted on Jun 27, 2015 10:04 AM

Reply

Answer 1

Linc Davis

Level 10

209,547 points

Jun 27, 2015 11:30 AM in response to Rosyricepud

There are several possible causes for this issue. Please take each of the following steps that you haven't already tried until it's resolved. Some may not apply in your case.

1. Follow the instructions in this support article, and also this one, if applicable. A damaged or defective AC adapter could be the cause, even if it's the right kind.

2. Press down all four corners of the trackpad at once and release. If there's any effect, it's likely to be temporary, and in that case the unit must be serviced or replaced.

3. Open the Bluetooth pane in System Preferences and delete all pointing devices other than the trackpad, if applicable. Disconnect any USB pointing devices. By a "pointing device," I mean a peripheral that moves the cursor, such as a trackpad, mouse, trackball, or graphics tablet. A plain keyboard is not a pointing device.

4. If your model has an infrared receiver for use with an Apple Remote, disable it.

5. Start up in safe mode and test, preferably without launching any third-party applications. If you don't have the problem in safe mode, but it comes back when you restart as usual, stop here and post your results. Do the same if you can't start in safe mode. If there was no difference in safe mode, go on to the next step.

6. Reset the System Management Controller.

7. If you're using a Bluetooth trackpad or mouse, investigate potential sources of interference, including USB 3 devices.

8. A swollen battery in a portable computer can impinge on the trackpad from below and cause erratic behavior. If you have trouble clicking the trackpad, this is likely the reason. The battery must be replaced without delay.

9. A defective peripheral device or a damaged cable can cause the built-in trackpad of a MacBook to behave erratically. If you're using any wired peripherals, disconnect them one at a time and test.

10. There's also a report of erratic cursor movements caused by an external display that was connected but not turned on.

11. If you use Handoff, disable it in the General pane of System Preferences.

12. If none of the above applies, or if you have another reason to think that your computer is being remotely controlled, remove it from the network by turning off Wi-Fi (or your Wi-Fi access point), disconnecting from a Bluetooth network link, and unplugging the Ethernet cable or USB modem, whichever is applicable. If the cursor movements stop at once, you should suspect an intrusion.

13. Make a "Genius" appointment at an Apple Store to have the machine and/or external trackpad tested.

Reply