I took my iMac to a local service for a full cleaning and new thermal paste.
I have FileVault 2 turned on so they asked my password (I don't know why, maybe to check if everything is working properly).
Since I am super mistrustful, is there any way to tell if they installed some key logger on my iMac?
I am running El Capitan.
Thank you
Was the local service an Apple Authorized Service Provider or some other computer repair place?
Regarding a keylogger, the only way to be sure you don't have a keylogger is to do an erase and install OS X and then restore your documents.
It was some other, but they specialize in Mac and other Apple products.
I saw some commands that one can run to check if there is some nasty stuff going on, but those dont work on el capitan.
NEVER EVER take a Mac to anyone else but an AASP or an Apple Store. If they are not authorized, you don't know for sure they know what they are doing and use quality products. As far as your keylogger question I have already answered that.
The only way you can be sure that the computer is not compromised is to erase the startup volume and restore it to something like the state it was in before the service. The easiest approach is to recover the entire system from a backup that predates the service. You will lose all changes to data, such as email, that were made after the time of the snapshot. Some of those changes can be restored from a later backup.
wow, I totally forgot it, I have time machine on and have a backup just few hours before the service.
I am going to format the volume and restore from Time Machine backup.
Thank you
How can I check if someone installed key logger on my iMac?
