I have a Mac OS X computer and I want to know if it has installed a Keylogger or something that control what I'm doing: when I switch on/off the computer, what I install on it, etc.
How can I know that? How can I uninstall all?
A lot depends on the relationship between you and the machine - is it your own? Do you have administrator access to it? Since you mention that it's corporate owned, do you have an administrator that has ok'd a keylogger (for whatever reason)? It's possible (or, in fact, likely) you won't be able to remove it without drastic steps - specifically without re-imaging the machine with a known-good OS install. I don't know of any corporate environments where they'd let you do that.
Unfortunately, with a corporate owned machine, they're likely allowed to install whatever they want, and any measures you take to circumvent the logger may well get you fired.
Some things that you may be comfortable trying though:
Unfortunately, since a keylogger is likely to have revealed your passwords, etc. to an attacker, and is generally a sign of a relatively sophisticated attack - it's very likely that the logger itself has managed to get itself installed as a kernel module or rootkit and so even a clean AV sweep isn't an indication you're clear. You really need to consider that just wiping it may be your only option; start fresh and if you're worried about people you know breaking in, keep a close eye on the machine, keep it locked when you're away and keep your passwords complex and secret.
This may vary across a lot of different consideration
At all, I think trusting is needed for good work.
Nota: As keylogger act like a virus, first thing he do is to hide himself, so whithout strong computer knowledge and full access right to the machine, you can't obtain reliable information (whithout installing strongs tools in a computer that's not your...).
About what to do:
Three possibilities anyway:
Warning: This may by called
Keep in mind: If it's not your, you don't have right to alter them anyway!
|show 4 more comments|
The only real answer to both of these is to wipe the machine and re-install OS X. Technically, there could be some kind of hardware device recording your actions, but that is not very plausible unless you have highly valued assets (or unless you are a highly valued asset yourself).
This question is protected to prevent "thanks!", "me too!", or spam answers by new users. To answer it, you must have earned at least 10 reputation on this site.