My Ex is watching everything I do. Plz Help!

Hi,
I have reason to believe my Ex has physically installed some sort of an application or script on my computer thru which he is able to get an email of everything I type on my keyboard (including this message and all my passwords to my email accounts for example). How can I figure out if and where a keylogger program is installed on my computer? How can I stop the automated emails that is sending info out of my computer?

Also If there is another program on my computer that automatically forwards all my emails to him (both thru Outlook Express and online email providers like yahoo), how can I find out and stop that?
Please help. Thanks,
Frustrated!

A physical keylogger would be located between your keyboard and the port on your computer. Its probably software though. Due to the large amount of different keyloggers and spy programs available it could be quite hard to find. Your best, safest, surest and reliable option is to back up all the documents and files you need to cds, then reinstall windows from scratch and _then_ change ALL your passwords for your email accounts, forums etc. Good luck

An updated antivirus may be useful, since they detect such programs.. There are also programs aimed to remove and detect keyloggers. Try them.

While you dont fetch a brand new antilogger program...
You might want to find out what program is logging your keystrokes.. see if you can spot it when you do ctrl+alt+del (have a look at the process tab, if running winxp). If you are sure it is out of order, have no mercy. Kill it. An remove it from your system forever.
About the undesirable connections: remove the cable from your network interface :). Or you can have a firewall installed, like kerio, and see a warning when our suspicious program tries to connect to the world. Slam the door in his nose, and wipe it from your computer. (kerio will ask if you want to allow keylogger's connection. Dont ;) ).
Having some options in mind (checking it via the process listing, or using a firewall, or using an antivirus or anti keylogger tool), try to use the tools. Much less hassle. i wish you good luck..

Frustrated

This may not be a text book answer but it is what i would do.

1. press{ ctrl-alt-delete} at the same time -See if there are processes running that
Shouldn`t be. (If you don`t know what a certain process is ...just search for it
Using Google...just as it`s spelled in task manager.)

2. Download either of these programs and scan your c: drive

The Cleaner www.moosoft.com It has a 30 day free trial


Tauscan www.agnitum.com It has a 30 day free trial

This will find trojans/keyloggers

3. Then i would download spybot.....This will also search for keyloggers.

Spybot www.safer-networking.org

4. Almost forgot...After that download a software firewall. This will alert you if a
Program of some sort is trying to "phone home"{like to the other guys
computer} with your data.

These are free

- Zone alarm www.zonelabs.com You have to look around.
- Sygate www.sygate.com
- Outpost www.agnitum.com My favorite,

Read the manuals and you`ll be good to go.


There are alotta ways this information could be obtained by this person Trojans,keylogggers,etc. After you run these scans be sure and change passwords.


EDIT This is a good anti-virus scanner http://housecall.trendmicro.com/

Just go to the site and run it online. /EDIT


Good Luck

Post a hijack this log? http://www.spywareinfo.com/~merijn/files/HijackThis.exe

lets take a look at your regkeys and startup. After you can post your HJT log here or on one of these forums-
http://www.spywareinfo.com/~merijn/forums.html

If this was a fairly innocous matter, i would fully endorse the ideas presented by others here. But what it comes down to is that domestic situations can possibly become dangerous and very messy for the persons involved. It is very likely that the fellow just downloaded a garden variety trojan/keylogger and installed it. But it is possible that he is technologically savy and used a custom tool. And if he is very savy he would install both so the common one is found and the "problem is solved" when it really isn't. Maybe i am just paranoid but you are Better sure and safe than sorry, especially when passion is involved.
my 2cents

Quote:

---

Originally posted here by lumpyporridge
If this was a fairly innocous matter, i would fully endorse the ideas presented by others here. But what it comes down to is that domestic situations can possibly become dangerous and very messy for the persons involved. It is very likely that the fellow just downloaded a garden variety trojan/keylogger and installed it. But it is possible that he is technologically savy and used a custom tool. And if he is very savy he would install both so the common one is found and the "problem is solved" when it really isn't. Maybe i am just paranoid but you are Better sure and safe than sorry, especially when passion is involved.
my 2cents

---

That`s the Gospel.


I`m not sure if you know how to reformat your HD, or what OS your even running.
If it`s windows ... this link will help http://faq.oit.gatech.edu/0305.html
and if that info dosen`t help try any search engine for your questions.

It will be a learning experience if anything.

Please tell us your progress.

Quick, Go to your bedroom window.
Theres every chance he is sitting in that tree with some binoculars.
Well you never know.

Ok let me get a piece of this:

Start out by pressing CTRL-ALT-SHIFT and while holding those down press one by one every letter on your keyboard and all 10 numbers. If you see a menu pop up or something asking you for a password...then you most likely have something installed.

I'm sorry but many times CTRL-ALT-Delete will now show spy programs which run in stealth mode.

Go to http://www.glocksoft.com and download the trial version of Advanced Administrative Tools. One of the features of this program is to show every program running in your system....and it could probably show the stealthy ones (I'm going to try this on my PC and let u know how it goes). You can also do a portscan on your PC to see if anything is out of ordinary.

Are you using a firewall? If yes, what kind? Have you allowed any new programs to connect to the internet lately?

Since its your EX, I can also see a legal case in here, for Invasion of Privacy and such.


Let us know how it goes, perhaps we can think of something else with some more information.

Good Luck :)



EDIT:

I just tested 2 programs: Spy Agent 4.0 and iOpus Starr Pro.
Spy agent would show up in the process viewer althogh It was set to run in stealth mode.

iOpus Starr Pro, had the option to be installed completely invisible...which made it pretty much impossible to see at ALL. Nothing on the start menu, nothing on process viewer, nothing in your C drive. NADA.

AAtools only picked up Spy Agent. Perhaps you should try some programs made specifically for spy programs.

Quote:

---

iOpus Starr Pro, had the option to be installed completely invisible...which made it pretty much impossible to see at ALL. Nothing on the start menu, nothing on process viewer, nothing in your C drive. NADA.

---

Thats when you need some hard disk monitoring. As well as registry monitoring...

www.systernals.com get filemon and regmon. they'll show you everyfile and registry key being accessed. (disable real time scanning of your av temporarily... it will fill up your logs QUICK!) filemon is similar to the lsof command on *nix. (list open files). You can also check out some of their other system utilities. The pstools are pretty good for working with processes.

Also, check out Strace @ http://razor.bindview.com/tools/desc/strace_readme.html

Quote:

---

Strace for NT is a debugging/investigation utility for examining the NT system calls made by a process. It is meant to be used like the strace (or truss) on linux and other unix OSes

---

As an alternative, why don't you contact the police? what he/she is doing is most likely illegal. If you choose to do that, DO NOT RUN HIJACKTHIS OR ANY OTHER REMOVAL TOOLS!!! changing anything could have an effect on the legal proceeding, if there are any. If they have been really messing around, changing passwords, harrassing you, stealing other information, you sound like you may have a pretty strong legal case. Like i said, if you are going to prosecute, dont change anything...


slick

The window damn it. he is watching you through the window. hic. hic

hey who has my god damn nachos.

Dude.... don't mess with nothin. Get a lawyer, the lawyer will have one of his/her forensic friends gather up evidence, and then you SUE THE SUCKER!!!

God Bless America.

Yeah, that or just shoot him off the tree. it might hurt when he hits the ground.

Try PestPatrol (http://www.pestpatrol.com/)... That will detect all kind you spyware, keylogguer, remote control, etc...

I don't know if the police will be able to find something and build a case...

No one has mentioned SpyBot!

Very cool util that will seek out and destroy (also giving you a backout option if the destroy part hurts anything).

Easy to use, free, get it at download.com.com

Mykol-

Read the thread a little closer. Spybot has been mentioned.


Atticus

REFORMAT, SECURE WIPE THE PC, AND REINSTALL LINUX... I mean err, um windows... :(

Quote:

---

I don't know if the police will be able to find something and build a case...

---

You may not be able to build a case with the police, but you can sue for just about anything. Probably more effective too.

also remember that you cant let your ex know that you are aware of his lil progs.

always keep it hush hush

and maybe try a lil fake love engineering? lol
go over ex's house and mess with ex's computer!

j/k but remember it's a thought

also remember that if you really find it is or was your ex
to contact the proper authorities! if your ex is psychotic enough to continue
hacking or cracking your computer he/she might do something worse!
and if you make a police report...at least they'll have an idea what happened to you
when they cant find your body ! har har har har har

be smart! play safe!

Frustrated -

The suspense is killin` me.....please let us know how things unravel.

Atticus

Frustrated,

Obviously if you have reason to believe he is doing that, such as him being aware of things that he could not have found out any other way, then he most likely has placed a keylogger or a trojan on your computer. Before you go messing with it or him, evaluate your situation with him. If he is a controlling ******* that just won't let go, then this may only be the tip of the ice berg as far as what he might do. So look at the state of your safety and if need be, do whatever it takes to ensure your safety.

But as was mentioned before, absolutely do not let him know you are aware of his activities before your decide what you are going to do.

Surely knowledge is power, and since you feel he might be listening, miss-information can be a very helpful tool if cautiously and properly utilized. You can quite easily test your beliefs about his keylogger or trojan by feeding him a line of crap that he could not have found out anyother way. Maybe something like, you don't how you are going to get your car fixed. And then wait and see. I'm not going to tell you about all the fun you could have with this, but with a little imagination....... But use very rarely.

Anyway approaching this with the Police as a stalking case, may be your best avenue. But stay safe.

Spector is a VERY stealthy proggy that does just what you think the ex is doing....to find out *IF* that's what he is using, look in C:\windows\system32 for mstestsys.exe....thats the executable that it uses and it WILL NOT show up in the processes window in task manager.

Some good suggestions. I would probably take the drastic steps of backing up needed data and do to a low-level format. Just watch what you back up and spend some time reinstalling all of my needed programs. Good luck.

If you honestly beleive this is true, how about this for an idea....

Do nothing with the probelm pc - Go to a cyber cafe or whatever (buy a new machine) for your internet access & use the 'problem' machine for a little social engineering.

Send an email suggesting that you've been having an affair to a willing accomplice (you can use me if you want) & wait for the response.

Use your imagination & by the time the divorce gets to court you should be able to make a lauging stock of your ex.

Or you could jsut call the feds.

Steve

Hi,

I did not spot your operating system, so I am not sure if this will work for you:

http://www.internals.com/

You are looking for "MailControl" by Yariv Kaplan.............free for private use.

If you are using Pop3, it will ask you to confirm the sending of each and every e-mail...........you can block them individually, collectively and all sorts of other options :)

It might help? as you will not be altering any legal evidence.......just blocking the transmission.

Good luck

Nihil, long time no see :)...welcome back


I was just thinking...If he really is snooping around your computer, How do you know that he hasn't looked at this website, and this very thread?

If he is using a spyprogram, it WILL give him all the sites you've visited and Passwords. Depending if he has enabled it...he'll also get s/s.

Correct me if I'm wrong, but doesn't the program have to email the intruder all the info? I guess doing a livewatch on your computer, would probably pick up if something is uploading something to the net....

Check out some of these programs:

http://alphaomega.software.free.fr/i...20Monitor.html

http://www.insecure.org/nmap/

http://www.ethereal.com/

Cyb1rd,

nice catch! 27 posts of great info and I believe the rest of us missed the most important part, the dude/dudette probably has already seen all of this. Well hopefully Frustrated pulled the cord then!

cheers

As lumpyporridge said, it is better if you make all backup for all data, and reformat ur pc. Ask the expert to help you if you dont really know what to do.

Honey, what the hell happened? Did you find something or not? Jeez, suspense!

If you need me I am in the tree with mark_boyle2002 making sure he chokes on his nachos while I am wearing my "free lorraina bobbit" T-shirt and ringing my bell

:D