How to find a keylogger

My sister is having some problems. Yesterday someone hacked into her facebook account and changed a bunch of stuff. She uses a very secure password (10 random letters and numbers) and never tells anyone what they are. Someone messing with her facebook account is annoying but not the end of the world. However I am worried they will find there way into something more important. I am thinking maybe someone got a keylogger onto her computer somehow. So my question is if there is a way to detect a keylogger on her computer. Or can anyone think of other ways that someone mite have been able to find out her passwords or get into to her facebook account.
Thanks,
Adam

 

The single best way to fix is is to cut your losses and reinstall the OS. It's also the safest way. Once a computer is compromised, it's hard to ensure whatever was on it is *completely* gone.

 

I was going to suggest Spybot search and destroy. They claim to nab keyloggers, and its free. However, Overclocker's advice with the wiping the hard drive looks very solid.

 

Ya I guess I should have added. She is in the middle of no where doing research rite now. She is not computer stupid but would not be able to reinstall an OS on her own. There is literally no where she could take the computer to have it wiped so that is not an option either. When she gets home in a in the middle of August I will reinstall windows but for now it is really not an option at all. And I am pretty sure she has run spybot and adware but I will double check.

Thanks,
Adam

 

Is there the possibility that she might have logged in from somewhere other than her private computer (labs, etc?), or that she allowed someone else to use her computer? Either case would have compromised her account, but only the second would put the rest of her private information at risk.

If you run detection programs, remember to do them in safe-mode, with as much disabled as possible, to give the program fewer places in which to hide (if there's a program at all).

 

change password first somebody could have been looking over her computer or she was on a different one and told it to remember me

 

I agree with HunterC, first step = change password. Then, try to find a scanning solution that can find keyloggers.

More likely is that somebody watched her type the password. You cannot have Facebook "remember me", so it is either a keylogger or prying eyes.

 

The first thing she did was change her passwords for everything. So if that wast he problem then it has been fixed. I will have her run scans in safe mode. Thanks for the help guys.
Adam

 

Is it possible she used someone else's e-mail address to (originally) sign up for Facebook (or join another network)? All the person would have to do is reset the password, since it's already set to their e-mail.

 

You can use advanced system optimizer.

it's a computer tool that offers security and optimization for your system.

It uses Spyware Detective, which detects keyloggers,spyware,and adware.

THere's a 30-day trial version, so it can take care of that.

Link- http://www.systweak.com/asov2/

 

Changing the password is useless unless she did it on another computer.

 

The best advice was already given...which was, format, do a clean install, just in case.

If it continues to happen after that, then they're just really trying to piss you off with facebook, not to mention, breaking international laws, and all that fun stuff.

 

wait, change password? no, dont do that on the same computer. big no. change her facebook password on another computer just in case, because you never know if the keylogger is in effect or not. and then reinstall the os

unless its already too late

 

well if she changes the pw from another computer and logs on with her infected pc the result is the same. Wiping seems to be the best solution thus far to ensure the keylogger is completely gone but has she tried scanning with an anti-virus scanner? They usually pick up trojans and keyloggers pretty well.

 

Obviously you don't want to take unecessary risks, but I find it hard to believe someone would use a keylogger to only sabotage Facebook. Yes, it can easily happen. But changing the password is an easy way to test that. If it keeps happening, it is probably a keylogger, if it doesn't then someone must have seen her enter that password. I think the latter is more likely. Changing someone's Facebook info sounds like the revenge of an ex-boy/girlfriend or a crush. Does she know anyone that might want to do this? Is the person leaving big clues when they change Fb?

If she's really busy with school, a reformat is going to set her back a little while.

 

speaking of sucha problem... I've noticed recently that my facebook has added the "emotion" application which I've kept it unadded. Does anyone know why this might happen? Nothing else happened afterwards only this one time =/