SurvivingInfidelity.com Forum Archives

Return to Forum List

WH spying on me?

You are not logged in. Login here or register.

Pages: 1 · 2

Atticus13 posted 7/4/2013 09:41 AM

An odd thing happened yesterday and I'm still trying to figure it out. WH and I had an email exchange about divorce logistics...some info my attorney needs for the settlement. Conversations are typically civil between us, but at the tail end of our our exchange I had a moment and let a few sarcastic comments fly (don't regret those by the way).

Here's the odd thing: later that night when I checked my email that exchange had been deleted. At first I thought I must have accidentally deleted it, but I know I didn't. I never touched the "trash" button. I'm starting to suspect he put spyware on my computer to access my email and files...he used to use my laptop when we were together, and when the s**t hit the fan between us, I was away from home for a week and my computer was at home. I'm running a scan right now, but I don't know if it will pick up the presence of spyware. Anyone dealt with this? How did you get it off your computer?

Jennifer99 posted 7/4/2013 09:45 AM

OMG I swear its like everything I went through/am going through is already on SI somewhere!

I had this same thought. My school laptop - I don't know how to tell. I'll be watching the thread.

I wouldn't really care except that is the laptop I pay bills with and he'd get account info.

Jospehine85 posted 7/4/2013 10:10 AM

Change all of your passwords.

Atticus13 posted 7/4/2013 10:12 AM

That's what's making me suspicious. I did change my passwords almost immediately after DDay. If there is spyware on my computer, he can see the keystrokes and would know the new passwords no matter how many times I change them.

GabyBaby posted 7/4/2013 10:12 AM

Change all of your passwords.
This wont matter if you truly believe that there is spyware on your computer. Your WH will simply use the keylogger to get your updated passwords.
You should take the computer in to the Geek Squad or some other computer repair place. Tell them that you suspect there's spyware on your computer and you'd like it removed.
THEN change all your passwords once you get it back.

Jennifer99 posted 7/4/2013 10:18 AM

This wont matter if you truly believe that there is spyware on your computer. Your WH will simply use the keylogger to get your updated passwords.
You should take the computer in to the Geek Squad or some other computer repair place. Tell them that you suspect there's spyware on your computer and you'd like it removed.
THEN change all your passwords once you get it back.

For what that would cost me I could just give my laptop to a homeless person or a 5 year old and let Wh enjoy whatever they are doing on it and buy a new one, it was only $200.

But your answer seems much more reasonable.

GabyBaby posted 7/4/2013 10:20 AM

You had me at "buy a new one"!
(I love electronics, lol).

Jennifer99 posted 7/4/2013 10:21 AM

Me too :)

Atticus13 posted 7/4/2013 10:24 AM

F**k a duck, I found it. Here's what you do (thanks web geeks!):

Hit the ctrl-alt-delete sequence and bring up the task manager. Under task manager, click the "processes" tab. The processes list will show you all executable files running on your computer. This takes some patience, google the names and read the info associated.

csrss.exe is running on my computer and is helpfully described as such:

csrss.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

How much lower can he stoop?

Jennifer99 posted 7/4/2013 10:28 AM

EW!

Can you save that? Can you quarantine it but not remove it? Leave it be for evidence or something!

No joking - I had a friend who was NOT having an A, her H thought she was, he went seriously over the edge/bonkers. They physically separated and he was doing stuff like that, when she busted him he had all her email contacts and was sending all kinds of people really gross messages that looked like they were from her, etc.

She had to go round with the PD about it.

Now she's with a new guy.

Getting to Happy posted 7/4/2013 10:41 AM

How much lower can he stoop?

Good Lord!!! It boggles the mind that this person was your intimate partner...UGH!

This really lets you know what he thinks of you. Like Chattel.

I am so sorry that you are going through this crap fest.

He has once again showed you who he really is. Please believe him.

Run Forrest, RUN.

As far as keeping this trojan on your laptop for evidence, maybe you can take a screen shot before you dump the .exe...? The pdf that you make of the screen shot will automatically have a time stamp and show what computer it originated from.

Take care.

gonnabe2016 posted 7/4/2013 10:49 AM

Now that you know it's there, perhaps you can think of a way to use it to your advantage?

Take2 posted 7/4/2013 11:00 AM

If it is a keystroke logger - he knows you found it right...? Shame - cause you could mess with him...

Ugh! Just realized that means he knows your user name and password here too I assume.

Think he went further... your phone too? So sorry Atticus.

Atticus13 posted 7/4/2013 11:16 AM

Coming to you from my iPad now....I got a new phone as we were separating he has never touched, so that should be OK. Just shut down the computer and changed all my passwords through my phone, so hopefully no keystroke monitoring there. So yup, he likely knows everything I've been communicating for the past two months. Fortunately most conversations about him have been offline, but he would see what I'm saying to my attorney. Well, glad I figured it out now and was suspicious of that email ending up in the trash. He's making it easier day by day to be happy to be rid of him.

inconnu posted 7/4/2013 11:34 AM

more about csrss.exe - http://answers.microsoft.com/en-us/protect/forum/mse-protect_scanning/csrssexe/26bba20c-2691-4d42-bec4-637436c53c4f

happierdays posted 7/4/2013 16:53 PM

Maybe you should type up a little something for him to read via the keystrokes, may I suggest 'screw you dumbass'!

Glad you found it, but sorry you're having to deal with his crap.

sisoon posted 7/4/2013 17:31 PM

This could be a virus, but csrss.exe from Microsoft is an essential system service, especially if it's running from the Windows/System32 folder. See http://www.neuber.com/taskmanager/process/csrss.exe.html, for example.

inconnu's reference says essentially the same thing, but I think this needs to be stated explicitly here, since not everybody will actually check out the link.

When you think your PC has been compromised, I recommend using housecall.trendmicro.com to scan and fix your PC, since some malware hides itself from the scanner on your PC. With Housecall, the scanning software runs on Trend Micro's site, and that's a lot more secure than any web-connected PC.

Nature_Girl posted 7/4/2013 17:43 PM

I found two csrss.exe running in my Task Manager. I'm still okay?

aesir posted 7/4/2013 17:57 PM

I found two csrss.exe running in my Task Manager. I'm still okay?

Depends... maybe maybe not.

The first thing you should check when looking for this kind of thing is the exceptions list for you installed AV program. Little secret, but when people install keyloggers legitimately, they have to notify the AV software that it is supposed to be there so it will be ignored.

After that, try downloading things like Spybot S&D, Malware Bytes, running those, and perhaps a battery of the free online scanners as well.

Now here is where I don't want to alarm you, but you should also check your router to see what other devices are connected to it. Someone could use a packet sniffer on one computer to watch the internet traffic on another if they are connected to the same router.

hatetheworld posted 7/4/2013 18:21 PM

S**t taco! I found it on my computer too!

WTF!

Pages: 1 · 2

Return to Forum List

© 2002-2018 SurvivingInfidelity.com ®. All Rights Reserved.