SurvivingInfidelity.com^®

An odd thing happened yesterday and I'm still trying to figure it out. WH and I had an email exchange about divorce logistics...some info my attorney needs for the settlement. Conversations are typically civil between us, but at the tail end of our our exchange I had a moment and let a few sarcastic comments fly (don't regret those by the way).

Here's the odd thing: later that night when I checked my email that exchange had been deleted. At first I thought I must have accidentally deleted it, but I know I didn't. I never touched the "trash" button. I'm starting to suspect he put spyware on my computer to access my email and files...he used to use my laptop when we were together, and when the s**t hit the fan between us, I was away from home for a week and my computer was at home. I'm running a scan right now, but I don't know if it will pick up the presence of spyware. Anyone dealt with this? How did you get it off your computer?

OMG I swear its like everything I went through/am going through is already on SI somewhere!

I had this same thought. My school laptop - I don't know how to tell. I'll be watching the thread.

I wouldn't really care except that is the laptop I pay bills with and he'd get account info.

Change all of your passwords.

That's what's making me suspicious. I did change my passwords almost immediately after DDay. If there is spyware on my computer, he can see the keystrokes and would know the new passwords no matter how many times I change them.

Change all of your passwords.

This wont matter if you truly believe that there is spyware on your computer. Your WH will simply use the keylogger to get your updated passwords.

You should take the computer in to the Geek Squad or some other computer repair place. Tell them that you suspect there's spyware on your computer and you'd like it removed.

THEN change all your passwords once you get it back.

This wont matter if you truly believe that there is spyware on your computer. Your WH will simply use the keylogger to get your updated passwords.

You should take the computer in to the Geek Squad or some other computer repair place. Tell them that you suspect there's spyware on your computer and you'd like it removed.

THEN change all your passwords once you get it back.

For what that would cost me I could just give my laptop to a homeless person or a 5 year old and let Wh enjoy whatever they are doing on it and buy a new one, it was only $200.

But your answer seems much more reasonable.

You had me at "buy a new one"!

(I love electronics, lol).

Me too :)

F**k a duck, I found it. Here's what you do (thanks web geeks!):

Hit the ctrl-alt-delete sequence and bring up the task manager. Under task manager, click the "processes" tab. The processes list will show you all executable files running on your computer. This takes some patience, google the names and read the info associated.

csrss.exe is running on my computer and is helpfully described as such:

csrss.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

How much lower can he stoop?

EW!

Can you save that? Can you quarantine it but not remove it? Leave it be for evidence or something!

No joking - I had a friend who was NOT having an A, her H thought she was, he went seriously over the edge/bonkers. They physically separated and he was doing stuff like that, when she busted him he had all her email contacts and was sending all kinds of people really gross messages that looked like they were from her, etc.

She had to go round with the PD about it.

Now she's with a new guy.

How much lower can he stoop?

Good Lord!!! It boggles the mind that this person was your intimate partner...UGH!

This really lets you know what he thinks of you. Like Chattel.

I am so sorry that you are going through this crap fest.

He has once again showed you who he really is. Please believe him.

Run Forrest, RUN.

As far as keeping this trojan on your laptop for evidence, maybe you can take a screen shot before you dump the .exe...? The pdf that you make of the screen shot will automatically have a time stamp and show what computer it originated from.

Take care.

Now that you know it's there, perhaps you can think of a way to use it to your advantage?

If it is a keystroke logger - he knows you found it right...? Shame - cause you could mess with him...

Ugh! Just realized that means he knows your user name and password here too I assume.

Think he went further... your phone too? So sorry Atticus.

Coming to you from my iPad now....I got a new phone as we were separating he has never touched, so that should be OK. Just shut down the computer and changed all my passwords through my phone, so hopefully no keystroke monitoring there. So yup, he likely knows everything I've been communicating for the past two months. Fortunately most conversations about him have been offline, but he would see what I'm saying to my attorney. Well, glad I figured it out now and was suspicious of that email ending up in the trash. He's making it easier day by day to be happy to be rid of him.

more about csrss.exe - http://answers.microsoft.com/en-us/protect/forum/mse-protect_scanning/csrssexe/26bba20c-2691-4d42-bec4-637436c53c4f

Maybe you should type up a little something for him to read via the keystrokes, may I suggest 'screw you dumbass'!

Glad you found it, but sorry you're having to deal with his crap.

This could be a virus, but csrss.exe from Microsoft is an essential system service, especially if it's running from the Windows/System32 folder. See http://www.neuber.com/taskmanager/process/csrss.exe.html, for example.

inconnu's reference says essentially the same thing, but I think this needs to be stated explicitly here, since not everybody will actually check out the link.

When you think your PC has been compromised, I recommend using housecall.trendmicro.com to scan and fix your PC, since some malware hides itself from the scanner on your PC. With Housecall, the scanning software runs on Trend Micro's site, and that's a lot more secure than any web-connected PC.

I found two csrss.exe running in my Task Manager. I'm still okay?

I found two csrss.exe running in my Task Manager. I'm still okay?

Depends... maybe maybe not.

The first thing you should check when looking for this kind of thing is the exceptions list for you installed AV program. Little secret, but when people install keyloggers legitimately, they have to notify the AV software that it is supposed to be there so it will be ignored.

After that, try downloading things like Spybot S&D, Malware Bytes, running those, and perhaps a battery of the free online scanners as well.

Now here is where I don't want to alarm you, but you should also check your router to see what other devices are connected to it. Someone could use a packet sniffer on one computer to watch the internet traffic on another if they are connected to the same router.

S**t taco! I found it on my computer too!

WTF!