Forum Moderators: open
I would think that telling him to run every reputable free malware scanner he can find, plus the "on-line" versions available from many security sites might turn up something, assuming your hunch was correct. The problem is, he may not know 'reputable' from 'disreputable,' which is how he might have gotten into trouble in the first place.
I'd be interested to know how/why you 'felt' you were being tracked -- Constant modem activity while doing off-line tasks? Strange disk activations? Or just eerie accuracy in targeted on-line advertising? :)
Jim
but the keystrokes look ... hesitated... just slightly slower than my fingers.
after years of typing you get into a rythm with these things and even the slightest difference is noticable.
there were a few tasks under the taskmanager that seemed odd.
like there was a film over the lcd screen.... something capturing my every move....
ok, now im scared.
It could also be just the system if there are a lot of services running.
I can type as fast as 135-155 WPM, and sometimes the computers I own or the ones I work on at work or someone's house can't keep up with the speed.
Install one of those annoying firewalls that ask you for per file access, like Comodo. It'll drive your friend crazy, but you'll find out what the file is if it's needing connection to the net. Of course he will want to know what the files do and why they need net access.
Key-logging is quick and simple and will not slow things down noticeably (but might cause crashes if badly written, though this is unlikely from XP onwards).
If Notepad also misbehaves, then a badly-designed process is running at too high a priority. You may be able to find this using TaskManager.
Kaled.
Create a text file with a simple, but unusual phrase. Save the file, then search all files using that phrase. It couldn't hurt to be disconnected from the web while you do this since the log file is usually overwritten as soon as it is sent.
If you find your phrase in two or more files, you likely have a keylogger. Then it's time to take a look at some of those processes. (I'd research the odd ones anyway)