Serious question, has anyone else had a keylogger slip through on a work computer?

I was at the fire station last Tuesday, using the shared computer to order some new gear parts. I typed in my credit card number, and the site flagged it as a duplicate transaction from an hour before. I froze. I ran a full scan with the free version of Malwarebytes we have, and it came up clean. A buddy on shift who does some IT stuff on the side told me to check the running processes in Task Manager. We found a weird one called 'svchost_helper.exe' that looked off. We killed it, rebooted, and I changed every password I could think of from my personal phone. It was a real wake up call about shared machines. What other free tools do you guys use to catch stuff like that?

2 comments

2 Comments

riley_bell1mo ago

Could it have just been a weird browser glitch?

the_vera1mo ago

Ever hear of Process Explorer from Microsoft? It's like Task Manager but shows way more detail, like what company signed a file. I read a tech blog where they caught a fake "java.exe" that way because it wasn't signed by Oracle. For a quick second check, VirusTotal's website lets you upload a suspicious file to see if any antivirus engines flag it. Saved me once with a weird PDF from a vendor.