A few weeks ago, one of my freinds came over. He has been my friend since we were little kids. However, over the summer, he got bored... very bored... and a bored 14-year-old who knows a good deal about computers for his age can only mean trouble.
About a month ago, he started working on something. It was a "phishing" scam, disguised to look like a login page to major email services. He hosted the fake login pages. He then told his friends that he had sent them emails, and linked to the fake login page. He got about 10 people's passwords by doing this. After he fooled everyone that he could with this scam, he started inviting people to his house. He then allowed them each to log in to AIM. Unsuspecting anything from him, they all logged in. The next day, he had their passwords- he had keylogged them. Luckily, I was smart enough not to enter my password on his computer.
A few days later, I invited him over my house, figuring that, since he isn't always a bad kid, and that I would be right behind him when he was on my computer, he wouldn't do anything.
About a week later, I found a note in my backpack at school. Written on it was "nub" and my password. Knowing who it must have been, I got very angry at him. At first, I figured it must be my Gmail security question, which was very easy for anyone who had known me for a long time. I changed it to something that only I would know. I changed my password to Gmail as well as my password AIM, making them both differnet passwords.
However, the next day, I recieved the infamous AOL System Message IM telling me that my screen name was signed on in 2 locations. At this point I got really ticked off.
Later he signed on, and I got really angry at him. He eventually admitted that he had set up a keymailer on my PC. Apparently when I was going to the bathroom or getting a drink, he had downloaded such a program.
Now, the reason why I didn't get as mad at him as I should have is because he never actually did anything with the passwords that he stole. He merely kept them like trophies. But a keymailer is a different thing. He can get anything that I say on my computer. Since I talk to my family from time to time on my computer and discuss personal issues, I am quite scared at what he might see in my keylogs. I can only hope that he is merely searching the document for the AIM login prompt and getting my password, then proceeding to close the file and look no further.
I have no idea where the file is. What can I do?!