Malwarebytes' "ghost" 's user

Hi.

I've uninstalled Malwarebytes via it's uninstall function in the Help menu but when I need to boot from another volume I get what you can see in the attached picture. No files related to Malwarebytes are on the Data and OS volumes as are already been deeply scanned.

Any help in order to delete the unwanted and ghost user is appreciated.

Thanks.

Simon

Posted on Oct 17, 2021 2:01 AM

Similar questions

I found an app called "Open" in the list of login items - can anyone identify what it is? Hi all, I'm currently on Ventura 13.1 on my iMac and noticed in the list of applications to Open at Login there is something called, "Open." It says it's an item from unidentified developer (see below). When I click on the information icon, it brings me to the bin folder to an item called "Open." I'm curious to see if this is a legitimate - does anyone have any idea? Thanks in advance!
8326 17
My Mac Book Air is Been Hacked - 0 Hi Respected Sir / Madam I have lots of unresolved issue on my MacBook Air, which I have shared in the Apple Support Community by name kbnikhil as I have shared below screen shots as I could see that Mac OS were getting heavily unstable and not working for me. even I had a reinstall of MacOS Catelina from Apple Authorised Service Centre Imagine Store at Bangalore India, in the month of April 2022 even then seen high crashes were seen on applications like Text Editors, Face Time, High Encryption was seen on iMessages as I was reporting from almost a year now, it is not getting resolved, Antivirus Programs are not revealing any malware, virus, spyware, bloatware etc.., But Operating System Gets Updated regularly, . then I recently came across the below website which suggest there may be a Hacking going on my macOS Catalina. https://macmyths.com/how-to-tell-if-someone-is-remotely-accessing-your-mac/ I had fallow all there steps, as flows on System Preferences, Sharing Folder I did not find Screen Sharing Enabled so went on to next steps as fallows Verify If New User Accounts Have Been Added Fallowing Command Executed in Terminal dscl . list /Users | grep -v '^_' Out Put of the command as fallows daemon MyUserAccount nobody root It Looks Normal Check Which Programs Have Access To Camera And Mic Fallowing Command Executed in Terminal lsof | grep -i "AppleCamera" No OutPut Logs from /var/logs Check The Logs For Possible Access Issues found some things WebKit Used to sharing was having to see getting sigkill, also FsckAps Logs showing many disk present also Failed iBooks Application Also Failed Photos Application And Other Applications Also found Some BloatWare like Studentd Application After All the Above things and Many Reinstalls still facing lots and lots of Application Failure, OverHeat, Network issues, Apple Store Issues and Many more etc.. So As per the Al "MacMyths Autor" Hi, I am Al. I've been working with computers for more than 20 years and I am passionate about Apple products. is my macBook Catalina Os is Hacked If Yes how to tell, and get rid of these Hackers from my system Eagerly waiting for some answer or some solution thank you for listening hopefully I will get faster solution to it thank you All K B Nikhil
8216 22
Fake Tech support popup on Mac I keep getting fake Virus alerts on my Mac. Luckily I know they are fake, because they want money. I think its from an app I installed a while ago. I uninstalled the app, but the popups are still coming. Is there a cache I need to clear or something?
2296 12

4 replies

majortom1967 Author

Level 3

644 points

Oct 17, 2021 2:48 AM in response to Owl-53

Thanks, Phillips. Already done... :(

There's no trace of any com.malwarebytes.***.*** in my Mac.

Can I just enter the Users folder via Terminal and delete it if there (after disabling SIP, of course) or will I need to reinstall Big Sur and avoid importing that user while migrating datas from backup? I have no other ideas.

Tnx

majortom1967 Author

Level 3

644 points

Oct 17, 2021 4:07 AM in response to majortom1967

Finally needed to reinstall Mac Os as the ghost user is nowhere but I believe it's a bug as this, appears, and my "Test" user not anymore (only in fase of choosing another boot volume for allowance).

Thanks for helping, mr. Phillips.

Owl-53

Level 10

105,645 points

Oct 17, 2021 2:39 AM in response to majortom1967

Find Any File (FAF) and use the words associate with the Application Malwarebytes to find possible elements still on the drive.

Owl-53

Level 10

105,645 points

Oct 17, 2021 4:14 AM in response to majortom1967

Good it was figured out by reinstalling and then removing again.

Welcome and keep up the good work :-)

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Malwarebytes' "ghost" 's user