ElsaQ

Q: HELP! there is an unknown user on my mac?!?!

I was installing something and accidentally installed MACKEEPER in the process. I think i disposed of it properly (?) I quit the app, and trashed it and any folders and downloads related to it at all, then emptied that trash. I then restarted my mac because my wifi was acting like crap and then, when logging back in I noticed I have 3 users on my mac?! I actually have 2 which is my admin user and then another but there was an extra one. No one in my family knows my password for my admin user so they couldnt possibly make another user without asking me and no one HAS made one. The user name is "other.." but I cant see the full name and I tried to log on but theres a username and a password and there isnt a profile picture really. Then, freaking out, I logged into my main admin user and I checked system preferences > users and there was only my account and my extra account. What do i do, how do i get rid of it? PLEASE HELP ASAP!!! I THINK IT MIGHT BE SOME OTHER VIRUS EITHER MACKEEPER OR SOME BACKDOOR FROM MACKEEPER that gave me some other virus HELP

MacBook Air, OS X El Capitan (10.11.3)

Posted on Aug 27, 2016 4:12 PM

Close

Q: HELP! there is an unknown user on my mac?!?!

  • All replies
  • Helpful answers

  • by Rysz,

    Rysz Rysz Aug 27, 2016 4:28 PM in response to ElsaQ
    Level 7 (20,157 points)
    iTunes
    Aug 27, 2016 4:28 PM in response to ElsaQ

    You do not have a virus.

    El Capitan comes with a Guest User account.

     

    To properly dispose of MacKeeper follow these instructions.

    How to uninstall MacKeeper – updated (from Apple Help Writer):

    http://applehelpwriter.com/2011/09/21/how-to-uninstall-mackeeper-malware/

  • by etresoft,

    etresoft etresoft Aug 27, 2016 4:40 PM in response to ElsaQ
    Level 7 (29,051 points)
    Aug 27, 2016 4:40 PM in response to ElsaQ

    Hello ElsaQ,

    One of the new tricks that malware and scamware use is creating new users on your machine. This could be what you are seeing.

    ​ 

    I wrote a little diagnostic program to help show what adware is installed. Download EtreCheck from http://www.etrecheck.com, run it, and paste the results here. EtreCheck is perfectly safe to run, does not ask for your password to install, and is signed with my Apple Developer ID.

     

    If adware is installed, EtreCheck will help you remove it, although you may have to supply a password. If you aren’t comfortable with that, just post the EtreCheck report here and other helpers can tell you exactly what files need to be deleted and how to do so.

     

    Disclaimer: Although EtreCheck is free, there are other links on my site that could give me some form of compensation, financial or otherwise.