Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Aezurhvin

macrumors newbie
Original poster
Oct 4, 2017
4
0
Denmark
So my Macbook pro was hacked with a RAT.
I was advised to boot it with a usb containing a clean install, format the HD and reinstall.
So I did.

Now when I booted after a couple of days, a guest account was suddenly created and visible in the login menu.
The same happened when the RAT was in there (for some reason they/he think its funny)

I did not activate any guest accounts.

How the heck do you get a RAT out of your system?
 
Doesn't help. Its a cowardly RAT, with absolutely no life. Its staying put. Maybe 'cause it knows when I catch it, it will be exterminated ;)
 
The guest account seems to be always enabled by default.

To remove it, go to System preferences" then "Users and groups".

From there, click on the padlock and enter your password. Then select "Guest user" and remove the checkmark by "allow guests to log in to this computer". ...you will need to be an admin to do this.

James.
 
  • Like
Reactions: TonyK
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.