Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Malware(I think)

A few days ago I let a friend of mine use my computer and I think he might have infected it w/something. It started running slow for awhile so I looked at the Activity monitor and the guest account was active as well as my regular standard account. I have looked at the Activity monitor a few times before and I don't remember the guest account being active along w/my regular account at the same time. I tried to delete the account but it only allowed me to disable it and the activity monitor says it is still active or it is still registered on the activity monitor. I have MacScan and I ran that and it didn't find any malware, but the guest account was still running. So I downloaded Sophos and ran that for the whole  computer and then did a custom scan of the guest account and it didn't find anything, but the guest account is still running w/my standard account. It takes up a significant amount of memory and I would like to get rid of it. What I am thinking is it might be a key logger but being in the guest account would it capture any of my key strokes in my standard account. I have already accessed my bank account and used a credit card before I discovered this, so I am worried. Or maybe I just never noticed that the guest account runs along w/my standard account. One thing I noticed is that when I use the administrator's account the guest account is not present in the activity monitor.

     One other question, should I disable MacScan while SOPHOS is running. I heard that having 2 antivirus programs on the same computer is not good and that they interfere w/each other. MacScan only runs once a week or when I scan manually. My computer is an IMAC w/OS 10.6.8. Sorry for the long post, but I never had malware before and I'm not very technical.

mrmick

"BLESSED ARE THEY WHO CAN LAUGH AT THEMSELVES FOR THEY SHALL NEVER CEASE TO BE AMUSED"

:1003461


This thread was automatically locked due to age.
Parents
  • The guest account should only be running when you have fast user switching enabled.  However, if you're sharing files with other systems on your network, it uses the guest account.

    If you aren't using guest sharing or guest login, just go to System Preferences -> Accounts, authenticate (click the lock), and uncheck "allow guests to log in" and "allow guests to connect to shared folders."  This should fix your problem.

    In response to your MacScan concern, MacScan and Sophos Home Edition play well together; MacScan doesn't have a realtime scanning option, which is what is usually incompatible in AV software.

    :1003465
Reply
  • The guest account should only be running when you have fast user switching enabled.  However, if you're sharing files with other systems on your network, it uses the guest account.

    If you aren't using guest sharing or guest login, just go to System Preferences -> Accounts, authenticate (click the lock), and uncheck "allow guests to log in" and "allow guests to connect to shared folders."  This should fix your problem.

    In response to your MacScan concern, MacScan and Sophos Home Edition play well together; MacScan doesn't have a realtime scanning option, which is what is usually incompatible in AV software.

    :1003465
Children
No Data