The macOS has something called LaunchAgents which runs certain processes automatically when you login to a user account. Unfortunately, the malware bad guys use LaunchAgents for activating their malware bad stuff. It is not a bad idea to have a look in LaunchAgents to see what is there. This article explains how to do that. You can never be too careful maintaining Mac security.