Somebody has linked to my MBAir utilizing ARD [Apple Remote Desktop]

I’ve found that somebody has gotten onto my MBAir and created me as their “consumer” utilizing ARD [Apple Remote Desktop]. That is my laptop. Sharing isn’t on. I’ve not given entry to anybody or shared my password. The alleged particular person is a pc programmer. After quite a few points the place I suspected tampering, (I’ve been by this earlier than which prompted Apple to exchange the motherboard), I began doing searches in Terminal. That is after I found that they’re utilizing ARD to remotely hook up with my laptop.

In an try and do away with this intrusion, I’ve used two sudo instructions to take away ARD from my MBAir. As soon as both terminal command runs, a discover seems stating that ARD will probably be eliminated after reboot. I reboot however the particular person reconnects; it reveals up as “restored” in a gray bar with a time stamp after I open my laptop computer. I began utilizing the sudo instructions in January.

sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Sources/kickstart -deactivate -stop
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Sources/kickstart -deactivate -configure -access -off
sudo systemsetup -setremotelogin off

I want one other approach to do away with this unlawful intrusion. Apple had me do a reinstall of the Sonoma Working System however that did nothing. Given the age of my laptop, it may’t be upgraded to the brand new OS. Can I discover one thing embedded in Library on my HD that I might delete? Or a sudo command that may completely block this particular person. I’m not a pc scientist so lay language please. Thanks.

PS: When both command is run after I enter my password, the Terminal message reads: Beginning…Eliminated choice to begin ARD after reboot. Carried out.
When this particular person reconnects, I get a “restored” message in a gray bar adopted by my login time.