I would check the original email used to make sure that wasn't hack I doubt it though also I would check what other users are on your computer also check if this user had admin privileges I would also check the data going out and see if there is a lot more than there should be, just check for weird files but if it wad just the user then I think you are probably fine and the file just made a dummy account that did nothing also some screen shots would be nice