@barlop Sorry from the late reply. But as @JourneymanGeekalready wrote, but in a slightly longer form. "if compromised in not 100% sure known ways, there is no sure way to recover. So delete. Or rather. OS reinstall start, format drive, reinstall OS;. Restore data from previously known good backups.