Yup, never know what could be lurking around on a comprimised system, especially if the user of the machine isnt technically savy. I second that motion of changing passwords (over a secure connection if possible ) and starting the box over from scratch.

Later,

Ndog