I feared this may ultimately be the case from your first post, which seems an eternity ago, but only a week.

For such a long time without protection it is often better/safer to start from scratch as I mentioned in my first reply. Hopefully they have learned a valuable lesson and that they recognise your help and get you a few beers.

After so long their system is likely to be completely compromised with password stealers, backdoors, possibly rootkits hiding much more, etc. (you really have a task in front of you) that realistically they should be considering a format and start from scratch.