Antimalware software is mostly snake oil, even when it works as advertised. Once compromised, it's compromised. You can't trust the software on the device anymore. Time to hard reset and (hopefully) restore from known clean backup. One shouldn't think of security in terms of putting out fires, but proactively in prevention.