Thank you for the info. I generally work according to the best-practices you outline.

> There is no software that will run a scan and give you a green check. If there is one like that, I wouldn't trust it either.

Are you advising against running ClamAV, chkrootkit and rkhunter? I know they won't give 100% guarantee, but something better than nothing, I thought.

I am most worried about my developer machine, as I have testdrived numerous OSS projects, with different stacks, package managers, etc. Fetched billions of npm packages, and browsed gazillion sites for tech advice (using FF, Privacy Badger, uBlock, but still).

A clean reinstall may be in order, but it'll cost so much time getting all config I now have in place again.