When someone compromises your system, you can't know everything that has been done. The only truly safe thing to do is reinstall everything from scratch, backing up configs of course.