If I have reasonable suspicion that I had installed malware I would start with a full factory format of the device then reset all passwords that were stored in my DB. Depending on the situation, I may never consider the device trusted again, but it really depends on the severity of the situation.