Disabled cron malware persistence on 2026-05-08 UTC.
Original cron copies: /mnt/root/rescue-20260508/original-crons
Also left *.rescue-malware-backup-20260508 beside edited crons.
Renamed:
/usr/local/lib/.dbus -> .dbus.DISABLED_BY_RESCUE_20260508
/usr/share/man/man3/.syslog-c6d6d4b2 -> .syslog-c6d6d4b2.DISABLED_BY_RESCUE_20260508

Disabled systemd persistence:
/etc/systemd/system/polkit-daemon-helper.service -> .DISABLED_BY_RESCUE_20260508