I got hit by what I believe was 0day WinRar vulnerability. Installed a nasty XMR miner that was a massive pain to disable. It took over the whole system and blocked any attempts around removal or even reading relevant articles about the miner.

Was able to get rid of it via safe mode and finding a cleaning tool from rather niche (region-focused) sources.