boot the system in safe mode and run full system scan.

any other accounts you have signout and do the same in rdp too

contact both FF and RS support and explain the situation with proof