So I learnt something else today: all those passwords I was happy to let Google Chrome store... Turns out you can view all of them if you have the PC password or the phone code (for mobile Chrome).
90min and countless website password changes later, I'm slowly making my life secure again.
FFS, what an experience this was. Thankfully, as far as I can tell, no other network pc's were compromised. From what I saw when I unlocked my PC this morning, it's almost like the attacker did not finish his/her mission. It's strange that they would leave Windows Add/Remove programs open and the Symantec prompt asking for a reboot. One would think that, to successfully get my PC mining, they would close all traces of them having been inside my PC...