Nice thing about VMs is that it's easy to have a daily snapshot, and roll it back to before compromise event.