The security community is agreed on this.

A rooted box can never be trusted again.