My mXBOOKAIR WAS HACKED WITH A KEYLOGGER PROGRAM

I recently discovered a clone of my partition, login and several devices and servers running ports after doing a monitor of my network and system. I thought I downloaded something but after I restored it a week later it was as if I didn’t do anything, the hacker launched the program again. It was someone I trusted to use my wifi and I’ve done everything to restore it but somehow the person keeps launching the program whenever every time I thought I done everything to protect my system. I erased and restored it to the os it came with and installed antivirus. Also blocked all connections except basic internet service and restricted port forwarding. Is anyone familiar with this.Is there something I can do to send him a defensive attack that will shut down all of the the devices and the person’s home network that is somehow remotely linked to my system and phones. Im plan to report this, if someone could please link me to where I can get this resolved permanently. Thank you