My kid downloaded something sketchy

Found out my son installed some random app from a YouTube video. Pretty sure it's malware or a scam at minimum. Deleted it but now I'm paranoid. Running antivirus software and changed passwords. Should I be doing anything else? Any way to track what data might have been accessed?