If the spyware is software, you could reformat and reinstall. But this sounds like it will be embedded in firmware. So VM wouldn’t matter.
And probably any computer found on the net that doesn’t give a ping back from the spyware will get the owner a stint in a reeducation camp.