I am working to restore functionality and clean up the mess left behind at the moment. It looks like the mailserver may be the way that the attackers got in.
If there is anyone on the board with Windows server administration experience or other intrusion detection/forensics experience, please contact me at porion@hotmail.com or Yahoo! IM phalen180
Thanks!




