Originally Posted by cashbot

If the server is compromised then you don't have any other option except to format the drive and reinstall, hope you have good backups. You can't trust anything your server tells you, there could be backdoors anywhere.