some blog spammer hacked my server
 

is blog spam really that profitable that people are hacking into servers to spread their shit? its a windows box and i deleted the user account i assume they created and made sure i downloaded all updates. is there any other ways i can make sure this guy no longer has access to my server?

Ya, get a unix server.

yeah get linux or unix

and use firewall / ssh :)

create htaccess for your admin directory