Windows Server Security - Urgent

[Bilip]

Please share every ideas how to avoid hacking server.
I don't talk about copying items but hacking.
I had unpleasent experienc lately just because I didn't delete 1 ***ing folder in C:/Xampp
Hacker got acces to everything because of this. (whole dedicated server)
I didn't have to close server just bacause Hacker turned out to be decent man. So I was lucky.
Now He doesn't have acces to phpmyadmin. But he showed me that
he can:
1.Turn off my website and put anything instead "hacked by..." for example
(defacement)
2. Log in to my god char ! (because he simply know the passowrd)

here my next question. Is it possible to uncode passwords from database (if he copied firstly)

3. Additionally He has char, which can attack for 20k or more .

How this things are possible?
And
Please share all methods to stop simmilar hacking attacks!
I don't have any undefault firewalls or anyvirs on dedic. serv
Please help
I feel scared because one person can destroy everything what I created and there can be more than one
I'm quite desperate, please share your experience

 

[abes800]

Try Linux more Secure.

 

[lord5]

 

[Bilip]

I have payed for 3 months in advance (for dedicated server) So I have about 10 weeks to learn and change into Linux, but still I have to somehow survive 10 weeks...
And he simply can do anything with my page :O
I'm using XAMPP as most of users...

 

[abes800]

I have payed for 3 months in advance (for dedicated server) So I have about 10 weeks to learn and change into Linux, but still I have to somehow survive 10 weeks...
And he simply can do anything with my page :O
I'm using XAMPP as most of users...

Go for uniformserver

 

[dchampag]

Uniform server or

Internet information services HTTP

 

[Bilip]

Is it easy in usage ? And can you guarantee it is safe?
Because I had no Idea about power of hacking attack.
Will I find any manual/instructions to thoose programs
And I understand it is instead of XAMPP right?
Is it obwiously doable to import sql data base from one to another right?

 

[seleo]

if he has already accessed to your website then he hacked your server
you have to install new OS and check which scripts is the reason for your hacking
because that way he have a evil code in your server
i think its a trojan or a shellcode
check this
http://otland.net/f14/serious-vulnerability-xampp-everyone-using-xampp-please-read-140244/
and thats will help you also
Search � Exploits Database by Offensive Security

 

[Bilip]

Thanks to everyone I will try to do what ever is possible
unfortunatelly 1 week ago I didn't know about this webdev.
Is there any vuln s on Uniform servers which I should know?

Next question, after all when Hacker will have no acces, If he has old database can he somehow uncode passwords to have accest to old accounts (older than his attack)
Was that clear ?

 

[dchampag]

Yes he can, just require all chars to change password on login or something.