I rent a web server ("service") at a web hosting site which recently i assume got hacked but i am unsure how... I know it got hacked because recently out of the blue certain files and folder appeared on the FTP-server. I deleted all the files and changed the password on everything in relation with this server... a couple of days later files appeared again so i deleted them and they haven't appeared yet, now there is still one more thing that is anoying me if i look at the ".com" file (which stores request's to the website) it grows to like 50 000 request's a day :( ! Whats more all the request are from a ip-address traced to like Argentina, and they are asking for one of the removed .exe files... as far as i understand they are getting back the 404 file.
A example row from the .com file:
"Requestor IP" - - [02/Aug/2012:19:24:32 +0200] "GET /onlySMT.exe HTTP/1.1" 404 3612 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB7.3; InfoPath.2; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; BRI/2)"
Now there are 50 009 rows like this in the log file... What can i do to stop this?
btw the passwords i use are random 12 character length with English alphabet, small and large letters and numbers.
Thank you in advance for any answers which are all very appreciated