I am somewhat administering an old Windows Server 2008 server that is used to host a older Video Game.
It's in such a state that it has tons of custom code on it that run the server and hasn't really been maintained.
We recently noticed that someone had taken control of and turned the box into a malware/spam box.
The box has internet facing RDP (yes I know...) and FTP.
What steps, if any, can I take to more secure this box and try to make it even a little bit harder to compromise?