Proxy+ Trojan

[Bill]

Someone installed Proxy+ on one of our servers (Win2K/IIS5) and left it open
on a high port for spammers.  I've shut it down, but how do I prevent them
from doing this again?