Server hacked - shv4 rootkit

Hi

my server was hacked this night, i have run rkhunter and it found shv4 rootkit, now i am restoring all the backup file on a new empty box how can i find the hole where they got access?

 

 

 

 

Top