What is SPR/Rootkit.XCP.B.5?

Have you played any cd's from sony lately? there is a utility that can help you check your system http://www.sysinternals.com/utilities/rootkitrevealer.html It has been reciently reported that sony is using a root-kit like software with a very similar title to protect music on their cds from being copied. See that article here: http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html

In anycase, it gives a very well description of how the root kit was placed on the system.

If the answer to this is no, i would have to say, you must have a securuty hole on your network.

Check for the following:
-is your server got a public IP address or its it on the DMZ of your network (this is bad you need a good firewall)

-Do you have all the security update ran on a regular basis, that includes service packs for office, exchange, sql server or any of that other insecure microsoft software. (install all updates)

-Does anyone use the server like a workstation (dont do this, this includes term server)

Basically just have to shore up your security and then decide how you want to go about fixing the server. Once i have a verified security hole on a server, i automatically reformat and start over. But thats just me. Hopefully this helps a little. The best way to fix this is to make sure it never happens in the first place.