...
Now if the server spontaneously combusts, you have at least salvaged what you could.
Consider locking down other affected systems
You now have a locked down, backed up server. It is time to consider whether other systems might have been hacked too:
...