Only download a Server 2008 ISO from a legitimate source you trust (like a former MSDN subscriber or your own backup), and never expose it to the internet or a modern corporate network.