GoDaddy found crooks in its network, and kicked them out - but not before they'd been in there for six weeks.