[stevekemp]

It sounds like you have some files appear, which proves a compromise has occurred, but you don't know the source of those files then?

If that is the case, if you're running software that has security vulnerabilities if you install that same software on Linode, or anohter host, you'll just get compromised again.

The solution has to be for you to:

* Learn how you were compromised.

* Actively take steps to avoid it.

Otherwise you'll find yourself posting in six months time "Linode disabled my server, help!" and "I'm moving to Hetzner".

[suhair]

My wild guess is that, the version of the ubuntu for that droplet is not supported now. Yes from a learning perspective this is fine. But you cannot recover the droplet from malware is not a pleasant news.