If your droplet has been compromised it is extremely difficult to clean in to ensure that it is not compromised. Cleaning up files containing malware is a good step but without identifying how your site was compromised and ensuring it cannot be again your droplet may remain compromised with attackers retaining access.

I strongly recommend redeploying your site on a new droplet from scratch rather than risk re-deploying on a compromised server.

Instead of redeploying, start with cleaning the files and database first. You’ll first need to assess at what level the hosting is compromised. Just ping me if you need help.