Please post a HijackThis log here and let us have a look at it. You can find HijackThis, a HJT log analyzer and much more if you click on the link in my signature.

Also tell us the exact version of the vps you have.
(right click the blue ball with the “A” and choose about)