Stop a malware process:
kill <MALICIOUS PID>
Change the malware process from execution and move:
chmod -x /usr/sbin/<SUSPICIOUS FILE NAME> mkdir /home/quarantine/ mv /usr/sbin/<SUSPICIOUS FILE NAME> /home/quarantine/