How to remove viruses in Debian headless server?

Question

Debian

In ps, 5 processes in a row with the same names are visible.
If you request ps again, then the process names are already
different
.
You delete it there and then there is created what thread gdasptjdedf.
Also in init.d there are scripts for loading them.
I tried to edit the rights to launch, but new ones are created.
But manual removal does not help.
Now the gateway on the server is disabled, otherwise the virus clogs the Internet channel.
How to fight?

Answer 1

Rearrange everything: no one can guarantee that there is something else.

Answer 2

put the auditd package
hang up rules that allow you to track the creation of files or the launch of processes
by logs there is a supervisor process