[Discuss] infected by cupsddh skysapd, skysapdd

[J B]

Hello list,

my debian box is infected by  upsddh skysapd, sksapd maleware.

I have already remove the huge unknown cron from root.

Deleted 

 /etc/ksapd
 /etc/kysapd
 /etc/atdd

but problem with cupsdd

ls -l cupsdd 
-rwsrwsrwt 1 root root 1245451 Feb 27 16:43 cupsdd


#rm cupsdd
rm: cannot remove ‘cupsdd’: Operation not permitted

and this cupsdd agin recreates all other above deleted files to eat the resources .

Any fix available ?

Thanks