What was the process running? Did you investigate it before killing it off?
If you don't know what the process was and suspect that it may be an exploit and If you don't know how to investigate an exploited server then you really ought to hire someone who can.