Google Play Services is not malware.. Just cuz applications are running in the background does not mean there's an infection, it's just how Android is.. It keeps certain apps/services running in the background, to aid other apps or speed up apps launching when called..

I'd advice leave as is and don't simply download or install apps from questionable sources.. Contrary to popular belief, getting an android device infected is quite difficult, provided proper care is taken to shield the device.. Aka common sense applied..