Got this off my phone a couple days ago, I assume it got on to my phone through on of the PCs I had recently plugged it into. Installed Mc shield (which cleans it off the phone but it reappears), ran a couple scans already, ADWcleaner, FRST, ASWMBR, MS Security Essentials, MalwareBtyes, ComboFix etc among other things (reports are attached), but I have no idea if it’s fully gone or not. Formatting is obviously the last option I want to take, but I’m willing to do it.
more attachments
Bit of an overkill that as none of those can detect it
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
HKU\S-1-5-21-3572464334-3272878166-3701872473-1000\...\Run: [mseujivqyf] => wscript.exe //B "C:\Users\Nicholas\AppData\Roaming\mseujivqyf..vbs" <===== ATTENTION 2014-08-21 16:22 - 2014-08-02 10:33 - 00029702 _____ () C:\Users\Nicholas\AppData\Roaming\mseujivqyf..vbs EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Download Anti VBS/VBE to your desktop
[]download the appropriate version (32 bit or 64 bit) and double click the file to run it.
[]After a couple of seconds (might also take a whole minute if the machine is heavily infected and/or slow) a report will open in Notepad.
[*]Post that report
Be aware this is a very new programme and as such is not recognised by any Antivirus or Windows, it is safe so allow it to run
Thanks for the fast reply, here’s the fixlog, additionally I had no idea all those programs would be useless in this instance. I will be running the second scan now.
Here’s the other.
Could you now run a fresh FRST scan please so that I can confirm it has gone
Alrite, here they are.
OK that looks good, any further problems ?
Well, I have two externals HDDs as well as another internal one. I’m just wondering if all of this helped those as well.
Were they plugged in when you ran antivbs ? If not then plug them in an run it again
Yeah they were plugged in. Should I unplug-replug and run it again?
No need, if they were plugged in at the time
How is the computer
It’s fine, I mean it was running fine before but I knew the problem was still probably lingering somewhere. Virus was creating folders called “My” stuff.exe and things like that and I knew that my AV probably didn’t catch it fully. As long as there’s nothing remaining I should be fine. I’ve also been scanning my drives with MCshield and that is not detecting anything either, so I’m guessing I should be good. Only thing left is the phone, which I am going to fully format.
Subject to no further problems 
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean 
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Click Start then Run.
On Windows7 or Vista you may use Start Search field if Run is not available.
In the box copy/paste the following command:
ComboFix /Uninstall
Note that there is a space between " ComboFix " and " /Uninstall " .
Then click OK (or press Enter ).
Wait for the uninstall process to complete.
Download and run Delfix
https://dl.dropboxusercontent.com/u/73555776/delfix.JPG
: Keep Java Updated :
WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article
I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware
https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG
Update and run weekly to keep your system clean
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe 
Thank you very much for your fast and helpful replies. I am finally glad to have this off my mind as I tend to get overly aggressive in these situations. It was also very helpful in knowing that those AVs don’t help with this particular issue.
Unfortunately no AV is yet smart enough to read a VBS script
Oh! Last question, I have another computer networked to this one, currently it’s setup so I can’t change or add files to it. Should I be worried about that one as well?
If it is locked then no it should be OK
Hmm, I’m not 100% sure. Can I run FRST and upload to the file to this thread?
Sure, but I will be offline soon