Its kinda dead now, after that I did not connected it to network for 2 days, deleted the mail app that i used to open that e mail guess that code was lurking in that email app?
Scans turned negative, tried with Trustgo and built in v3 mobile 2 standard.
The processes which had multiple instances...