3 PCs So far, No Internet, Can't use CMD as Administrator, Same as Powershell

Hello All,

3 PCs infected in two days, Internet browsing does not work.  I Ran RKILL, JRT, then ADWcleaner and they each find a couple things but ADW locks up and cannot remove the infections.

I cannot use CMD.exe as Administrator,  Neither can I run Powershell.exe as Administrator

On one of the PCs I uninstalled Chrome, tried CobmoFix and then rebooted and installed Chrome again and that worked but then after the next reboot Chrome stopped working again.

Anybody have any suggestions?

Thanks,

Sal Cameli

ESET finds nothing,  Malwarebytes as well,  finds nothing.  I checked the Hosts and LMhosts files.   all look fine.

CMD.exe does not work at all,  standard user or administrator.

New Profile does not fix this issue.

There is a new user named "TrustedInstaller" and he has Full admin rights,  Administrator does any longer

I searched the PC for CMD.exe and I found 4 of them,  two of them I can run as administrator..

I tried flush dns and regster dns but after reboot did nothing,

I reformatted those 3 PCs but now I have another one with the Same issue.

CMD.exe gets replaced by a version that does not bring up the C:\ prompt. it just hangs with a black screen,  you have to crash it.

All browsers do not open at all.

I run RKILL,  JRT, ADW & ComboFix and then reboot and CMD.exe works again and browsers work.   

BUT after another reboot same issue happens,   

To fix again I need to run the 4 programs above again.  

I'm going to attempt to remove all versions of CMD.exe, maybe that'll help?

 

Restarted last night and same thing, on boot-up CMD.exe does not work and Browsers don't work.  Ran ComboFix and didn't even reboot and it fixed the PC,  as soon as ComboFix was done iTunes popped up to install a new version.

And I can come here.

Anybody want the logs?,   I'm going to re-clone this PC today.  Clients needs it working 100% 9AM tomorrow.  

18 Days later?,    All 4 PCs have been reformatted 14 days ago.   I just unsubscribed from this board because it's worthless.