How to Remove Sendori Malware?

Anonymous
2012-11-28T01:20:57+00:00

Hello,

Does anyone here know anything about Sendori?  According to some it is a tool used to correct spelling errors, according to others it is a form of anti-spyware, and according to others it is a homepage hijacker.  I believe what I have is the latter as it has changed my homepage and degraded my browser performance.  I have heard that it is undetectable by AVG and I just did a full scan using Windows Security essentials and didn't pick it up.  I tried uninstalling through Control Panels - -> Programs and Features but could not remove it.  I am hesitant to use more radical methods to remove it such as deleting executables and .dlls or doing a forced uninstall using Revo Uninstaller as I have heard sometimes if you ARE able to remove it it will change your DNS settings upon removal.  Does anyone have any ideas?

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2012-11-28T01:22:26+00:00

Try this:

http://support.sendori.com/entries/20037727-how-do-i-remove-turn-off-or-uninstall-sendori

**If that does not help,**start here - https://support.microsoftsecurityessentials.com/ and select the link that says - I think my computer is infected. Options will vary by region, but phone support leads you to Microsoft Answer Desk (http://www.answerdesk.com/) in the US at this time. After an initial free consultation, a fee will be charged for assistance, based on the details of the case.

You might also try this web site - http://www.bleepingcomputer.com - contains details for many of the common infections, often immediately after they began to appear in the wild, and instructions are provided for how to remove the infections using their malware removal guides. They also have forums where you can seek help from people who specialize in malware removal.

These are other free programs that may help:

Malwarebytes Free - http://www.malwarebytes.org/products/malwarebytes_free  Please note: The final install dialog at  provides a pre-checked option to install the Pro trial. To install the free version, you need to uncheck that option.

Superantispyware Free - http://www.superantispyware.com/downloadfile.html?productid=superantispywarefree

TDSSKiller (free) - http://support.kaspersky.com/faq/?qid=208283363

HitmanPro (free for 30 days) - http://www.surfright.nl/en/hitmanpro

Was this answer helpful?

0 comments

56 additional answers

Sort by: Newest
Most helpful Newest Oldest
  1. Anonymous
    2015-06-02T21:52:35+00:00

    See the "Answer" by Hetti Arachchige V Aravinda. That link works and is exactly what I would suggest if it had not already been.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2015-06-02T21:40:39+00:00

    None of the support links you provide exist any more and the application does not uninstall unless you change the permissions in the cmd. Or wipe the hard drive. You claim that "Sendori is only installed by the consent of the user..." Which is an incorrect statement as my desktop had not been used in 2 years and it is still afflicted by this virus.  This is against the CFAA section 1030 5(A).

    Was this answer helpful?

    0 comments
  3. Anonymous
    2015-03-23T17:12:21+00:00

    Here is what I did.

    I scanned for the files on my computer - using windows explorer and search for sendori. I did this so I can see where it was living so once I removed it I could go back and make sure everything was gone.

    Then my Malwarebytes (pro version) picked up the sendori .dll when I tried to open Firefox. It actually runs in the background even if your browser isn't open. My Malwarebytes quarantined it. But then I couldn't get to any web pages with ANY browser.

    So I went to the control panel and selected programs, found sendori, then removed it. BUT! Here is what I didn't like about the removal process; it makes you go to their website to take a survey for removal???? Wait WHAT? I said NO WAY!!! So I didn't do that, I just re-started. Now when you do that, you will have to force quit any programs. So make sure you don't have anything else open if you do it this way.

    When the computer came back up, I opened Firefox, but no web pages were coming up..... So, I opened up CMD (command panel) in ADMINISTRATOR mode. [the way to do that is just go to C:Windows\system32\cmd.exe and right click on it. Just click on "run as administrator".] What you are going to do next is nuke the sendori's grasp on your network config. Here are the things that I ran:

    • ipconfig /release
    • ipconfig /flushdns   (this command flushout dns)
    • netsh winsock flush (for reset winsock)

    Keep in mind, the sendori engine is hijacking your network and sending you to their server so they can track and watch what you are searching for. They can then sell this information to companies that are trying to market to a specific demographic or user type.

    Once you do the "flushing" you will have to restart again. I did and the browser works fine now.

    This worked for me but please keep in mind that unless you are comfortable with line commands like I mentioned, I would find someone who does. 

    I hope this helps someone. This is a horrible/unwanted piece of software that should not be allowed to propagate.

    Read more: http://www.bloggerbonus.com/internet-connection-problems-reset-tcp-ip-and-dns-winsock/#ixzz3VEGqcvBH

    Was this answer helpful?

    0 comments