How to Remove Sendori Malware?

Sendori seems to comes in bundled with toolbars. I haven't been able to prove it for sure. I was able to find it in my program files but I had to search all files on my computer to find it. The uninstall worked for me. If you can find it in your Program File, look at the date modified and then check any other programs with that date and you might find out what it came in with. I am a certified computer Whacker (usually with my fist), so it takes me awhile to hunt these things down. Based on comments from Sendori Reps to other comments here maybe Sendori is not directly responsible for attaching the program into other bundles of programs but their name stands out when the ads and surveys popup on every website I go to. "Powered by Sendori". Sendori has become a four letter word for me! Good luck! I'm getting the Sendori out of here!

The advert underlines on my custom homepage was the give away and the cause for my immediate displeasure. That little ordeal took 2 days of part time research and registry removals (after doing the questionable "uninstall".  It's been quite a while buy there were only a very few Sebdori hits in the registry but hundreds(it seemed) hits on "programsendori" or maybe it was sendoriprogram I can't remember but I know the alias is mentioned in a previous post. You won't be out of the woods until you delete all of those too. Don't forget to check in appdata  in your profile also Good luck and have a great day.

Here is what I did.

I scanned for the files on my computer - using windows explorer and search for sendori. I did this so I can see where it was living so once I removed it I could go back and make sure everything was gone.

Then my Malwarebytes (pro version) picked up the sendori .dll when I tried to open Firefox. It actually runs in the background even if your browser isn't open. My Malwarebytes quarantined it. But then I couldn't get to any web pages with ANY browser.

So I went to the control panel and selected programs, found sendori, then removed it. BUT! Here is what I didn't like about the removal process; it makes you go to their website to take a survey for removal???? Wait WHAT? I said NO WAY!!! So I didn't do that, I just re-started. Now when you do that, you will have to force quit any programs. So make sure you don't have anything else open if you do it this way.

When the computer came back up, I opened Firefox, but no web pages were coming up..... So, I opened up CMD (command panel) in ADMINISTRATOR mode. [the way to do that is just go to C:Windows\system32\cmd.exe and right click on it. Just click on "run as administrator".] What you are going to do next is nuke the sendori's grasp on your network config. Here are the things that I ran:

• ipconfig /release
• ipconfig /flushdns   (this command flushout dns)
• netsh winsock flush (for reset winsock)

Keep in mind, the sendori engine is hijacking your network and sending you to their server so they can track and watch what you are searching for. They can then sell this information to companies that are trying to market to a specific demographic or user type.

Once you do the "flushing" you will have to restart again. I did and the browser works fine now.

This worked for me but please keep in mind that unless you are comfortable with line commands like I mentioned, I would find someone who does. 

I hope this helps someone. This is a horrible/unwanted piece of software that should not be allowed to propagate.

Read more: http://www.bloggerbonus.com/internet-connection-problems-reset-tcp-ip-and-dns-winsock/#ixzz3VEGqcvBH