How to Remove Sendori Malware?

Anonymous
2012-11-28T01:20:57+00:00

Hello,

Does anyone here know anything about Sendori?  According to some it is a tool used to correct spelling errors, according to others it is a form of anti-spyware, and according to others it is a homepage hijacker.  I believe what I have is the latter as it has changed my homepage and degraded my browser performance.  I have heard that it is undetectable by AVG and I just did a full scan using Windows Security essentials and didn't pick it up.  I tried uninstalling through Control Panels - -> Programs and Features but could not remove it.  I am hesitant to use more radical methods to remove it such as deleting executables and .dlls or doing a forced uninstall using Revo Uninstaller as I have heard sometimes if you ARE able to remove it it will change your DNS settings upon removal.  Does anyone have any ideas?

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
Anonymous
2012-11-28T01:22:26+00:00

Try this:

http://support.sendori.com/entries/20037727-how-do-i-remove-turn-off-or-uninstall-sendori

**If that does not help,**start here - https://support.microsoftsecurityessentials.com/ and select the link that says - I think my computer is infected. Options will vary by region, but phone support leads you to Microsoft Answer Desk (http://www.answerdesk.com/) in the US at this time. After an initial free consultation, a fee will be charged for assistance, based on the details of the case.

You might also try this web site - http://www.bleepingcomputer.com - contains details for many of the common infections, often immediately after they began to appear in the wild, and instructions are provided for how to remove the infections using their malware removal guides. They also have forums where you can seek help from people who specialize in malware removal.

These are other free programs that may help:

Malwarebytes Free - http://www.malwarebytes.org/products/malwarebytes_free  Please note: The final install dialog at  provides a pre-checked option to install the Pro trial. To install the free version, you need to uncheck that option.

Superantispyware Free - http://www.superantispyware.com/downloadfile.html?productid=superantispywarefree

TDSSKiller (free) - http://support.kaspersky.com/faq/?qid=208283363

HitmanPro (free for 30 days) - http://www.surfright.nl/en/hitmanpro

Was this answer helpful?

0 comments No comments

56 additional answers

Sort by: Most helpful
  1. Anonymous
    2013-08-29T22:06:30+00:00

    I was able to stop the Sendori service from running automatically under 'Service Sendori' and will try to uninstall it from this point.

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2013-06-04T04:15:32+00:00

    Thank you so much ...finally got rid of that stupid sendori virus with revouninstaller ...thank you a ton

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2013-05-02T16:01:40+00:00

    I have recently encountered a couple of scenarios where Sendori, or an application masquerading as "Sendori", has exhibited what I characterize as ill-behavior, at best.  I have no direct evidence linking "Sendori" to these conditions.  However, removing the software identifying itself as "Sendori" resolved both.

    • Cookies not being deleted when requested by the user.  This was observed in both IE & Chrome.
    • Web site certificates being mutated so as to allow man-in-the-middle observations of what the user expects to be secure, encrypted HTTP/S communication.

    The latter scenario being far more intrusive and potentially damaging.  This would theoretically allow the software to intercept, store, & transmit confidential user credentials/information.

    Whether or not these experiences have truly been Sendori, this software is now permanently on my malware list and, in my opinion, should be removed.

    Was this answer helpful?

    0 comments No comments