Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: VIrus?

26 Dec 2011   #11

Windows 7 Home Premium 64 Bit OS
 
 

I haven't provided any links in my post so I'm unsure of what you mean there.

I followed your link to the Cnet review page and I see what you mean - a direct mention
of how it can automatically change your DNS settings and that can't be good that's for sure. I seriously don't know how Cnet and Brothersoft can give this a 3 and 4 star rating (or thereabouts from memory) respectively- ridiculous!

As for the installation of the "malware" if in fact that's what it is or will be labelled as, it can not have
installed by itself. By this I mean that the only way that software is going to end up on a machine
is a) If someone places it there (ie: attack either remotely or from a user with access) or b) If it has been inadvertently installed along with another piece of software (ie: I always use Ask Toolbar as an example of pesky software which unless unchecked installs with various other softwares).

I'm glad to see you have solved the problem in regards to your brothers laptop and it looks
like this thread may be useful for anyone who has also run into that piece of malware (yes - let's call it that now then and again that's only what yourself and I believe).

I did come across some other people having the same problem after having a bit more of a look around but it seemed that they were having trouble uninstalling it as they couldn't see it in programs and features. If you found it to be a little bit of a complicated process to get rid of, I'm sure that others would be quite pleased if you could explain the procedure you used to delete it.

Thanks in advance.

My System SpecsSystem Spec
.

26 Dec 2011   #12

Windows 7 Pro 64bit build 7601 SP1
 
 

Quote   Quote: Originally Posted by AllOnTheBus View Post
I haven't provided any links in my post so I'm unsure of what you mean there.

I followed your link to the Cnet review page and I see what you mean - a direct mention
of how it can automatically change your DNS settings and that can't be good that's for sure. I seriously don't know how Cnet and Brothersoft can give this a 3 and 4 star rating (or thereabouts from memory) respectively- ridiculous!

As for the installation of the "malware" if in fact that's what it is or will be labelled as, it can not have
installed by itself. By this I mean that the only way that software is going to end up on a machine
is a) If someone places it there (ie: attack either remotely or from a user with access) or b) If it has been inadvertently installed along with another piece of software (ie: I always use Ask Toolbar as an example of pesky software which unless unchecked installs with various other softwares).

I'm glad to see you have solved the problem in regards to your brothers laptop and it looks
like this thread may be useful for anyone who has also run into that piece of malware (yes - let's call it that now then and again that's only what yourself and I believe).

I did come across some other people having the same problem after having a bit more of a look around but it seemed that they were having trouble uninstalling it as they couldn't see it in programs and features. If you found it to be a little bit of a complicated process to get rid of, I'm sure that others would be quite pleased if you could explain the procedure you used to delete it.

Thanks in advance.
Well I was able to uninstall it from CCleaner. It was listed among the programs. I also noticed in the Norton firewall many instances of Sendori being allowed which I promptly removed. My brother didn't install it as he thought I installed when I was fixing his computer prior to this issue. I'm guessing some drive by install from a website. Yeah, I hope more people become aware if this program. Seems more harmful than good.

Funny you mention ask toolbar as that was one of the businesses mentioned in an article as having purchased sendori. So it's possible it installed with the ask toolbar, but I didn't see that tool bar on the laptop.
My System SpecsSystem Spec
26 Dec 2011   #13

Windows 7 Home Premium 64 Bit OS
 
 

Yep - gotta beware of the crapware you may be installing with any software.
It's very easy to become complacent and click next, next, next as quick as we can,
but I tend to try to take at least a few seconds to look at what I'm clicking next to as
sometimes the "extras" are quite the nuisance to get rid of.

Thanks for posting your method back, I'm sure that will assist someone in future as
a lot of people are accustomed to CCleaner and I'm sure most semi literate computer users know how to block a program through the use of their antivirus and/or the firewall they are using (one would like to think anyway!). I only hope that by deleting the software through CCleaner (does it appear as a program or a registry entry??) doesn't affect any other processes or services which it may attach itself to. So far so good for you though so that's good to hear.
My System SpecsSystem Spec
.


26 Dec 2011   #14

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Unfortunately, the problem of software makers inserting those little hidden presents is going to get worse. The makers of the software get money from the makers of other software by inserting/including it in the main program. They have to mnake a profit somehow....

Most legit companies will tell you right up front that extra software is included and give you the option to opt out. Unfortunately, as with a recent case, a maker included the software in the package without the option to opt out. When confronted, it turned out that the mention of including said extra program was clearly mentioned in the EULA. Towards the bottom of the agreement. Still legit, but somewhat underhanded.

I've found that MSE will sometimes detect these included item, but lists them as "Potentially Unwanted Programs/Software."
My System SpecsSystem Spec
26 Dec 2011   #15

Windows 7 Home Premium 64 Bit OS
 
 

Sounds about right Borg

If no-one wants to install the "crapware" then they find a way
of hiding it such as in the EULA as you mentioned.
Great!! Now I,m gonna have to read every EULA from start
to finish as well to make sure I don't get garbage I don't want.

Ahh well- as Ned Kelly said just before they hung him - "Such is life"
Might go add that to quote of the day
My System SpecsSystem Spec
04 Oct 2012   #16

win 7 64bit
 
 
my own battle with Sendori

I realize this is an older post but I had to chime in as it did in fact help solve an issue that started yesterday after a dumb mouse click.

Using raidcall yesterday I wanted to share a music clip to a few buddies of mine. I went to get a plug in to enable the audio sharing and stupidly clicked an add banner. Anyway, I thought I had got what I was looking for and seconds later chrome, firefox, and the VOIP program raidcall, stopped functioning.

I ran through Malwarebytes, and it pushed out a rootkit in 4 different locations. I disabled system restore, just in case it might try to hide there on reboot, and then restarted.

Still chrome, firefox and raidcall would not function.

I came across this post today that mentioned the Sendori. Then I took a look at when it was installed. Yesterday. I have since uninstalled Sendori and ran a few more scans. They come up clean and chrome, firefox and raidcall are now functioning.
My System SpecsSystem Spec
04 Oct 2012   #17

Windows 7 Ultimate x64
 
 

Sendori is a program which overwrites your DNS address so you need to reconfigure the DNS address or set it to find the dns.If you are using avast antivirus then you would have got the following message saying says "MALWARE BLOCKED" Object: EXE http//sendori.com/upgrade/sendori setup-2.0.4.exe/>SINSTDIR SP.exeSeverity: high
Threat: Win32:Malware-gen.

Following steps should help removing this malware .
First go to add remove programs and uninstall. If that doesn't work use your windows explorer and find the folder for Sendori then remove it from there, next click on start and in the type box or run if your regedit then hit F3 it will bring up a search for your registry and type sendori and hit enter if it finds any registry lines for Sendori then delete it and hit F3 to search again. Continue until all lines relating to Sendori have been removed. Searching your registry will insure you remove any trace of Sendori.
My System SpecsSystem Spec
29 Oct 2012   #18

Windows 7
 
 

This Sendori virus was intalled on my window 7 computer when I installed DAEMON Tools Lite.
My System SpecsSystem Spec
04 Dec 2012   #19

Windows 7 ultimate
 
 

I also just installed DAEMON Tools Lite onto my computer, and minutes later had this same issue. The DNS settings were constantly reset to the ip address listed in the original post. Googling the issue brought me here. I then used my start-bar search function to find Sendori, but I did not. Before considering making record of its name, I went into the task manager and manually shut down the executable which was labeled 'Sendori'. The issue has now disappeared. I am currently uninstalling it with CCleaner, and if the issue reappears, I will edit my post/reply again to let you all know.
My System SpecsSystem Spec
05 Dec 2012   #20

Windows Seven, Ubuntu
 
 

Express Install Recommended.
My System SpecsSystem Spec
Reply

 VIrus?




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:55 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33