VIrus?

AllOnTheBus said:

I haven't provided any links in my post so I'm unsure of what you mean there.

I followed your link to the Cnet review page and I see what you mean - a direct mention
of how it can automatically change your DNS settings and that can't be good that's for sure. I seriously don't know how Cnet and Brothersoft can give this a 3 and 4 star rating (or thereabouts from memory) respectively- ridiculous!

As for the installation of the "malware" if in fact that's what it is or will be labelled as, it can not have
installed by itself. By this I mean that the only way that software is going to end up on a machine
is a) If someone places it there (ie: attack either remotely or from a user with access) or b) If it has been inadvertently installed along with another piece of software (ie: I always use Ask Toolbar as an example of pesky software which unless unchecked installs with various other softwares).

I'm glad to see you have solved the problem in regards to your brothers laptop and it looks
like this thread may be useful for anyone who has also run into that piece of malware (yes - let's call it that now then and again that's only what yourself and I believe).

I did come across some other people having the same problem after having a bit more of a look around but it seemed that they were having trouble uninstalling it as they couldn't see it in programs and features. If you found it to be a little bit of a complicated process to get rid of, I'm sure that others would be quite pleased if you could explain the procedure you used to delete it.

Thanks in advance.

Well I was able to uninstall it from CCleaner. It was listed among the programs. I also noticed in the Norton firewall many instances of Sendori being allowed which I promptly removed. My brother didn't install it as he thought I installed when I was fixing his computer prior to this issue. I'm guessing some drive by install from a website. Yeah, I hope more people become aware if this program. Seems more harmful than good.

Funny you mention ask toolbar as that was one of the businesses mentioned in an article as having purchased sendori. So it's possible it installed with the ask toolbar, but I didn't see that tool bar on the laptop.

I realize this is an older post but I had to chime in as it did in fact help solve an issue that started yesterday after a dumb mouse click.

Using raidcall yesterday I wanted to share a music clip to a few buddies of mine. I went to get a plug in to enable the audio sharing and stupidly clicked an add banner. Anyway, I thought I had got what I was looking for and seconds later chrome, firefox, and the VOIP program raidcall, stopped functioning.

I ran through Malwarebytes, and it pushed out a rootkit in 4 different locations. I disabled system restore, just in case it might try to hide there on reboot, and then restarted.

Still chrome, firefox and raidcall would not function.

I came across this post today that mentioned the Sendori. Then I took a look at when it was installed. Yesterday. I have since uninstalled Sendori and ran a few more scans. They come up clean and chrome, firefox and raidcall are now functioning.

Sendori is a program which overwrites your DNS address so you need to reconfigure the DNS address or set it to find the dns.If you are using avast antivirus then you would have got the following message saying says "MALWARE BLOCKED" Object: EXE http//sendori.com/upgrade/sendori setup-2.0.4.exe/>SINSTDIR SP.exeSeverity: high
Threat: Win32:Malware-gen.

Following steps should help removing this malware .
First go to add remove programs and uninstall. If that doesn't work use your windows explorer and find the folder for Sendori then remove it from there, next click on start and in the type box or run if your regedit then hit F3 it will bring up a search for your registry and type sendori and hit enter if it finds any registry lines for Sendori then delete it and hit F3 to search again. Continue until all lines relating to Sendori have been removed. Searching your registry will insure you remove any trace of Sendori.

This Sendori virus was intalled on my window 7 computer when I installed DAEMON Tools Lite.

I also just installed DAEMON Tools Lite onto my computer, and minutes later had this same issue. The DNS settings were constantly reset to the ip address listed in the original post. Googling the issue brought me here. I then used my start-bar search function to find Sendori, but I did not. Before considering making record of its name, I went into the task manager and manually shut down the executable which was labeled 'Sendori'. The issue has now disappeared. I am currently uninstalling it with CCleaner, and if the issue reappears, I will edit my post/reply again to let you all know.

Express Install Recommended. :)