Everytime I reboot I’ve been having Avast block Sendori.exe from updating and I can’t tell if this is a FP or not. There is a Sendori folder with an uninstaller but I’m not sure what it is or if I need it. Belows the Avast pop-up warning:
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here, post the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to Open the chest and right click on the file and select ‘Extract’ it to a temporary (not original) location first, see below.
Create a folder called Suspect in the [b]C:[/b] drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect*
That will stop the File System Shield scanning any file you put in that folder.
If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection so possibly an FP.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select ‘Submit to virus lab…’ complete the form and submit, the file will be uploaded during the next update. A link to this topic wouldn’t hurt.[
David this the results of scanning the URL https://www.virustotal.com/url/1dbff38df1e60b68571c73745b7c222facb65a2348fe5eb8c49c5c8a72676a16/analysis/1348880670/
Since Avast is only blocking going to Sendori web page so it can update there is nothing in my Virus Chest.
The website scanning on VT isn’t particularly good and it is blocking the SendoriLSP.exe according to the avast alert image you attached.
In the VT results page it looks like it hasn’t scanned anything:
The URL response content [b]could not be retrieved[/b] or it is some text format (HTML, XML, CSV, TXT, etc.), hence, it was not enqueued for antivirus scanning.
If you gave it the hXXp://sendori.com/Upgrade/…\SendoriLSP.exe path to scan then the /…\ in the link would stop the scan occurring as that element of the URL is incorrect/missing (my XX replacing tt to prevent active link).
Check the avast Web Shield, Shield log and see if you can get the full path.
http://techcrunch.com/2007/02/15/sendori-auction-redirects-from-your-domains/
http://download.cnet.com/Sendori/3000-18510_4-75446614.html
From other searches it appears to be a bundled/driveby programme and unless you know about it it needs removing
SendoriSetupx10102.exe
https://www.virustotal.com/file/a6f8748fd00a5cd375722ce2281eb3518a3b0270bb5b20b528526a4256715af0/analysis/1348924004/
http://virusscan.jotti.org/en/scanresult/1760ed4c830e3d041168d5977a39408a900d14f9
you can download it at cnet.com
My Web Shield log info below and if I put my cursor on it I get www.howardforums.com… which is a phone forum and coincidentally a few days ago I got an email from them saying their domain was stolen and everyone was being redirected to austdomains.com.au. They said they were working with GoDaddy to get it back.
After reading the posted links I’m still not sure if Sendori is good or bad but I do know I did not knowingly install it I just installed SkyDrive maybe it installed it. I also know the last couple of weeks I’ve been getting 10 times the spam I normally get I wonder if any of this is related.
Should I just try uninstalling it?
Should I just try uninstalling it?if you find it in ad/remove....why not...you can always install agin if you want it
I'm still not sure if Sendori is good or bad but I do know I did not knowingly install it I just installed SkyDrive maybe it installed it.when you install something....dont just click next .... next....next .....if so you will end up with lots of unwanted toolbars and that kind of crap there is usually some warning about what will be installed...if you dont unselect it during install
Ok I used Revo Uninstaller to uninstall Sendori but after rebooting Avast’s Web Shield has now been disabled and I can’t re-enable it. Avast shows a pop-up on reboot saying Web Shield has been disabled and to check my firewall but I can disable Comodo and it makes no difference.
I then ran a boot scan hoping to pick something up but no issues although it seems pretty clear now this all has to do with Sendori. How could Sendori disable my Web Shield after being uninstalled (also won’t let me update definitions won’t connect to internet)?
Would reinstalling Avast fix this or do you have other suggestions?
try this
control panel > ad/remove programs > avast > uninstall > on the pop-up box select repair option > wait a couple of minutes and reboot
did that fix it?
if not, delete all avast rules in comodo, reboot and create new rules
how did it go?
Pondus before I got your reply I did a System Restore which put Sendori temporally back on my computer to try to get a handle on what’s going on. After I uninstalled Sendori not only did it disable Web Shield but it wouldn’t let my laptop connect to the internet I was connected to my wireless network but not to the internet (all my other pc’s connect fine). Now that Sendori is re-installed my internet is back.
Would Avast being prevented from enabling it’s Web Shield have anything to do with me not being able to connect to the internet or is it Sendori doing something? By the way after doing the System Restore Avast is no longer blocking it’s web site.
From Sendori web site:
Welcome!
Sendori is like 411 for the internet. Sendori works in tandem with your web browser’s address bar to dramatically speed access to tens of thousands of the most popular websites. You no longer need to spend time searching on Google, Yahoo!, or Bing for the correct website address. Simply type a brand, keyword or partial URL directly in the address bar and Sendori delivers the correct website – every time. Sendori also makes your computer more secure because address typos, a major source of malicious websites, are eliminated.
On their site it says to use Add/Remove to uninstall it but it must be leaving traces behind that messes with Avast and being able to connect to the internet.
Anything I should do before I uninstall Sendori again or should I leave it since Avast is no longer objecting (at least for now)?
This is pop-up I was getting after uninstalling Sendori:
system restore often mess up avast install…when doing system restor you need to disable avast selfprotection first
the result is usually a reinstall of avast…first remove with avast removal tool reboot…and reinstall and reboot
as the instructions say run from safe mode http://www.avast.com/uninstall-utility
i know nada about the Sendori program…first seen it today
Thanks Pondus for the help finally got rid of it and didn’t have to do a thing with Avast it’s back to normal!
Apparently when Sendori installs on your computer and I still don’t know how that happened it changes your DNS address and when you uninstall it it’s supposed to change back your settings. The first time I uninstalled it it didn’t change them back but the second uninstall did the trick. Here’s a helpful link in case anyone else runs into this same issue http://ca.answers.yahoo.com/question/index?qid=20120208232538AAWTbrA
I would definitely recommend getting rid of this if it’s on your computer!