Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

2.2.1.5 5.56%
2.2.1.3 50.00%
2.2.1.3 5.56%
2.2.1.3 38.89%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
OpenSCManagerA, GetSecurityDescriptorSacl, ConvertStringSecurityDescriptorToSecurityDescriptorA, FreeSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclA, AllocateAndInitializeSid, RegSetValueExA, RegCloseKey, RegCreateKeyA, StartServiceA, LookupPrivilegeValueA, RegisterEventSourceA, GetNamedSecurityInfoA, LookupAccountSidA, LookupAccountNameA, RegOpenKeyA, RegQueryInfoKeyA, RegEnumKeyExA, RegSetValueA, CreateServiceA, QueryServiceStatus, AdjustTokenPrivileges, OpenThreadToken, StartServiceCtrlDispatcherA, RegDeleteKeyA, QueryServiceStatusEx, ChangeServiceConfigW, DeleteService, CreateServiceW, ChangeServiceConfig2A, RegCreateKeyExA, RegDeleteValueA, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, GetLengthSid, CopySid, SetServiceStatus, RegisterServiceCtrlHandlerW, RegisterEventSourceW, ReportEventA, DeregisterEventSource, OpenServiceW, GetSecurityDescriptorLength, ConvertStringSecurityDescriptorToSecurityDescriptorW, ControlService, ChangeServiceConfigA, OpenServiceA, CloseServiceHandle, QueryServiceConfigW, OpenProcessToken, GetTokenInformation, RegEnumKeyA, ConvertStringSidToSidA, LookupAccountSidW, CryptAcquireContextA, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptDestroyHash, CryptReleaseContext, RegQueryValueExA, RegOpenKeyExA, SetNamedSecurityInfoA
crypt32.dll
CertFreeCertificateChain, CertGetCertificateChain, CertCreateCertificateContext, CertNameToStrA, CertEnumCRLsInStore, CertEnumCertificatesInStore, CertOpenStore, CertCloseStore, CertOpenSystemStoreA, CertFreeCertificateContext
gdi32.dll
CreateCompatibleDC, GetDeviceCaps, CreateCompatibleBitmap, SelectObject, GetObjectA, BitBlt, GetBitmapBits, DeleteObject, DeleteDC, CreateDCA
kernel32.dll
DllMain
ole32.dll
CoInitializeSecurity, CoUninitialize, CoCreateGuid, StringFromGUID2, CoCreateInstance, ProgIDFromCLSID, CoTaskMemFree, CoRegisterClassObject, CoRevokeClassObject, CoInitialize, CoCreateFreeThreadedMarshaler, CoInitializeEx
psapi.dll
GetModuleFileNameExW, GetProcessImageFileNameW
secur32.dll
GetUserNameExW, GetUserNameExA
user32.dll
CharNextA, PostThreadMessageA, MessageBoxA, GetDesktopWindow, GetUserObjectInformationW, MsgWaitForMultipleObjectsEx, DefWindowProcA, RegisterClassA, UnregisterClassA, DestroyWindow, CreateWindowExA, PostMessageA, GetMessageA, TranslateMessage, KillTimer, SetTimer, SetThreadDesktop, GetProcessWindowStation, SetProcessWindowStation, CreateDesktopA, PeekMessageA, DispatchMessageA, LoadStringA
version.dll
GetFileVersionInfoSizeW, GetFileVersionInfoW
ws2_32.dll
WSASocketA, WSAIoctl, WSAEventSelect, WSCGetProviderPath, WSCEnumProtocols

sndappv2.exe

sndappv2.exe by Sendori (Signed)

Remove sndappv2.exe
Version:   2.2.1.3
MD5:   4e9e7c7d857ea1c83be6160dae25b4da
SHA1:   d6dd6472d4ca15d5bd2d5e1f1fd511a0ea934c53
SHA256:   d832d2dc83f19219be748508861f61a66cc768f926dc71b678e6809ded589c90

What is sndappv2.exe?

sndappv2.exe is the Windows service (named sndappv2) part of Sendori that runs when Windows starts regardless if Senori is active. Sendori.com provides a in the domain space. Rather than parking domain names on a page with search listings the company’s service partners domains with advertisers in specific sectors. Sendori apparently has applied to patent their technology. Advertisers looking for traffic on a given topic can buy direct navigation traffic from Sendori’s domain name clients.

About sndappv2.exe (from Sendori)

“Sendori is a cloud-based web service that helps users navigate faster to their favorite websites. It is also a web filtering service that protects users from accessing malicious and phishing sites as ”

DetailsDetails

File name:sndappv2.exe
Publisher:Sendori
Product name:sndappv2.exe
Typical file path:C:\Program Files\sendori\sndappv2.exe
File version:2.2.1.3
Size:3.4 MB (3,569,512 bytes)
Certificate
Issued to:Sendori
Authority (CA):VeriSign
Effective date:Sunday, March 11, 2012
Expiration date:Thursday, April 4, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Sendori
 Sendori, Inc.
  79% remove
Sendori is a web browser plugin and layered service provider filter that is typically installed through a bundled installation. The plugin is designed to intercept Internet web traffic and provided modified results to various requests. Such results include DNS error redirection to sponsored affiliate advertisers. Sendori provides DNS redirection where advertisers can purchase navigation traffic from Sendori's domain name clients. When a...

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'sndappv2'
Network connections
  • [TCP] 2d.fc.78ae.static.theplanet.com (174.120.252.45:80)

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.06972634%
    0.028634%
    Kernel CPU:0.03530299%
    0.013761%
    User CPU:0.03442335%
    0.014873%
    Kernel CPU time:1,083,789 ms/min
    100,923,805ms/min
    CPU cycles:9,900,144/sec
    17,470,203/sec
    Context switches:10,603/sec
    284/sec
    Memory
    Private memory:18.01 MB
    21.59 MB
    Private (maximum):17.89 MB
    Private (minimum):12.13 MB
    Non-paged memory:18.01 MB
    21.59 MB
    Virtual memory:144.66 MB
    140.96 MB
    Virtual memory (peak):227.68 MB
    169.69 MB
    Working set:12.8 MB
    18.61 MB
    Working set (peak):27.78 MB
    37.95 MB
    Page faults:147,450,588/min
    2,039/min
    I/O
    I/O read transfer:14.18 KB/sec
    1.02 MB/min
    I/O read operations:681/sec
    343/min
    I/O write transfer:12 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:15.64 KB/sec
    448.09 KB/min
    I/O other operations:576/sec
    1,671/min
    Resource allocations
    Threads:192
    12
    Handles:1403
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:32-bit
    Command line:"C:\Program Files\sendori\sndappv2.exe"
    Owner:SYSTEM
    Windows Service
    Service name:sndappv2
    Description:“Sets and maintains sndappv2 LSP protection on this computer.”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    ntdll.dll
    Total CPU:0.04653160%
    0.272967%
    Kernel CPU:0.02917411%
    0.107585%
    User CPU:0.01735749%
    0.165382%
    CPU cycles:1,285,285/sec
    5,741,424/sec
    Context switches:9/sec
    79/sec
    Memory:1.23 MB
    1.16 MB
    sechost.dll
    Total CPU:0.02048471%
    Kernel CPU:0.01095985%
    User CPU:0.00952486%
    CPU cycles:1,879,676/sec
    Context switches:130/sec
    Memory:100 KB
    sndappv2.exe (main module)
    Total CPU:0.01733397%
    Kernel CPU:0.01533920%
    User CPU:0.00199477%
    CPU cycles:1,359,602/sec
    Context switches:298/sec
    Memory:3.42 MB
    MSWSOCK.dll
    Total CPU:0.00655060%
    Kernel CPU:0.00478345%
    User CPU:0.00176715%
    CPU cycles:532,150/sec
    Context switches:20/sec
    Memory:240 KB
    wow64.dll
    Total CPU:0.00015037%
    Kernel CPU:0.00006602%
    User CPU:0.00008435%
    CPU cycles:8,370,248/sec
    Context switches:1,014/sec
    Memory:252 KB

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Ultimate N 50.00%
    Windows 7 Home Premium 31.25%
    Windows 8 Pro 12.50%
    Windows 7 Professional 6.25%

    Distribution by countryDistribution by country

    United States installs about 100.00% of sndappv2.exe.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Hewlett-Packard 100.00%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE