Hello, my problem is with the Dexon virus. 6 months ago Sophos detected the Dexon in our servers. It could not be deleted by Sophos, so we have to delete some registries and some folders and it was solved. But now, we have noticed that others servers have the virus because the processes and files and folders that they have, but this time Sophos didn’t detect or report anything. Any clue about what could be wrong?
Hello Santiago Carvajal,
I can find only one reference to Dexon and it's in the Adware and PUAs category, not Viruses and Spyware. Was the previous detection, do you have any details? Please note that scanning for PUAs is an option and might not be enabled.
Christian
Hi QC, thanks for your reply. You're right, it was detected as Adware and PUA category. The option is checked and currently is reporting others Adware and PUAs. I really do not know what additional information to give, we haven't changed anything that could be attributed. I share the task that we did to remove the dexon.
https://forums.spybot.info/showthread.php?68036-Manual-Removal-Guide-for-Dexon-Agent
https://forums.spybot.info/showthread.php?68491-Manual-Removal-Guide-for-Dexon-Agent
if your settings are correct and something that should be detected isn't then please submit samples of whatever you can get that is or might be related (NB you can pack the files in a single archive). Also you should run SDU to collect system information, settings and logs. Keep the SDU archive in case they are needed for further analysis.
Thank you very much, I have submited the sample. I will wait for the answer