This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos doesnt detect a virus that was previusly detected

Hello, my problem is with the Dexon virus. 6 months ago Sophos detected the Dexon in our servers. It could not be deleted by Sophos, so we have to delete some registries and some folders and it was solved. But now, we have noticed that others servers have the virus because the processes and files and folders that they have, but this time Sophos didn’t detect or report anything. Any clue about what could be wrong?

This thread was automatically locked due to age.

Parents

0 QC over 7 years ago

Hello Santiago Carvajal,

I can find only one reference to Dexon and it's in the Adware and PUAs category, not Viruses and Spyware. Was the previous detection, do you have any details? Please note that scanning for PUAs is an option and might not be enabled.

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 Santiago Carvajal over 7 years ago in reply to QC

Hi QC, thanks for your reply. You're right, it was detected as Adware and PUA category. The option is checked and currently is reporting others Adware and PUAs. I really do not know what additional information to give, we haven't changed anything that could be attributed. I share the task that we did to remove the dexon.

https://forums.spybot.info/showthread.php?68036-Manual-Removal-Guide-for-Dexon-Agent

https://forums.spybot.info/showthread.php?68491-Manual-Removal-Guide-for-Dexon-Agent
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 7 years ago in reply to Santiago Carvajal

Hello Santiago Carvajal,

if your settings are correct and something that should be detected isn't then please submit samples of whatever you can get that is or might be related (NB you can pack the files in a single archive). Also you should run SDU to collect system information, settings and logs. Keep the SDU archive in case they are needed for further analysis.

Christian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 QC over 7 years ago in reply to Santiago Carvajal

Hello Santiago Carvajal,

if your settings are correct and something that should be detected isn't then please submit samples of whatever you can get that is or might be related (NB you can pack the files in a single archive). Also you should run SDU to collect system information, settings and logs. Keep the SDU archive in case they are needed for further analysis.

Christian
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Santiago Carvajal over 7 years ago in reply to QC

Thank you very much, I have submited the sample. I will wait for the answer
Cancel
Vote Up 0 Vote Down

Cancel