Veeam Backup & Replication • Re: ThreatHunter vs Defender and cleanup

Hi Da Li,

Defender and Veeam ThreatHunter are two different malware scanners, so please don't expect them to have the same scanning options enabled.

Have you confirmed that Email Scanning is enabled for Microsoft Defender? According to Microsoft documentation, the default setting for Email Scanning in Microsoft Defender seems to be "Disabled", while for Veeam Thread Hunter its "Enabled".

I assume your PST files contain emails with attachments that may have malicious content. Please ensure that Defender has Email Scanning enabled, and then rescan your PST file.

and how to go further to cleanup those infections

If there is indeed an infected attachment in one of the emails, cleanup must be performed at the source. Make sure the infected items are removed from within the PST file. Let me check if our Veeam ThreatHunter provides a log file that lists the specific item.

Best,
Fabian

Statistics: Posted by Mildur — Jul 07, 2025 9:14 am

---