ThreatHunter vs Defender and cleanup

[dali@iae.nl]

Got a lot of fileservers. Scanning with Defender gives no results.
But scanning with ThreatHunter we find infections on mostly all .pst files.
What does ThreatHunter do more then Defender and how to go further to cleanup those infections,

[Mildur]

Hi Da Li,

Defender and Veeam ThreatHunter are two different malware scanners, so please don't expect them to have the same scanning options enabled.

Have you confirmed that Email Scanning is enabled for Microsoft Defender? According to Microsoft documentation, the default setting for Email Scanning in Microsoft Defender seems to be "Disabled", while for Veeam Thread Hunter its "Enabled".

I assume your PST files contain emails with attachments that may have malicious content. Please ensure that Defender has Email Scanning enabled, and then rescan your PST file.

and how to go further to cleanup those infections

If there is indeed an infected attachment in one of the emails, cleanup must be performed at the source. Make sure the infected items are removed from within the PST file. Let me check if our Veeam ThreatHunter provides a log file that lists the specific item.

Best,
Fabian