"Potential malware activity detected" Can't find further information

[AndyNorden]

Hello,

after I upgraded to 12.1 and enabled the malware detection, we had no problems / warnings for some days. But after some days I've got the warning "" for one server.
Then I searched in the forum, but the only thing I've found is the log-directory "C:\ProgramData\Veeam\Backup\Malware_Detection_Logs" for further information. But this path doesn't exist on my server.
Then I wanted to scan the backup, but Veeam says "Unable to perform content scan for this backup due to the current limitations." to me.

Malware Detection
Immediate attention required Warning
Status Suspicious
Type Encrypted data
Details Potential malware activity detected

Does anyone has an idea, how I can get more information to this warning?

Thank you and best regards
Andreas

[MarkBoothmaa]

Are you running an enterprise or Std license? as that will explain why you can't do the content scan.

[AndyNorden]

We have the "Enterprise Plus"-Edition.

[MarkBoothmaa]

I'd say log a ticket with support, as its not overly obvious what the restrictions are and they should be able to provide more information from the logs too.

[xCiubx]

Hello,

is there any news on this? I have the same problem at our company?

[AVavav]

Same, here on latest and greatest Ent Plus but still getting no info which seems like Veeam is trolling me tbh.
Under 'Malware alerts' -> 'Malware Events' -> Onion link
Potential malware activity detected

In other words pretty useless to me and more of an annoyance as I need to guess if legit or not and risk suppressing valid threats.

[SFAllowed]

There is a way to scan the malware job and get some more details, or you can go to;

C:\ProgramData\Veeam\Backup\FLRSessions\Windows\servernamehere\Antivirus - and there will be defender logs etc.