Why malware persist to appear on Intune even device already did full scan and no threat found?

Senior Member

Dear all,

 On Intune we can go to Antivirus - active malware that we know which device have been detected malware and we will take action to full scan then remove malware. Here's question is we have some device already ran full scan and no threat found but there's always persist malware detected from devices. I ask MS support from Intune portal, they said I should ask for Windows client management support for help and remind me that I can post this issue on community to see if I can get reason.


1 Reply

Hello, @Sugus0769, my recommendation is to try to check different configuration settings in your Microsoft Defender Antivirus Policies.


Sometimes you have to adjust less strict rules or notification settings. More information is here. Another thing you can try is to use some third-party antivirus to clean/repair the machine if it is not too late.


One more suggestion from my side is to invest in Microsoft 365 backup solution before it's too late, to have the possibility to recover when you need it. Find more info here.