Antimalware Service Executable High CPU usage is caused by Windows Defender
- Antimalware Service Executable High CPU usage is caused by Windows Defender
- 5 Fixes to Anti Malware Service Executable High CPU Usage
- Method 1. Reschedule the work of Windows Defender
- Method 2. Put Antimalware Service Executable into Windows Defender exclusion list
- Method 3. Shut down Windows Defender to kill Antimalware Service Executable in Windows 10
- Method 4. Check if MsMpEng.exe process is legit
- Method 6. Remove Corrupted Windows Defender Definitions
Antimalware Service Executable (MsMpEng.exe) is part of Windows Defender. It is also known as Windows Defender Service which is responsible for real-time system scanning. Such task causes high CPU usage, which results in computer slowdowns or lags. If you have discovered this process running in your Windows Task Manager and you would like to fix high CPU usage caused by it, continue reading below.
MsMpEng.Exe program silently works in the background, and the main reason it uses so many resources is that it continuously scans programs and files due to real-time protection feature in Windows Defender.
To put it simply, it works all the time to identify dangerous downloads and prevent them from infiltrating your computer, say, when you are browsing the Internet.
You might also notice that this Antimalware Service Executable High CPU, memory, RAM or even network usage slows down your computer during a full system scan. In such case, we suggest remaining patient until the scan finishes because then the CPU usage should drop back to normal.
Usually, it is an entirely safe process, however, in case it is consuming too much CPU power, you might want to check out these tips on how to disable antimalware service executable on Windows 10 caused by MsMpEng.Exe.
|Problem||Antimalware Service Executable High CPU Usage|
|Belongs to||Windows Defender|
|Problem causes||Real-time scanning feature, full-system scan or a malicious imposter of the process|
5 Fixes to Anti Malware Service Executable High CPU Usage
Method 1. Reschedule the work of Windows Defender
If the MsMpEng.exe process started using too much disk space at the moment you need to complete some important tasks, reschedule its work as described:
- First of all, you need to access the Windows Task Scheduler Library. The easiest way to access it is via Run window. Simply press down Windows key + R on your keyboard at the same time.
- Now, type in taskschd.msc and click OK.
- Now, look at the left panel in the window that opens and expand (by double-clicking them) the following sequence of folders: Task Scheduler Library > Microsoft > Windows.
- In the Windows folder, find one called Windows Defender.
- Now, look at the panel in the center and double-click Windows Defender Scheduled Scan.
- In General Tab, click to put a tick in a checkbox next to Run with highest privileges.
- Now, go to Conditions Tab and uncheck the boxes shown below.
- Finally, do the rescheduling part. Go to Triggers tab, and then click New... customize the scan schedule according to your preference. Click OK to finish. Before you do, make sure the Enabled box is checked!
Method 2. Put Antimalware Service Executable into Windows Defender exclusion list
Here is another tip to reduce high memory usage caused by antimalware service executable MsMpEng.exe.
- Press Windows key + I to open Windows Security Settings. Click on Update & Security (if you can’t see it, just scroll down with your mouse).
- Go to Windows Security > Virus & Threat Protection > Virus & Threat Protection Settings.
- Under Exclusions, click Add or Remove Exclusions.
- Choose to Add an Exclusion > Process.
- Type MsMpEng.exe and click Add.
As a result, the discussed process should be consuming a little less CPU power.
Method 3. Shut down Windows Defender to kill Antimalware Service Executable in Windows 10
Before you use this method to fix MsMpEng.exe high CPU Usage, please be aware of the fact that you will be disabling Windows’ inbuilt security system.
Please note that you should never leave your computer unsecured and if you decide to disable Windows Defender, consider installing a robust antivirus solution first.
However, keep in mind that most of the security software still slow down computers, so try to find a lightweight one. You can check software reviews on our site if you’d like to.
Please note that if you try to Antimalware Service Executable end task, most likely you’ll receive an error message saying: “The operation could not be completed” and the task won’t be stopping.
Therefore, you’ll need to use different methods to disable this task. Now, let’s get to the point and find out how to disable Windows Defender. There are several ways to do it.
Method 3.1. Disable WD via Registry
- To launch Windows Registry Editor, press down Windows key + R at the same time. This will open the Run window. Type in regedit and click Enter.
- Now, follow the given path (open folders in the left registry pane in the given order): HKEY_LOCAL_MACHINE > SOFTWARE > Policies > Microsoft > Windows Defender
- Here, try to find an entry called DisableAntiSpyware. If you cannot find it here, right-click on Windows Defender folder, select New > DWORD and then name it DisableAntispyware.
- Double click it and change the value from 0 to 1. Confirm by clicking OK.
- Check if Antimalware Service Executable high disk usage Win 10 is now fixed.
Method 3.2. Disable WD via Local Group Policy Editor.
- Again, launch the Run window by pressing down Windows Key + R at the same moment. Type in: gpedit.msc and then hit Enter.
- Now, look at the left panel of the editor and expand the following folders in given order: Computer Configuration, then Administrative Templates, then Windows Components, and finally Windows Defender Antivirus.
- Here, find an option called Turn off Windows Defender. Double click it, then select Enable option(NOT disabled!), then hit Apply and OK.
- Restart your computer.
Method 4. Check if MsMpEng.exe process is legit
There is a slight possibility that your computer has been infected with malware that imposes the real Antimalware Service Executable. In that case, you should download an antivirus software and run a system scan with it. You might want to do it in Safe Mode with Networking.
In case an antivirus identifies some suspicious software, you will remove antimalware service executable virus shortly.
However, there is no need to remove the real MsMpEng.exe. It is a legitimate file, and it is entirely safe.
Method 6. Remove Corrupted Windows Defender Definitions
Windows Defender isn’t perfect. Its virus definition library can get slightly corrupted and as a consequence, it can start identifying secure files as dangerous. To remove wrong WD malware definition updates, complete these steps.
- Open Command Prompt with elevated privileges: open Windows search, type cmd, then right-click Command Prompt and select Run as Administrator. In UAC prompt, press Yes.
- In Command Prompt (Administrator) copy and paste the given command, then press Enter.
“%PROGRAMFILES%\Windows Defender\MPCMDRUN.exe” -RemoveDefinitions -All
- Now, Enter this command:
“%PROGRAMFILES%\Windows Defender\MPCMDRUN.exe” -SignatureUpdate
- Check if Antimalware Service Executable still has high CPU usage.
In case you have found another solution on how to fix high CPU usage caused by Antimalware Service Executable, please share it with us in the comment section below. In addition, if after fixing MsMpEng.exe issue you still experience system slowdowns, we strongly recommend reading these tips on speeding up Windows.
This article was originally published on September 10, 2018, and updated on September 24, 2019.
Norbert Webb is the head of Geek’s Advice team. He is the chief editor of the website who controls the quality of content published. The man also loves reading cybersecurity news, testing new software and sharing his insights on them. Norbert says that following his passion for information technology was one of the best decisions he has ever made. “I don’t feel like working while I’m doing something I love.” However, the geek has other interests, such as snowboarding and traveling.