I did this and it STILL is hogging my computer! Grr!
Can one prevent Antimalware Executable to start hogging CPU for extended periods each time some network adapter gets active?
One of the most annoying habits in Windows 8 is, that the built-in "Antimalware Service Executable" (part of "Windows Defender") starts hogging my device's CPU with 60-70% (and 100% disk) for extended periods EACH AND EVERY time after I wake it up.
I wouldn't mind if it starts doing its business IN THE BACKGROUND but when I wake my device up from standby it's usually to get something done NOW and thus I find it increasingly unacceptable, that the system is always taken over by Window's defender exactly then and for up to several minutes! If I don't find a solution soon to throttle this beast, then I will disable Defender altogether!
What I noticed is, that this process seems to be actually triggered not by the system waking up, but by the network adapter becoming active. And actually, this happens each and every time ANY network adapter gets active! E.g. if my system has NO network connection at all and I plugin the network cable the Antimalware Service Executable starts. When - after it has settled again - I additionally enable Bluetooth then the Antimalware Service Executable starts its hogging business again. And if I then additionally enable the WLAN a few minutes later, it will AGAIN start to consume CPU!
So: can one decouple this? Running a scan ONCE after (re-)starting it is definitely enough, especially if Defender hasn't downloaded any new signatures since the last run! And, second, can one make Defender convince to strictly run in the background ONLY?
Michael
[Moved from Windows]
Windows for home | Previous Windows versions | Security and privacy
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
146 answers
Sort by: Most helpful
-
Anonymous
2015-02-25T19:32:45+00:00 -
Anonymous
2015-01-09T15:02:07+00:00 And so.....do u have any help on this issue?. So ur point is leave box checked to only run when on ac power. So that won't stop scanner from running, but what will. Should install third party AV?. Would that disable Microsoft one, or is their a box, or setting to stop scheduled scans?. Maybe its the scanning of incoming internet traffic which is causing it to bog down computer?. Is defender program just not any good?. Does someone have any actual answers to this problem as ut is very annoying.
There isn’t any one-size-fits-all solution for this issue, because there are lots of different things that can put the Microsoft antimalware engine into a frenzy. There’s a long history of CPU utilization problems with the Microsoft Antimalware Service Executable (MsMpEng.exe) going back to the days of OneCare. The magnitude of the problem seems to have largely abated with MSE, but that’s at least partly due to the fact that MSE has a CPU throttle for its scheduled scan. So it’s very possible that the Microsoft antimalware engine is still a little more sensitive to underlying issues than the engines of other AV products.
My approach has always been to first make an honest effort to fix the problem before moving on to another AV solution, and that’s the approach that I’ve taken in my previous posts in this thread (see those posts for the answers to some of your questions). But looking at the “falling-baseline” test scores for Microsoft AV products, I’m inclined to believe that people shouldn’t waste a whole lot of time trying to make Windows Defender behave before they move on to a better-rated alternative like Bitdefender Free or Panda Free. On the other hand, it’s always wise to make sure that every last trace of any previously installed third-party AV product is removed before installing another third-party AV product – so if you do that while Windows Defender is still enabled, you’ll at least be able to see whether or not that might be the underlying issue.
GreginMich
-
Anonymous
2015-01-09T13:19:56+00:00 And so.....do u have any help on this issue?. So ur point is leave box checked to only run when on ac power. So that won't stop scanner from running, but what will. Should install third party AV?. Would that disable Microsoft one, or is their a box, or setting to stop scheduled scans?. Maybe its the scanning of incoming internet traffic which is causing it to bog down computer?. Is defender program just not any good?. Does someone have any actual answers to this problem as ut is very annoying.
-
Anonymous
2015-01-08T23:48:15+00:00 Unfortunately, unchecking the “Start the task only if the computer is on AC power” option won’t actually prevent the Windows Defender Scheduled Scan task from running, so it won’t really help at all. To confirm this, all you need to do is just uncheck the option, and then do a daily check of either the “Last scan” data in the Windows Defender interface – or the Task Scheduler “Last Run Result” for the scheduled scan – or this Event Viewer log (looking for the 1000 (scan started) and 1001 (scan finished) Windows Defender event IDs):
Applications and Services Logs/Microsoft/Windows/Windows Defender/Operational
So it’s very easy to prove to yourself that the scheduled scan will actually continue to run after you uncheck this option, and that the “answer” in this thread doesn’t conform to any kind of real experience with Task Scheduler. If we then grant that the answer here isn’t just a pure fabrication, we’re left with the notion that it must be based on some kind of serious misinterpretation of the Task Scheduler user interface. So let’s take a closer look at the Task Scheduler Conditions tab and see if we can’t figure out how someone might come up with the idea that unchecking the “Start the task only if the computer is on AC power” option would prevent the scheduled scan from running. If we first look at the implication of unchecking a simple instruction option, like the “Wake the computer to run this task” option, we can see that the logic is very straightforward.
Checked: Yes, Do [Wake the computer to run this task]
Unchecked: No, Don’t [Wake the computer to run this task]
Now, if the other options in the Conditions tab were simple instructions, like the “Wake the computer to run this task” option, then the meaning of unchecking them would be equally transparent. But the other options are all true “conditions”, and the logical implication of unchecking a condition option (an “only if” option) can be very murky:
Checked: Yes, Do [Start the task only if the computer is on AC power]
Unchecked: No, Don’t [Start the task only if the computer is on AC power]
At this point maybe we can appreciate how it would be easy to misinterpret the logical implication of unchecking this option as an instruction to “Not start the task if the computer is on AC power” – but that’s decidedly not the correct interpretation. When you check a condition option, you’re really asking Task Scheduler to prevent the task from running if the expressed condition (in this case; “the computer is on AC power”) isn’t met when the system state is checked prior to initializing the task. So we can just as well translate the “Start the task only if the computer is on AC power” condition into this equivalent condition: “Prevent the task from starting if the computer is on battery power” – and if we do this, I think it might help make things a little less confusing and allow us to see more clearly that the real effect of unchecking this option is simply to remove the specific restriction that’s imposed when the option is checked:
Checked: Yes, Do [Prevent the task from starting if the computer is on battery power]
Unchecked: No, Don’t [Prevent the task from starting if the computer is on battery power]
Unchecking this option simply tells Task Scheduler to lift the power-source restriction that was specified in the option – which is the same thing as telling it to ignore the option. Nowhere is there any implication that the task will be prevented from starting when this option is unchecked, and this logic is in perfect keeping with what experience teaches us, viz., that unchecking this option in fact does not prevent the Windows Defender Scheduled Scan task from running. Unchecking this option just allows the scheduled scan to run whether the computer is on AC power or on battery power – because Task Scheduler understands and follows the correct logical implications of all of the settings in the Conditions tab.
GreginMich
-
Anonymous
2015-01-05T23:17:46+00:00 On the bottom right corner under selected items is a "properties". Click on that and then under conditions you should be able to uncheck power now.