Jumping out of the frying pan and into the fire has been banned by the U.S. Cliches Administration as of 1/1/13.
Can one prevent Antimalware Executable to start hogging CPU for extended periods each time some network adapter gets active?
One of the most annoying habits in Windows 8 is, that the built-in "Antimalware Service Executable" (part of "Windows Defender") starts hogging my device's CPU with 60-70% (and 100% disk) for extended periods EACH AND EVERY time after I wake it up.
I wouldn't mind if it starts doing its business IN THE BACKGROUND but when I wake my device up from standby it's usually to get something done NOW and thus I find it increasingly unacceptable, that the system is always taken over by Window's defender exactly then and for up to several minutes! If I don't find a solution soon to throttle this beast, then I will disable Defender altogether!
What I noticed is, that this process seems to be actually triggered not by the system waking up, but by the network adapter becoming active. And actually, this happens each and every time ANY network adapter gets active! E.g. if my system has NO network connection at all and I plugin the network cable the Antimalware Service Executable starts. When - after it has settled again - I additionally enable Bluetooth then the Antimalware Service Executable starts its hogging business again. And if I then additionally enable the WLAN a few minutes later, it will AGAIN start to consume CPU!
So: can one decouple this? Running a scan ONCE after (re-)starting it is definitely enough, especially if Defender hasn't downloaded any new signatures since the last run! And, second, can one make Defender convince to strictly run in the background ONLY?
Michael
[Moved from Windows]
Windows for home | Previous Windows versions | Security and privacy
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
146 answers
Sort by: Oldest
-
Anonymous
2015-10-17T20:05:58+00:00 -
Anonymous
2015-10-31T15:16:10+00:00 frankly I am amazed that the problems regarding windows defender hogging CPU appear to be so well understood that Microsoft have not "fixed this", but rather pour out instructions how us "Poor bloody infantry" as an old infantryman would say, are left to rummage through any number of avenues to rectify the problem - what wrong in issuing a patch???
-
Anonymous
2015-11-15T14:02:09+00:00 That stuff is killing all my gaming sessions with the lag, constantly taking over 20% of my cpu usage.
Ironically this "antivirus" is basically "an unwanted program that uses a lot of the computer's resources", which would make a pretty good definition for a virus.
The worst thing is that even with admin rights I am not able to kill it through the task manager. Ridiculous.
Microsoft won't remain the preferred gaming OS at this rate.
-
Anonymous
2015-12-08T04:44:18+00:00 The easiest way I have found to remove this without damaging anything (with there being no way to remove the program entirely) is to just go in like the main response says. Windows Key > Settings > type in "Administrative Tools" > Open Task Scheduler.
From there Navigate via Task Scheduler Library > Microsoft > Windows > Windows Defender.
In this screen you should see 4 tasks in the center of the screen above a larger box. There are three ways to handle this. You can either directly disable all four tasks by Ctrl + Clicking all 4 > Right click > Disable; you can go in through the options and uncheck all the active boxes through all the settings tabs; or you can take my favorite route and delete all the tasks entirely which does not crash your computer, change any other settings, or cause any major problems. It simply stops Windows Defender entirely and removes the issue of the executable taking up so much CPU and disk. To delete all four simply Ctrl Click all 4 > Right Click > Delete. Since doing this I have had no issues, I run a third party Anti-Malware software (which takes up 1% or less cpu during non-scan hours). And the dreaded Antimalware Service Executable takes up under 1% cpu all the time and no disk along with sub 100mb memory.
Hope this helps someone.
-
Anonymous
2015-12-08T06:11:48+00:00 The easiest way I have found to remove this without damaging anything (with there being no way to remove the program entirely) is to just go in like the main response says. Windows Key > Settings > type in "Administrative Tools" > Open Task Scheduler.
From there Navigate via Task Scheduler Library > Microsoft > Windows > Windows Defender.
In this screen you should see 4 tasks in the center of the screen above a larger box. There are three ways to handle this. You can either directly disable all four tasks by Ctrl + Clicking all 4 > Right click > Disable; you can go in through the options and uncheck all the active boxes through all the settings tabs; or you can take my favorite route and delete all the tasks entirely which does not crash your computer, change any other settings, or cause any major problems. It simply stops Windows Defender entirely and removes the issue of the executable taking up so much CPU and disk. To delete all four simply Ctrl Click all 4 > Right Click > Delete. Since doing this I have had no issues, I run a third party Anti-Malware software (which takes up 1% or less cpu during non-scan hours). And the dreaded Antimalware Service Executable takes up under 1% cpu all the time and no disk along with sub 100mb memory.
Hope this helps someone.
Unfortunately, none of those “methods” will stop Windows Defender entirely, and everything beyond disabling the Windows Defender Scheduled Scan task is overkill that will just mess up the maintenance tasks. The Antimalware Service Executable (the antimalware engine) is the core of Windows Defender. That process will still be running after you trash the maintenance tasks, and since excessive CPU utilization by MsMpEng.exe is usually caused by a conflict between Windows Defender’s real-time scanning module and components or remnants of a third-party AV app, rather than by the scheduled maintenance tasks, the CPU issue will likely persist.
Installing a third-party AV app is supposed to disable Windows Defender, but if you already have a third-party AV app installed and the Antimalware Service Executable is eating up CPU, then what you need to do is disable Windows Defender itself – not just the Windows Defender scheduled maintenance tasks. That’s the only way to stop Windows Defender entirely. You can do that in the settings in Windows 8/8.1 and you can do it with Group Policy in Windows 10:
http://www.tenforums.com/tutorials/5918-windows-defender-turn-off-windows-10-a.html
Some general guidelines for dealing with this issue can be found here:
GreginMich