Antimalware service executable eats memory

Anonymous
2025-02-04T08:12:19+00:00

title. it's always taking 200-300 mb of memory.

I tried:

disable windows security, got hit with this setting is managed by your (non existent) administrator

end task, got access is denies

command prompt things, did nothing

edit group policy, did nothing

enable disableantispyware in regedit, got hit with access is denied

tried to give myself permission to enable disableantispyware, access is denied

in case I missed any, I basically tried everything you can find online. no matter what I do, either nothing happens, access is denied or this setting is managed by your administrator

I'm about to flip this is my computer, I should get to choose what to do. I am the administrator and only user

Windows for home | Windows 10 | Settings

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

61 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ramesh Srinivasan 87,865 Reputation points Independent Advisor
    2025-02-07T03:52:16+00:00

    Hi Alana,

    I don't know why this happened. The Startup Repair saves the diagnostic information to the following log file:

    c:\windows\system32\logfiles\srt\srttrail.txt

    You may share it on OneDrive.

    Also, if possible, create an image-based backup of your OS partition and store it on an external drive. Here are some freeware options.

    https://www.youtube.com/watch?v=1VZsY80eHb4

    Standard Disclaimer: There is a link to a non-Microsoft website. The page appears to provide accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as PUPs (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2025-02-07T02:59:28+00:00

    I need to use my computer so I'll do it later, but a few questions:

    • when I did it the last time, when trying to open again half the time I get permanently stuck on 'dynabook' screen, other half I get 'automatic repair your pc failed to start'. why?
    • I fixed it with 'startup repair' in advanced options, could this have ruined the fix?
    • after I got back in, the sense.bat file disappeared so I'll make a new one, that's ok right?

    Was this answer helpful?

    0 comments
  3. Ramesh Srinivasan 87,865 Reputation points Independent Advisor
    2025-02-06T07:31:46+00:00

    Thanks for the update.

    As a side note, it's good that we determined the system was encrypted using BitLocker with the key stored in the AD or a previously used MSA. As you're able to login as admin, we could decrypt the drive or retrieve the keys. Otherwise, it would have been a difficult situation.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2025-02-06T07:23:12+00:00

    this was from the last time

    Was this answer helpful?

    0 comments
  5. Ramesh Srinivasan 87,865 Reputation points Independent Advisor
    2025-02-06T07:14:52+00:00

    The SENSE service is still starting, though we disabled it using the Batch file via WinRE. Any idea what was outputted when you ran sense.bat?

    1. Backup the registry using Acelogix Regbak:

    https://www.acelogix.com/download/#downrb

    1. Open c:\sense.bat using Notepad (admin). Add the following commands at the end of the batch file.

    ********** 

    reg save "HKLM\SY2\CurrentControlSet\Services\Sense" C:\Sense.bak

reg delete "HKLM\SY2\CurrentControlSet\Services\Sense" /f

    **********

    1. Boot into WinRE Command Prompt.

    Run:

    bcdedit

    Note the OS partition's drive letter. Suppose it's C:, run these commands:

    reg load HKLM\SO2 C:\Windows\System32\Config\SOFTWARE

    reg load HKLM\SY2 C:\Windows\System32\Config\SYSTEM

    C:\sense.bat

    Take photos of the output screen using your mobile phone or camera and share the images here.

    Was this answer helpful?

    0 comments