Antimalware service executable eats memory

Anonymous
2025-02-04T08:12:19+00:00

title. it's always taking 200-300 mb of memory.

I tried:

disable windows security, got hit with this setting is managed by your (non existent) administrator

end task, got access is denies

command prompt things, did nothing

edit group policy, did nothing

enable disableantispyware in regedit, got hit with access is denied

tried to give myself permission to enable disableantispyware, access is denied

in case I missed any, I basically tried everything you can find online. no matter what I do, either nothing happens, access is denied or this setting is managed by your administrator

I'm about to flip this is my computer, I should get to choose what to do. I am the administrator and only user

Windows for home | Windows 10 | Settings

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

61 answers

Sort by: Newest
  1. Ramesh Srinivasan 87,865 Reputation points Independent Advisor
    2025-02-04T09:59:39+00:00

    Hi Alana,

    I'm Ramesh, here to answer your query at the Microsoft Community.

    1. Microsoft Defender consumes 200 - 300 MB of RAM during idle state, which is normal. However, the usage will increase during quick or full scans.
    2. The "Your IT administrator has limited access" message may appear for several reasons. The Defender service configuration may be incorrect, malware may be present, or some registry-based policies may be in effect.

    Please run the Farbar Scanner and share your logs for a detailed manual inspection of the startup items, services, scheduled tasks, etc.

    Download Farbar Recovery Scan Tool 64-bit (FRST64.exe)
    https://www.bleepingcomputer.com/download/farba...

    Note: If Microsoft Edge or Chrome mislabels the Farbar Scanner executable as PUA/malware, choose to keep it by tapping … in the bottom bar, choosing Keep, and then choosing Keep anyway in the dialog that appears. See this screenshot: https://learn.microsoft.com/en-us/deployedge/me.... It's a safe tool used in most antimalware forums.

    If the OS language is non-English, rename FRST64.exe to FRST64English.exe.

    Run the program. Don't check or uncheck any options. Click "Scan".

    Add the two logs, FRST.txt and Addition.txt, to a Zip archive, upload them to your OneDrive and share the link here.

    References:

    How-To: Share OneDrive files and folders - Microsoft Support
    https://support.microsoft.com/en-us/office/shar...

    OneDrive sharing options - screenshot
    https://imgur.com/a/vZyxpY9

    How to Run a Scan using Farbar Recovery Scan Tool:

    https://www.winhelponline.com/blog/farbar-recov...

    Standard Disclaimer: There is a link to a non-Microsoft website. The page appears to provide accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as PUPs (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

    Was this answer helpful?

    0 comments No comments