The Antimalware service executable (also known as Msmpeng.exe) is a process of Windows Defender. It is the built-in antivirus that comes with Windows 10/11.
So basically, this process runs in the background, scanning files and programs for malware or viruses, and when it finds a virus/malware, it either deletes them or quarantines them.
You might have noticed in Task Manager that the Antimalware service executable uses a lot of CPU and Memory, and the main reasoning behind this is that the process always runs on the background, as mentioned before, as it runs in the background, it detects anything that is malicious and takes action against it.
There are 2 ways to stop the this process from using too much memory, those being:
Rescheduling Windows Security scans
Prevent the process from scanning its own folder
Solution 1: Prevent Antimalware Service Executable from Scanning its Own Folder
Step 1: Press the WIN key on your keyboard and select the gear icon to open the Settings app.
Step 2: Click on “Update and Security” from the menu tiles.
Step 3: Select “Windows Security”, then click on “Virus and threat protection”.
Step 4: The Windows Security app will open up. Under “Virus & threat protection settings”, click on the link that says “Manage Settings”.
Step 5: Scroll down to “Exclusions” and select the “Add or remove exclusions” link.
Step 6: On the next page, click on “Add an exclusion”, then select “Folder”.
Step 7: Paste “C:\Program Files\Windows Defender ” into the editor and click on “Select Folder”.
Step 8: Immediately after you click on “Select Folder”, a massive modal will appear – make sure you click “Yes”.
The folder selected will now be added to exclusions and will not be scanned.
Solution 2: Disable Realtime Protection and Reschedule Scans
Step 1: Press WIN (Windows key) to open the Run Dialogue.
Step 2: Type “taskschd.msc” and click “OK”. This will open up the Task Scheduler app.
Step 3: Expand the “Task Scheduler tab”, “Microsoft”, and “Windows”.
Step 4: Scroll down and select “Windows Defender”.
Step 5: Right-click on “Windows Defender Scheduled Scan” and select “Properties”.
Step 6: Uncheck “Run with highest privileges” in the general tab.
Step 7: Go to the Conditions tab and uncheck everything there.
Step 8: Switch to the Triggers tab and click “New”.
Step 9: Schedule the time you want Windows Defender to run scans. Choose the frequency, date, and time, then click “OK”. Click “OK” again.
Step 10: Restart your computer. With this, the antimalware service executable should not eat up too many CPUs again.
Either of these steps should work and the process shouldn't use too much CPU again. It is good to keep in mind is that the Antimalware service executable is a crucial part of Windows Defender. And disabling it can put your computer at risks of being infected by malware or viruses, so to prevent this, make sure you have a antivirus software installed.
留言