How To Fix High CPU usage by Antimalware Service Executable

The name of the the process MsMpEng is Antiwalware Service Executable. It is used by the antimalware which is Windows Defender that is associated with Windows Defender service program. Although the antimalware service executable is stable program, there are instances wherein users experienced High CPU usage on Windows PC. In this latest installment of our troubleshooting series, we will tackle how to fix Antimalware Service Executable (MsMpEng) issue taking up too much High CPU usage with Windows Defender on your windows 10.

What to do with High CPU usage by Antimalware Service Executable on Windows 10 PC

There are two common factors that can cause Antimalware Service Executable to take up too much CPU resources, from its real time feature and Full scan feature. Real time protection Feature is consuming high CPU usage from regularly scanning files on your computer which is of course its primary function which is to protect in real time. Another reason is because if its Real Time Protection Feature wherein when a full complete scan is being done, computer system will then experience high CPU usage and users will experienced a delay, lagging and or hanging responses from the system. Listed below are the troubleshooting steps that you need to do to fix the problem.

Before performing recommended troubleshooting methods listed below it’s best to restart your computer first. This action refreshes the operating system and remove any corrupt temporary data that could be causing the problem.

Method 1: Properly Reschedule Windows Defender

Estimate Cost : 0

Time Needed : 4 minutes

To prevent Windows Defender to take up too much of your CPU resources, you may need at this time to change scan schedule of Windows Defender scanning on your computer system using task scheduler.

  1. At the search bar on your windows located at the lower left, type Administrative Tools.

    Antimalware Service ExecutableThis will search for the Windows Administrative Tools.

  2. Click on Windows Administrative Tools result.

    Antimalware Service ExecutableIt’s usually the first one on the list.

  3. Locate and double click on Task Scheduler .

    Antimalware Service ExecutableA new window opens.

  4. On the left pane of Task Scheduler window, click on Task Scheduler Library to expand it.

    Antimalware Service ExecutableYou will then be able to see all the other folders under it.

  5. Click on Microsoft Folder to expand it.

    Antimalware Service ExecutableMore folders will become visible.

  6. Click on Windows to expand it

    Antimalware Service ExecutableFolders of the features and services will become visible.

  7. Scroll down and locate Windows Defender Folder to expand it.

    Antimalware Service ExecutableYou will see more information in the right pane.

  8. At right pane of Windows Defender, locate and double click Windows Defender Scheduled Scan.

    Antimalware Service ExecutableA new window opens.

  9. Stay on the General tab of Windows Defender Scheduled Scan window, uncheck the option Run with highest priviledges.

    Antimalware Service ExecutableThis will make sure the service will have all the permissions it needs.

  10. Click Conditions tab.

    Antimalware Service ExecutableIt’s the fourth tab from the left.

  11. Under Idle option, uncheck the option “Start the task only if the computer is idle for” if it is checked.

    Antimalware Service ExecutableThis will disable the feature even if the computer becomes idle.

  12. Under Power option, uncheck the option “Start the task if the computer is on AC power

    Antimalware Service ExecutableThis will be enabled if the computer is plugged in.

  13. Under Network option, uncheck the option ” Start only if the following network connection is available

    Antimalware Service ExecutableThis won’t run if there’s no internet connection.

  14. Click Triggers tab.

    Antimalware Service ExecutableClick New tab, New Trigger window opens.

  15. Under the setting option, choose from the options available.

    Antimalware Service ExecutableThis will reschedule the Defender to work according to your own preference.

  16. Click OK to apply changes made.

    Antimalware Service ExecutableThis will save all the changes you made.

  17. Repeat the same procedures for the other three schedules: Windows Defender Cache Maintenance, Windows Defender Cleanup and Windows Defender Verification.

    Antimalware Service ExecutableJust follow the same procedures and you’ll be good to go.

Tools
  • Task scheduler
Materials
  • Windows 10

Check if High CPU usage from Antimalware Service Executable issue on Windows 10 still occurs.

Method 2: Disable Windows Defender

Disable Windows Defender Firewall works for some users experiencing the same high CPU usage. But make sure that before turning off Windows Defender Firewall, you must also install another anti malware program so that your computer will still be protected from malware and threats.

There are two ways to Turn OFF Windows Defender:

First: Using Local Group Policy Editor

  1. Press Windows Key + R on your keyboard to open RUN dialog box.
  2. At RUN dialog box, type “gpedit.msc” and press Enter or click OK to open Local Group Policy Editor.
  3. At the left pane of Local Group Policy Editor window, click on Computer Configuration to expand it.
  4. Double click Administrative Templates to expand it.
  5. Double click Windows Components to expand it.
  6. Scroll down to locate Microsoft Defender Antivirus Folder to expand it.
  7. At right pane of Microsoft Defender Antivirus, locate the option “Turn off Microsoft Defender Antivirus” and double click it. A new window opens.
  8. Click on “Enabled” option to disable Windows Defender
  9. Click OK to apply changes made.
  10. Restart your computer.

After computer completely reboots, check if High CPU usage from Antimalware Service Executable issue on Windows 10 still occurs.

Second: Using Registry Editor

  1. Press Windows Key + R on your keyboard to open RUN dialog box.
  2. At RUN dialog box, type “regedit “ and press Enter or click OK to open Registry Editor.
  3. At the left pane of Local Group Policy Editor window, click on HKEY_LOCAL_MACHINE to expand it.
  4. Double click SOFTWARE folder to expand it.
  5. Double click Policies folder to expand it.
  6. Double click Microsoft folder to expand it.
  7. Double click Windows Defender folder to expand it.
  8. At right pane of Windows Defender folder, double click on the entry “DisableAntiSpyware”. Change its Value Date to 1.
  9. Click OK to apply changes made.

Check if Antimalware Service Executable High CPU usage issue still occurs.

Method 3: Add Antimalware Service Executable to Windows Defender Exclusion List

There have been reports by users that adding MsMpEng.exe to the exclusion list of Windows Defenders solves the problem. Add an exclusion and see if the issue with anti malware service executable will be resolved.

  1. Simultaneously press CTRL + SHIFT + ESC keys on your keyboard to open Windows Task Manager.
  2. At Task Manager window, locate and right click on the option Antimalware Service Executable.
  3. Click Open File Location from the drop down menu. A new window opens, MsMpEng file will be highlighted.
  4. Highlight the file location path at the address bar, Right click and select copy from the drop down menu.
  5. Press Windows key + I on your keyboard to open Windows Settings section.
  6. Click on Update and Security.
  7. Click Windows Security at the left pane
  8. Under Protection Areas at right pane, click on Virus and Threat Protection
  9. Click Manage Settings under Virus Threat Protection Settings.
  10. Locate the Exclusion option, click on Add or Remove exclusions.
  11. Click “Add an Exclusion”, select “Folder” from the drop down menu.
  12. Paste the file location path of Antimalware Service Executable, click select folder tab.

Antimalware Service Executable will now be added on the Exclusion list of Windows Defender then check if Antimalware Service Executable High CPU usage issue still occurs.

Method 4: Remove Bad Definition Updates

There are instances wherein Windows Defender Firewall after scanning can acquire bad definition updates that can sometimes identify the Windows files as viruses. Try to remove bad definition updates using the command prompt and see if the method works.

  1. At the search bar on your windows located at the lower left, type Command Prompt.
  2. Right click on the Command Prompt result and click Run as Administrator from the drop down menu.
  3. At the Command prompt window, type the following commands and press Enter after each command.
  • Type “%PROGRAMFILES%\Windows Defender\MPCMDRUN.exe” -RemoveDefinitions -All and press Enter.
  • Type “%PROGRAMFILES%\Windows Defender\MPCMDRUN.exe” -SignatureUpdate and press Enter

Wait for the process to complete, then Check if check if Antimalware Service Executable increased CPU usage issue still occurs.

After performing the methods mentioned above, you will successfully fix Antimalware Service Executable High CPU usage issue by Windows Defender.

Visit our TheDroidGuy Youtube Channel for more troubleshooting videos.

Leave a Reply

Your email address will not be published. Required fields are marked *