Antimalware service Executable high CPU usage windows 11

This program runs in the background and scans your computer for threats such as harmful software, viruses, worms, and so on

Share

Antimalware executable high CPU usage after the Windows 11 update? The process makes your computer unstable, very slow or not responding. The AntiMalware service Executable, also known as MsMpEng.exe, is a critical process associated with Windows security (Windows Defender), the built-in antivirus solution in Windows 11. And the primary function of Antimalware executable is to safeguard your system by scanning for and protecting against malicious software, viruses, and other security threats. In this article, we will explore the reasons behind Antimalware service executable high CPU usage and solutions to fix the problem on Windows 11.

Antimalware service Executable  (MsMpEng) is a Windows Security process that executes real-time protection against malware.

Why Antimalware executable high CPU usage?

The main purpose of this service is to safeguard your system again malicious software or virus malware infection. However sometimes antimalware service executable consume a significant portion of your CPU’s processing power.

- Advertisement -

The most common reason for high CPU usage by AntiMalware Executable is when it is actively scanning files and processes on your system. Scans can be triggered by real-time protection or scheduled scans.

Again Scanning large files or fragmented files can lead to increased CPU usage as the antivirus engine needs more resources to process them.

Outdated Windows versions, corrupted system files, third-party security software or other antivirus programs running alongside Windows security can cause conflicts, leading to increased CPU usage.

Windows 11 antimalware service executable high CPU usage

Well, Disabling the Real-Time Protection temporarily Disable Antimalware Service Executable and probably your PC back to normal. In addition, you need to ensure the latest Windows updates are installed. Prevent Antimalware Service Executable from Scanning its Own Folder is helpful for a few users. Here few tested solutions apply to fix Antimalware service executable high CPU usage on Windows 11.

Check for Updates

Microsoft regularly releases updates that include bug fixes, performance improvements, and security patches. Keeping your Windows Defender definitions and Windows 11 update is crucial for optimal performance and security.

  • Click on the Start button and select “Settings” (the gear icon).
  • Go to “Windows Update” in the left pane then Click on “Check for updates” in the right pane.
  • If new updates are available or pending there, allow them to download and install on your Device.
  • Once done reboot your computer to apply the changes.

windows 11 update download

Schedule Scans Wisely

By default, Windows Security (Defender) performs regular scans to ensure your system’s security. However, these scans might coincide with times when you’re actively using your computer. To change the scan schedule, do the following:

  • Press the Windows key + R, type taskschd.msc and click ok to open task scheduler,
  • Expand  Task Scheduler Library > Microsoft > Windows -> Windows Defender.
  • Double-click Windows Defender Scheduled Scan and Uncheck Run with the highest privileges.

Windows Defender Scheduled Scan

Next move to the conditions tab and uncheck all options there, click ok to save changes.

uncheck all conditions

  • Next schedule your own by going to the Triggers tab and select New
  • Create the scan by selecting if you want it done once, daily, weekly, or monthly.
  • You can also select the date and time, and when you want it to start.

Schedule scan

Limit Real-Time Scanning

Real-time scanning is a critical feature of Windows Defender, as it actively monitors files and processes for potential threats in real time. However, it can sometimes lead to high CPU usage during resource-intensive tasks like gaming or video editing. Turn off Defender antivirus protection in Windows Security and check if this helps.

  • Open Windows Security and go to “Virus & threat protection.”
  • Under “Virus & threat protection settings,” click on “Manage settings.”
  • Find the “Real-time protection” section and toggle the switch to turn it off temporarily.

Realtime protection

Keep in mind that disabling real-time protection leaves your system vulnerable to new threats, so do this only when performing tasks that require significant CPU resources.

Disable Antimalware Service Executable

If you are using a third-party antivirus program and want to prevent any potential conflicts, you can consider disabling Windows Defender temporarily that Disable Antimalware Service Executable.

However, it’s important to note that third-party antivirus solutions might not offer the same level of integration and security as Windows Defender.

  • Press Windows + I to open Settings, then click on “Privacy & Security” and “Windows Security” on the right

Windows security on settings

  • Go to “Virus & threat protection” and click on “Manage settings” next to Virus & threat protection settings.

Virus and threat protection settings

  • Turn off the “Real-time protection,” “Cloud-delivered protection,” and “Automatic sample submission” options.

Disable Antimalware Service Executable

Add the process to the Exclusion List

Adding the Anti-Malware Executable process to the exclusion list can be helpful in reducing high CPU usage caused by Windows Defender’s scanning activities.  Here’s how you can add the Anti-Malware Executable process to the exclusion list:

By excluding this process, Windows security won’t scan itself, leading to a reduction in CPU overhead.

  • Press Windows key + S, type Windows security then select the first result,
  • Go to “Virus & threat protection,” and click on “Manage settings.”
  • Scroll down to the “Exclusions” section and click on “Add or remove exclusions.”

Exclusions

You can exclude specific files, folders, file types, or processes from being scanned by clicking on the “+ Add an exclusion” button and selecting the appropriate option.

Let’s click the + Add an exclusion -> file -> navigate C:\Program Files\Windows Defender and select MsMpEng option to add Antimalware Service Executable is now on the Exclusion List.

Add exclusions MsMpEng

Note – To remove it from the list and the process, click on the exclusion arrow and select Remove.

Remove Antimalware Service Executable

 Check for Malware

In some rare cases, malware infections can disguise themselves as legitimate processes, including the Anti-Malware Executable. Perform a thorough system scan using Windows Defender or your preferred antivirus software to ensure your system is clean and free from malware.

  • Open Windows Security and go to “Virus & threat protection.”
  • Under “Virus & threat protection,” click on “Scan options.”
  • Choose “Full scan” and click on “Scan now.”
  • The scan may take some time, depending on the size of your system and the number of files.

Run System File Checker

Running the System File Checker (SFC) is another useful step in troubleshooting and resolving issues related to high CPU usage or other system problems in Windows 11.

  • Press Windows key + S and type cmd, right-click on the command prompt select run as administrator,
  • Type Command sfc /scannow and press enter key

SFC scan windows 11

The SFC tool scans and verifies the integrity of protected system files and replaces any corrupted or missing files with cached copies from the Windows system folder.

Let the scanning complete 100%, once done restart your computer and check if the high CPU usage issue persists.

Frequently Asked Questions (FAQs)

What is Antimalware Service Executable and why is it using high CPU?

Antimalware Service Executable, also known as MsMpEng.exe, is a component of Windows Security (Defender), responsible for real-time malware protection. High CPU usage by this process could indicate it’s scanning files or performing background tasks.

How can I reduce Antimalware Service Executable’s CPU usage?

You can try scheduling Windows Defender scans for non-peak hours, adding exclusions for certain files or directories, or temporarily disabling real-time protection to alleviate CPU usage.

Why does Antimalware Service Executable suddenly start consuming high CPU?

This could happen during system scans, when Windows Defender encounters a large number of files, or due to conflicts with other security software installed on your system.

Will disabling Antimalware Service Executable harm my computer’s security?

Disabling Windows Defender may leave your system vulnerable to malware attacks. It’s recommended to only disable it temporarily for troubleshooting purposes or if you have alternative, reliable antivirus software installed.

How do I check if Antimalware Service Executable is causing high CPU usage?

Open Task Manager (Ctrl + Shift + Esc), go to the “Processes” tab, and look for “Antimalware Service Executable” or “MsMpEng.exe.” If it’s consuming a significant amount of CPU, it might be the cause of the issue.

Can outdated definitions cause Antimalware Service Executable to use high CPU?

Yes, outdated malware definitions may cause Windows Defender to scan files more frequently or thoroughly, leading to increased CPU usage. Ensure Windows Defender is up-to-date to prevent this.

Are there any permanent fixes for Antimalware Service Executable high CPU usage?

Microsoft periodically releases updates and patches to improve the performance of Windows Defender. Keeping your system up-to-date and regularly checking for updates can help mitigate this issue in the long term.

Should I consider using third-party antivirus software instead of Windows Defender?

It’s a matter of personal preference and the specific needs of your system. Third-party antivirus software may offer additional features and customization options, but Windows Defender provides basic protection that’s integrated into the Windows operating system.

Also read:

Steve Ballmer
Steve Ballmer
With over 7 years of experience in the IT industry, I have experience in IT support, helpdesk, sysadmin, network admin, and cloud computing. Certified in Microsoft Technologies (MCTS and MCSA) and also Cisco Certified Professional in Routing and Switching.

Popular posts