Fix Antimalware Service Executable High CPU Usage

If the Antimalware Service Executable (MsMpEng.exe) is consuming high CPU, the fix is to adjust its scheduled scan time, add exclusions for known safe files, or repair the Windows Defender installation. Start by opening Windows Security, going to Virus & threat protection, and checking if a scan is running; if not, proceed with the steps below.

What Is Antimalware Service Executable?

Antimalware Service Executable is the background process for Microsoft Defender, the built-in antivirus in Windows 10 and Windows 11. The file name is MsMpEng.exe, and it runs constantly to monitor files, downloads, and running programs for malware. It is not a virus; it is a core part of Windows security. High CPU usage from this process is common, especially during full scans or when the system is idle and Defender is doing background checks.

Why Does It Use So Much CPU?

Defender performs several tasks that can spike CPU usage:

• Scheduled scans: By default, Windows runs a quick scan daily and a full scan weekly. During these, CPU usage can jump to 50% or more.
• Real-time protection: Every file opened, created, or executed is checked. This can cause temporary spikes.
• Background scanning: Windows Defender may scan files in the background even when the system is idle.
• Corrupted cache or update issues: If the Defender engine or its definitions are corrupted, it may loop or re-scan repeatedly.
• Third-party antivirus conflicts: If another AV is installed, both may scan the same files, doubling the load.

How to Fix High CPU Usage

Step 1: Check for an Active Scan

1. Open Windows Security (search for it in the Start menu).
2. Go to Virus & threat protection.
3. Click Scan options and see if a scan is running. If so, wait for it to finish. You can also stop it by clicking Cancel.

Step 2: Adjust Scheduled Scan Time

1. Press Win + R, type taskschd.msc, and press Enter.
2. Navigate to Task Scheduler Library > Microsoft > Windows > Windows Defender.
3. Find the task named Windows Defender Scheduled Scan.
4. Right-click it and select Properties.
5. Go to the Triggers tab and edit the trigger to a time when you are not using the computer.
6. In the Conditions tab, check Start the task only if the computer is on AC power and Stop if the computer switches to battery power.
7. In the Settings tab, check Stop the task if it runs longer than and set a limit (e.g., 1 hour).

Step 3: Add Exclusions

If you know certain folders or file types are safe, you can exclude them from real-time scanning. This reduces CPU usage but only do this for files you trust.

1. Open Windows Security.
2. Go to Virus & threat protection > Manage settings under "Virus & threat protection settings".
3. Scroll to Exclusions and click Add or remove exclusions.
4. Add the file, folder, or file type. For example, if you have a large game folder that you trust, exclude it.

Step 4: Repair Windows Defender

1. Open PowerShell as Administrator (right-click Start and select "Windows PowerShell (Admin)").
2. Run the command: sfc /scannow to check system files.
3. If that does not help, run DISM /Online /Cleanup-Image /RestoreHealth.
4. Restart your PC.

Step 5: Reset Windows Defender

If the above fails, you can reset Defender by using the Windows Security app. Go to Settings > Privacy & security > Windows Security > Open Windows Security. Then go to Device security > Core isolation details and turn off Memory Integrity temporarily. This is not a permanent fix but can help if a driver is causing conflicts.

Common Misconceptions

Many users think that disabling Windows Defender is the only fix. That is not recommended because you lose protection. Instead, you can disable real-time protection temporarily, but it will turn back on automatically. Another misconception is that MsMpEng.exe is a virus. It is a legitimate Microsoft file, but malware can disguise itself with the same name. To verify, right-click the process in Task Manager and select "Open file location". It should be in C:\Program Files\Windows Defender. If it is elsewhere, run a full scan with another tool.

When to Consider Third-Party Antivirus

If high CPU usage persists after all steps, you might consider a third-party antivirus. However, Windows automatically disables Defender when another AV is installed. This can reduce CPU usage if the third-party AV is more efficient. But be careful: some third-party AVs are heavier than Defender. Choose one that is known for low resource usage, and always uninstall the old one properly.

Performance Tips Beyond CPU

• Keep Windows updated to get the latest Defender engine improvements.
• Run a full scan manually at night when you are not using the PC.
• Close unnecessary background apps to free up RAM, which can reduce the impact of Defender’s memory usage.
• If you have an SSD, scans are faster than on HDDs, so consider upgrading.

Frequently Asked Questions

Is it safe to disable Antimalware Service Executable?

Disabling it permanently is not safe because it removes your real-time protection. You can temporarily disable it via Windows Security, but it will re-enable automatically. For a permanent fix, use the scheduled scan adjustments or exclusions instead.

Why does MsMpEng.exe use 100% CPU during startup?

During startup, Defender may run a quick scan of recently changed files. This is normal and usually settles after a few minutes. If it persists, check for scheduled scans that might be running at login.

Can I set a lower priority for MsMpEng.exe?

You can set a lower priority in Task Manager, but it will reset on reboot. To do it persistently, you would need a third-party tool, which is not recommended. Instead, use the scheduled scan settings.

Does Windows Defender slow down gaming?

Yes, real-time scanning can cause micro-stutters. You can exclude your game folders and the game’s executable file. Also, enable Game Mode in Windows to prioritize gaming processes.

What if the problem is due to a corrupted update?

If Defender’s definitions are corrupted, you can force an update by going to Windows Security > Virus & threat protection > Protection updates > Check for updates. If that fails, use the Windows Update troubleshooter or reset Windows Update components.

Related

• How to Change WhatsApp Chat Theme
• Does Fitbit Work with iPhone? Compatibility & Features
• Fix Cannot Install Synaptics Touchpad Driver on Windows 10