How to Fix High CPU Usage from Antimalware Service Executable

PDF download Download Article
Fix your slow and buggy PC with this simple guide
PDF download Download Article

AntiMalware Service Executable is a service component of Windows Defender. Basically, when Defender is running a full scan to check your PC for viruses or threats, AntiMalware Service Executable is the process that fires on all cylinders to get the job done. However, this process can be extremely power-intensive, and it’s common for AntiMalware Service Executable to drive your CPU to maximum capacity. Usually, this is normal, but there are a few bugs or quirks that could be making this problem worse. We’ll show you how to diagnose and fix the problem if necessary.

Why AntiMalware Service Executable is Using High CPU

Either Windows Defender is running a full scan and your PC can’t handle the task without maxing out the CPU, or Defender has run into a bug that’s easily solvable by excluding the folder hosting Windows Defender. In very rare cases, this can be a virus pretending to be Windows Defender.

Section 1 of 4:

What is AntiMalware Service Executable?

PDF download Download Article
  1. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/a\/ab\/Antimalware-Service-Executable-High-Cpu-Step-1.jpg\/v4-460px-Antimalware-Service-Executable-High-Cpu-Step-1.jpg","bigUrl":"\/images\/thumb\/a\/ab\/Antimalware-Service-Executable-High-Cpu-Step-1.jpg\/v4-728px-Antimalware-Service-Executable-High-Cpu-Step-1.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/en.wikipedia.org\/wiki\/Fair_use\">Fair Use<\/a> (screenshot)<br>\n<\/p><\/div>"}
    Windows Defender is the built-in virus protection software that comes with every copy of Windows 10 and 11. Defender is responsible for scanning your PC for threats, neutralizing viruses, and protecting your PC from malicious links. Anti-Malware Service Executable is a part of Windows Defender that runs in the background while you use your computer. [1]
    • Because AntiMalware Service Executable is a background process, you’ll likely only ever notice it in your task manager if it’s hogging power.
    • AntiMalware Service Executable is the same thing as msmpeng.exe in your task manager.
    2. Advertisement
Section 2 of 4:

Why is AntiMalware Service Executable Using High CPU?

PDF download Download Article
  1. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/b\/b1\/Antimalware-Service-Executable-High-Cpu-Step-2.jpg\/v4-460px-Antimalware-Service-Executable-High-Cpu-Step-2.jpg","bigUrl":"\/images\/thumb\/b\/b1\/Antimalware-Service-Executable-High-Cpu-Step-2.jpg\/v4-728px-Antimalware-Service-Executable-High-Cpu-Step-2.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/en.wikipedia.org\/wiki\/Fair_use\">Fair Use<\/a> (screenshot)<br>\n<\/p><\/div>"}
    Whenever Defender runs a full scan of your device, it’s AntiMalware Service Executable’s time to shine. The program fires on all cylinders to scan through your entire PC and find anything that doesn’t belong. This process requires a fair bit of power, so your CPU (central processing unit) can run quite hot while Defender does its thing.
    • You’re unlikely to notice any CPU hogging if your computer is newer, you have an SSD instead of an HDD, or your PC has a lot of RAM. The CPU bottlenecking typically only occurs if your computer doesn’t have a lot of multitasking power.
    • Can I just force AntiMalware Service Executable to shut down? Unless you have another antivirus program you’re prepared to run right now, it’s not recommended to stop AntiMalware Service Executable from completing its task.
Section 3 of 4:

Diagnosing the Problem

PDF download Download Article
  1. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/f\/f6\/Antimalware-Service-Executable-High-Cpu-Step-3.jpg\/v4-460px-Antimalware-Service-Executable-High-Cpu-Step-3.jpg","bigUrl":"\/images\/thumb\/f\/f6\/Antimalware-Service-Executable-High-Cpu-Step-3.jpg\/v4-728px-Antimalware-Service-Executable-High-Cpu-Step-3.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/en.wikipedia.org\/wiki\/Fair_use\">Fair Use<\/a> (screenshot)<br>\n<\/p><\/div>"}
    AntiMalware Service Executable will typically stop hogging the juice after it finishes scanning your device. If the problem resolves itself in a few minutes, your AntiMalware Service Executable process (and your PC as a whole) is working as intended. You do not have to “fix” anything, in other words.
  2. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/d\/dd\/Antimalware-Service-Executable-High-Cpu-Step-4.jpg\/v4-460px-Antimalware-Service-Executable-High-Cpu-Step-4.jpg","bigUrl":"\/images\/thumb\/d\/dd\/Antimalware-Service-Executable-High-Cpu-Step-4.jpg\/v4-728px-Antimalware-Service-Executable-High-Cpu-Step-4.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/en.wikipedia.org\/wiki\/Fair_use\">Fair Use<\/a> (screenshot)<br>\n<\/p><\/div>"}
    Because AntiMalware Service Executable is one of those “don’t stop it or bad things happen” services on your PC, many bad actors will name their malware “AntiMalware Service Executable” to try and trick people into letting it run. Download Malwarebytes or some other free antivirus software and run a full scan to see if anything comes up.
    • If you can, disable Defender and force stop AntiMalware Service Executable while running this second scan. After the scan is over, if there are no issues, turn Defender back on and uninstall the malware software.
    • If your anti-malware software does detect a problem, resolve the underlying problem and restart your PC to confirm the problem is gone.
    3. Advertisement
Section 4 of 4:

Fixing & Preventing High CPU Usage in the Future

PDF download Download Article
  1. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/5\/53\/Antimalware-Service-Executable-High-Cpu-Step-5.jpg\/v4-460px-Antimalware-Service-Executable-High-Cpu-Step-5.jpg","bigUrl":"\/images\/thumb\/5\/53\/Antimalware-Service-Executable-High-Cpu-Step-5.jpg\/v4-728px-Antimalware-Service-Executable-High-Cpu-Step-5.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/en.wikipedia.org\/wiki\/Fair_use\">Fair Use<\/a> (screenshot)<br>\n<\/p><\/div>"}
    Many users have noticed that AntiMalware Service Executable can end up in a “loop” where it scans its own folder, scans itself, and runs into a bug. Just skip Defender’s own folder and this problem should resolve itself. [2] Here’s how to do it:
    • Press the Windows key or select the gear icon in the Start menu to open Settings.
    • Select Update & Security and then Virus & Threat Protection .
    • Under “Virus & Threat Protection Settings,” tap on Manage Settings .
    • Scroll down to “Exclusions” and add the folder for Windows Defender (usually it’s C:\Program Files\Windows Defender).
  2. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/b\/be\/Antimalware-Service-Executable-High-Cpu-Step-6.jpg\/v4-460px-Antimalware-Service-Executable-High-Cpu-Step-6.jpg","bigUrl":"\/images\/thumb\/b\/be\/Antimalware-Service-Executable-High-Cpu-Step-6.jpg\/v4-728px-Antimalware-Service-Executable-High-Cpu-Step-6.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/en.wikipedia.org\/wiki\/Fair_use\">Fair Use<\/a> (screenshot)<br>\n<\/p><\/div>"}
    If, at the end of the day, AntiMalware Service Executable is still just a power hog, reschedule Windows Defender to only run these active scans in the middle of the workday when you aren’t home, or late at night when you’re asleep. [3] Here’s how to do it:
    • In the Windows search box, enter “Task Scheduler” and open the app.
    • Expand Task Scheduler Library , select Microsoft , then, Windows .
    • Open the Windows Defender folder and click Windows Defender Scheduled Scan in the middle column.
    • In the “Windows Defender Scheduled Scan Properties (Local Computer)” window, click Triggers and then New .
    • Select when you want your scans to start and restart your PC.
  3. {"smallUrl":"https:\/\/www.wikihow.com\/images\/thumb\/9\/91\/Antimalware-Service-Executable-High-Cpu-Step-7.jpg\/v4-460px-Antimalware-Service-Executable-High-Cpu-Step-7.jpg","bigUrl":"\/images\/thumb\/9\/91\/Antimalware-Service-Executable-High-Cpu-Step-7.jpg\/v4-728px-Antimalware-Service-Executable-High-Cpu-Step-7.jpg","smallWidth":460,"smallHeight":345,"bigWidth":728,"bigHeight":546,"licensing":"<div class=\"mw-parser-output\"><p>License: <a target=\"_blank\" rel=\"nofollow noreferrer noopener\" class=\"external text\" href=\"https:\/\/en.wikipedia.org\/wiki\/Fair_use\">Fair Use<\/a> (screenshot)<br>\n<\/p><\/div>"}
    Don’t get us wrong, Windows Defender is great, but it does tend to hog memory and CPU power. If you’d like to use another antivirus software, that may help. Bitdefender, Malwarebytes, and Sophos are all great options. Install one of those and disable Defender. [4]
    • The only way to permanently disable Defender is to install a replacement antimalware product. You can’t actually uninstall Defender otherwise, but you can disable it temporarily .
    • To disable Defender:
      • Open the Start menu and search for "Windows Security."
      • Select the Windows Security App from the search results.
      • Go to Virus & Threat Protection and select Manage Settings .
      • Set “Real-time Protection” to “Off.”
    4. Advertisement

Expert Q&A

Ask a Question
200 characters left
Include your email address to get a message when this question is answered.
Submit
      Advertisement

      Video

      Tips

      • If this problem occurs whenever you start or reboot your PC, you likely have a startup program that conflicts with Windows Defender’s settings. Go one by one through your startup processes and disable them to see if that fixes your high CPU usage.
        Thanks
        Helpful 0 Not Helpful 0
      Submit a Tip
      All tip submissions are carefully reviewed before being published
      Name
      Please provide your name and last initial
      Submit
      Thanks for submitting a tip for review!
      Advertisement

      You Might Also Like

      Turn Off Microsoft Defender in Windows 10: Temporarily or Permanently
      How to
      Check Your Smartphone for Pegasus Spyware
      How to
      Remove a Virus
      How to
      Remove the System Volume Information Folder from a Flash Drive
      How to
      Disable Avast Antivirus
      Install Antivirus on Your Windows or Mac Computer: Easy Guide
      How to
      Remove and Prevent Malware on a Computer
      How to
      Stop Norton Antivirus Startup
      How to
      Remove a Worm Virus
      How to
      Remove Newfolder.Exe Virus
      How to
      Disable AVG
      How to
      Remove a Rootkit
      How to
      Perform an Offline Scan with Windows 10 Defender
      How to
      Protect Your Computer With Antivirus Software
      Advertisement

      References

      1. ↑ https://signmycode.com/resources/how-to-disable-the-antimalware-service-executable-on-windows-11-10
      2. ↑ https://www.freecodecamp.org/news/what-is-antimalware-service-executable-why-is-it-high-cpu-disk-usage/
      3. ↑ https://www.freecodecamp.org/news/what-is-antimalware-service-executable-why-is-it-high-cpu-disk-usage/
      4. ↑ https://www.pcmag.com/picks/the-best-antivirus-protection

      About This Article

      Thanks to all authors for creating a page that has been read 246 times.

      Is this article up to date?

      Advertisement