Why Antimalware Service Executable high memory usage

High CPU Usage by Antimalware Service Executable is a common problem reported by users. You can find below the steps to Fix High RAM & CPU Usage by Antimalware Service Executable in Windows 10/11.

Why Antimalware Service Executable high memory usage

Antimalware Service Executable (MsMPEng.exe) is a legitimate Windows service and not a virus or malware trying to cause harm or damage on the computer.

Antimalware Service Executable is a part of Windows Security (previously called Windows Defender) and is designed to protect your computer by remaining active in the background.

In general, Antimalware Service Executable is known to consume high CPU & RAM only while Windows Security is performing a Real Time Scan, Full System Scan and also while it is Updating Virus Definitions.

Once these security tasks are completed, CPU usage by Antimalware Service Executable should significantly reduce and you should find your computer running normally.

However, if your computer is constantly slowing down or freezing due to High CPU Usage by Antimalware Service Executable, you should be able to fix the problem using the following methods.

1. Disable Real Time Protection

A quick way to fix High CPU & RAM usage by Antimalware Service Executable is to disable Real Time Protection feature in Windows Security.

Go to Settings > Update & security > select Windows Security in the left-pane. In the right-pane, scroll down and click on Virus & threat protection.

Why Antimalware Service Executable high memory usage

On the next screen, scroll down and click on Manage Settings option, located under “Virus & threat protection settings”.

Why Antimalware Service Executable high memory usage

On the next screen, turn OFF Real-Time Protection.

Why Antimalware Service Executable high memory usage

Note: This method disables Real-time protection for a temporary period. Windows will automatically enable Real-Time Protection, the next time you Login to the computer.

2. Prevent Antimalware Service Executable from Scanning its Own Folder

It is noticed that Antimalware Service Executable uses high CPU & RAM due to its tendency to scan its own folder located at path C:\Program Files\Windows Defender.

Go to Settings > Update & security > Windows Security > Virus & Threat Protection > scroll down and click on Manage Settings Link located under “Virus & threat protection settings”.

Why Antimalware Service Executable high memory usage

On the next screen, scroll down to “Exclusions” section > click on Add or remove exclusions link.

Why Antimalware Service Executable high memory usage

On the next screen, click on Add an Exclusion and select the Folder option.

Why Antimalware Service Executable high memory usage

On next screen, navigate to C: Program Files > Windows Defender and click on Select Folder button.

Why Antimalware Service Executable high memory usage

Restart the computer and you should find an overall improvement in its functioning.

3. Disable Scheduled Tasks

Disabling Windows Defender scheduled tasks is another way to reduce High CPU Usage by Antimalware activity on your computer.

Type Task Scheduler in the Search bar and click on Task Scheduler in the search results.

Why Antimalware Service Executable high memory usage

On the Task Scheduler screen, navigate to Task Scheduler Library > Microsoft > Windows > Windows Defender. In the right-pane, disable All the 4 Windows Defender Tasks.

Why Antimalware Service Executable high memory usage

After this, you should find a significant reduction in CPU & RAM usage by Antimalware Service Executable.

4. Install Third Party Antivirus Program

The easiest way to fix High CPU Usage by Antimalware Service is to install a reputable Third Party Antivirus program on the computer.

Windows Defender automatically disables itself, whenever Norton or any other third party antivirus program is installed on the computer.

Once Windows Defender is disabled, you will no longer find Antimalware Service running and consuming resources on your computer.

5. Disable Windows Defender AntiSpyware Function Using Registry

The AntiSpyware function of Windows Defender has been reported to remain active, even after Windows Defender is disabled on the computer. This can be fixed by disabling AntiSpyware via registry.

Note: It is a good safety precaution to create system restore point before making Registry Edits on the computer.

Open Run Command > type Regedit in the Search box and click on OK.

Why Antimalware Service Executable high memory usage

On Registry Editor screen, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender > Double-click on DisableAntiSpyware and change its Value Data from 0 to 1.

This will Permanently Disable Windows Defender on your computer.

If you cannot find DisableAntiSpyware DWORD, right-click in an empty area in the right pane > select New and click on DWORD (32-bit) Value.

Why Antimalware Service Executable high memory usage

Name the new Key as DisableAntiSpyware > Enter 1 in the Value Data field.

  • How to Protect Windows Computer From Remote Attacks
  • How to Uninstall Apps and Programs In Windows 10

Why is antimalware Service executable high?

The main reason that antimalware service executable uses too much CPU is that it runs constantly in the background. While running in the background, it actively scans programs and files and carries out the appropriate actions whenever it detects anything malicious.

Why is defender using so much memory?

Generally, Microsoft Defender antivirus service high memory usage is triggered by the Real-time Protection feature in Windows Security. Therefore, it is a good option to disable it temporarily.

Why is my antimalware service executable always running?

If you see the Antimalware Service Executable process using a large amount of CPU or disk resources, it's likely scanning your computer for malware. Like other antivirus tools, Microsoft Defender performs regular background scans of the files on your computer.