Can one prevent Antimalware Executable to start hogging CPU for extended periods each time some network adapter gets active?

One of the most annoying habits in Windows 8 is, that the built-in "Antimalware Service Executable" (part of "Windows Defender") starts hogging my device's CPU with 60-70% (and 100% disk) for extended periods EACH AND EVERY time after I wake it up.

I wouldn't mind if it starts doing its business IN THE BACKGROUND but when I wake my device up from standby it's usually to get something done NOW and thus I find it increasingly unacceptable, that the system is always taken over by Window's defender exactly then and for up to several minutes! If I don't find a solution soon to throttle this beast, then I will disable Defender altogether!

What I noticed is, that this process seems to be actually triggered not by the system waking up, but by the network adapter becoming active. And actually, this happens each and every time ANY network adapter gets active! E.g. if my system has NO network connection at all and I plugin the network cable the Antimalware Service Executable starts. When - after it has settled again - I additionally enable Bluetooth then the Antimalware Service Executable starts its hogging business again. And if I then additionally enable the WLAN a few minutes later, it will AGAIN start to consume CPU!

So: can one decouple this? Running a scan ONCE after (re-)starting it is definitely enough, especially if Defender hasn't downloaded any new signatures since the last run! And, second, can one make Defender convince to strictly run in the background ONLY?

Michael

[Moved from Windows]

|

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

Yip - I was able to do this but this feature is still slowing down my computer and unchecking these boxes did not help.

What I find particularly unhelpful is that, in order to get to a useful answer, I have to read through loads of complaints and unhelpful patronising comments from people who think they are smarter than everyone else!

I went through the same issue.  What I found is that if you start messing with these buttons and you have some actual malware it was trying to delete, it gets stuck in some type of loop and doesn't stop.  It continues to execute the task.  I looked in my web add-ons and found some coupon thing I didn't download.  I removed it, and the problem went away.  Good luck!!

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 You are not alone!! I tried every thing suggested in this thread and still have the same problem. I gave away my computer to one of my friends. He used it for just over 2 weeks, and gave it back to me. He said it is still starting up when he starts the computer and when he uses WinRAR. He said it almost totally disables to computer when it starts. No telling how long it will run. Sometimes 5 minutes and sometimes 3 hours. Bill Gates Are you reading this???? Your NEWEST **** Operating System is broken!!!!!! Fix It!!!!!

 Feeling Robbed,

 Muchofreeo.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

*Sigh....* Just disable the entire malware program altogether and it won't bother you anymore.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Not an option as a malware program is necessary. What is needed is a malware program that does not hog up the disk.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Reply In reply to deleted message

In that case I suggest you actually read the fora in search for your answers, I doubt others will be better slaves to your needs.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

If Automatic Maintenance is running the Windows Defender scheduled scan while you’re using your PC (if you see the Automatic Maintenance “clock” superimposed on the Action Center icon (the white flag in the notification tray)), and this is interfering with your work, then I would suggest scanning for system corruption:

http://answers.microsoft.com/en-us/windows/wiki/windows8_1-system/troubleshooting-component-store-system-files/8acbd614-678d-42b9-859c-56d3e6f8342a

If the Automatic Maintenance scan isn’t yielding to user activity the way it’s supposed to, then you can work around the issue by rescheduling Automatic Maintenance (in the Action Center) for a time when the PC isn’t in use, or you can disable the Windows Defender Scheduled Scan task in Task Scheduler (right-click on the task and select “disable"). If the issue isn’t directly related to the Automatic Maintenance scan, but appears to be related to problems with the Windows Defender antimalware engine (MsMpEng.exe) per se, i.e., if you observe excessive CPU usage for MsMpEng.exe (in Task Manager) when the scheduled scan isn’t running, this is most frequently caused by conflicting (real-time) antimalware products, remnants thereof, or by utilities with high read/write activity levels, which can sometimes be identified with Task Manager or Process Monitor. If you see this “free-floating” excessive CPU usage for MsMpEng.exe, the first thing you need to do is remove any other real-time AV products that might be installed, and also run the removal tools for any AV products that were packaged with the PC, or that you previously installed:

http://answers.microsoft.com/en-us/protect/wiki/mse-protect_start/list-of-anti-malware-product-removal-tools/2bcb53f7-7ab4-4ef9-ab3a-6aebfa322f75

If that doesn’t eliminate the problem, then the issue could possibly be the result of undetected malware, so you should scan with multiple second-opinion antimalware scanners:

http://www.surfright.nl/en/hitmanpro

https://www.malwarebytes.org/free/

http://www.kaspersky.com/downloads/kaspersky-virus-removal-tool

http://support.kaspersky.com/viruses/disinfection/5350

http://www.pandasecurity.com/homeusers/solutions/activescan/ 

http://www.bitdefender.com/scanner/online/free.html

http://www.eset.com/us/online-scanner/

If that doesn’t do it, then you should just go ahead and install a third-party AV product. The Windows 8/8.1 operating system is designed to shut down Windows Defender automatically when any other real-time AV product is installed – and third-party AV products not only seem to be less prone to conflicts; they also appear to have better detection rates:

http://www.av-test.org/en/home/?avtest[type]=3

But be advised that the final verdict isn’t in yet, because the analysis changes radically when it’s based on Microsoft’s own prevalence data:

http://www.av-comparatives.org/microsoft-prevalence-based-analysis-file-detection-tests/

GreginMich

1 person found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

This problem and it solutions are so Microosoft.  I am the admin and only user of this PC.  It will not let me check or uncheck any of the conditions boxes suggested above.  ?

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

MSFT: I finally fingered it out.  Go finger.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

after you click on windows defender go to top and click on Action then click on Properties a new window will open now click on conditions now you can remove the check marks 

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

This problem and it solutions are so Microosoft.  I am the admin and only user of this PC.  It will not let me check or uncheck any of the conditions boxes suggested above.  ?

You’ve been duped by a totally bogus reply that mysteriously continues to chalk up lots of bogus “helpful” votes. First you have to realize that there isn’t any real oversight in this forum, and that there are lots of people who are perfectly willing to take advantage of that fact. That means that you’re going to be forced to put on your thinking cap and ask yourself how removing the requirement for a system idle state, and for AC power, and for a network connection, could possibly serve to disable the Windows Defender Scheduled Scan task (AC power is actually the only requirement). You can’t disable a task by removing all of its restrictions – but you can disable it by right-clicking on it and choosing “Disable”. Unfortunately, that won’t help at all if the CPU consumption isn’t being caused by a scheduled scan that’s run amok (see above).

GreginMich

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

 
 

Question Info


Last updated May 14, 2021 Views 1,515,588 Applies to: