Why Antimalware Service Executable Is Running On My PC?


Windows 10 has Windows Defender, Microsoft’s built-in antivirus. However, the “Antimalware Service Executable” process is the background of Windows Defender’s process. We call the program is MsMpEng.exe and is part of the Windows OS.

What do you know about Antimalware Service Executable?

Antimalware Service Executable

Windows Defender becomes a part of Windows 10. Also, it is the successor to the free Microsoft Security Essentials antivirus for Windows 7. However, it ensures that all the users of Windows 10 always have an antivirus program installed and executing. Also, if they haven’t can’t install one. If you have an outdated antivirus app installed, Windows 10 can deactivate it and enable Windows Defender for you.

The Antimalware Service Executable process is the background service of Windows Defenders. However, it remains executing in the background. Also, it is responsible for analyzing files for viruses when you access them. Also, it performs some background system scans to analyze harmful software. However, it installs antivirus definition updates and anything else a security app such as Windows Defender wants to do.

While the process is known as Antimalware Service Executable on the Processes tab in Task Manager. Its file name is MsMpEng.exe, and you’ll then view this on the Details tab.

You can also configure Windows Defender. It performs scans and views its scan history from the Windows Defender Security Center apps added with Windows 10.

If you want to launch it, use the “Windows Defender Security Center” shortcut in the Start menu. Also, you can right-tap the shield icon in the area on your taskbar and choose “Open”, or move to Settings > Update & security > Windows Defender > Open Windows Defender Security Center.

Why is Antimalware Service Executable Using So Much CPU?

Antimalware Service Executable Using So Much CPU

If you view the Antimalware Service Executable process using a massive amount of CPU or disk resources, it’s just like scanning your PC for a virus. Like other antivirus tools, Windows Defender performs daily background scans of the files on your PC.

Also, it scans files once you open them, and daily installs updates with information about the latest malware. This CPU usage could also highlight that it’s installing an update. Or else, you just opened a big file Windows Defender wants some additional time to analyze.

Windows Defender also performs background scans when your PC is idle and can’t be used. However, it might still use CPU resources scanning files or performing updates whenever you open them. Also, you use your PC. But the background scans can’t run while you’re using your PC.

This is all normal with any antivirus program, just want to use some system resources to detect your PC and keep you secured.

Can I Turn off It?

We can’t recommend turning off the Windows Defender antivirus tool if you don’t have any other antivirus software installed. However, you can’t turn off it permanently. You can also open the Windows Defender Security Center apps from your Start menu. Just move to Virus & threat protection > Virus & threat protection settings and turn off “Real-time protection”. However, it’s just temporary, and Windows Defender will turn on itself after a short period of time if it can’t check other antivirus apps installed.

Besides some misleading advice you’ll view online, Windows Defender performs its scans when a system maintenance task you can’t turn off. Turning off its tasks in the Task Scheduler can’t help. It will also permanently stop whenever you install another antivirus program to take its place.

If you have another antivirus program installed. Then Windows Defender will automatically turn off itself and get out of your way. If you move to Windows Defender Security Center > Virus & threat protection, you’ll then view a message saying “You’re using other antivirus providers” if you have another antivirus program installed and enabled. It means that Windows Defender is turned off. The process might run in the background, but it can’t use CPU or disk resources attempting to scan your PC.

What’s More?

Also, there is a method to use both your antivirus program. On this same display screen, just expand “Windows Defender Antivirus options” and turn on “Periodic scanning”. Windows Defender also performs daily background scans while you’re using another antivirus program. However, it provides a 2nd opinion and potentially catching things.

After you view see Windows Defender using CPU while you have another antivirus tool installed. And you really want to install it. Then move here and make sure that the Periodic scanning feature is set to “Off”. If it can’t bother you, feel free to turn on Periodic scanning. Well, it’s another layer of security and additional security. By default, this feature is off.

Is It a Virus Or Anything Else?

We can’t view any reports of viruses pretending to copy the Antimalware Service Executable process. Windows Defender is itself an antivirus, so it can stop any malware attempting to do this in its tracks. Whenever you’re using Windows and have Windows Defender turned on, it’s normal for it to be executing.


Here’s all about “Antimalware Service Executable ”. Is this article helpful? If you want to share any other method or tips regarding the article then let us know below. For further queries and questions let us know in the comment section below!

Also Read:

Leave a Reply