How to stop Antimalware Service Executable in Windows 10

• The Antimalware Service Executable is a Windows Defender process from Windows 10.
• Many independent tests confirmed Windows Defender is one of the best antivirus tools for PC, so you can fully rely on it.
• If the Antimalware Service Executable uses too many resources, you can stop it using the Registry Editor.
• You can also stop this process by using a command-line tool as shown in our guide below.

1. Download Restoro PC Repair Tool that comes with Patented Technologies (patent available here).
2. Click Start Scan to find Windows issues that could be causing PC problems.
3. Click Repair All to fix issues affecting your computer’s security and performance

• Restoro has been downloaded by 0 readers this month.

Microsoft Antimalware is an antivirus software that protects your system against malware attacks.

This tool uses the same virus definitions and scanning engine as other Microsoft antivirus products, constantly monitoring activities on your computer.

Microsoft Antimalware installs a series of files on your system aimed at protecting your computer against threats.

Sometimes, the tool has a negative impact on users’ system performance, which determines them to uninstall it.

However, they soon realize this is not an easy task, because there always seems to remain a hidden file running in the background.

The Antimalware Service Executable, MsMpEng.exe runs even after users removed Microsoft’s AV tools, oftentimes leading to a high CPU usage.

I don’t want an antimalware. […] So far I tried turning off Windows Defender, but the process is still running. My last resort would be deleting MsMpEng.exe from C:Program FilesWindows Defender.

If I try to end it from Task Manager, it says “The operation could not be completed… Access is denied”. I really do not want it running and I feel that it is slowing down my computer. How can I turn it off?

Antimalware Service Executable is associated with Windows Defender, and many Windows 10 users reported issues with this process. Speaking of issues, these are some common problems that users reported:

• Disable Antimalware Service Executable – There are several ways to disable Antimalware Service Executable on your Windows 10 PC, and in this article, we’ll show you three different methods of how to do that.
• Antimalware Service Executable causes high memory and memory leak – Many users reported memory issues due to this service. In order to fix the problem, it’s advised to disable Windows Defender and check if that solves the issue.
• Antimalware Service Executable high disk usage – Several users reported high CPU and disk usage due to this error. However, you can fix the issue simply by installing a third-party antivirus.
• Antimalware Service Executable issues on Windows 8.1, Windows 7 – Problem with this process can affect both Windows 8.1 and 7, but even if you’re not using Windows 10, you should be able to fix the problem with one of our solutions.
• Antimalware Service Executable running all the time, slowing down computer – Many users reported that this service keeps running all the time on their PC. However, you should be able to fix that using one of our solutions.
• Antimalware Service Executable can’t end task – If you can’t end this task on your PC, you’ll have to disable or delete Windows Defender from your PC to solve the problem.

How can I kill the Antimalware Service Executable?

1. Disable Windows Defender

1.1 Disable Windows Defender from the Registry Editor

1. Press Windows Key + R, type regedit in the search box, and hit Enter to launch the Registry Editor.
   
2. HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Microsoft/Windows Defender
3. Right-click on Windows Defender, select New, and select DWORD.
   
4. Double click the newly created DWORD, name it DisableAntiSpyware, and set the value to 1.

If you can’t access the Registry Editor, check out this guide and solve the issue quickly.

If you’re not too fond of Registry Editor, you can also disable Windows Defender by using Command Prompt. By using Command Prompt, you can change your registry with just a single line of code.

1.2 Disable Windows Defender using Command Prompt

1. Search for cmd in Windows search and click on Run as administrator to start Command Prompt with full privileges.
2. When Command Prompt opens, run the following command and press Enter: REG ADD «hklm\software\policies\microsoft\windows defender» /v DisableAntiSpyware /t REG_DWORD /d 1 /f
   

After running this command, your registry will be modified and Windows Defender will be disabled.

Run a System Scan to discover potential errors

Using the command line to disable Windows Defender is a faster method, and if you’re an advanced user, you might want to try it out.

2. Use Group Policy Editor

1. Press Windows Key + R and enter gpedit.msc. Now press Enter or click OK. This will start Group Policy Editor.
2. In the left pane, navigate to Computer Configuration/Administrative Templates/Windows Components/Windows Defender Antivirus/Real-time Protection
3. In the right pane, double click on Turn off real-time protection .
4. Select Enabled and click on Apply and OK to save the changes.
   

After doing that, Windows Defender will be disabled as well as Antimalware Service Executable.

It’s also worth mentioning that this solution will disable antivirus protection on your PC, so your PC will be vulnerable.

In order to protect your PC, you should use this method only as a temporary solution.

3. Install a third-party antivirus to replace Msmpeng.exe antimalware service executable

Antimalware Service Executable is a process closely related to Windows Defender.

However, Windows Defender won’t run side by side with a third-party antivirus, so if you’re having problems with Antimalware Service Executable, you might want to install a third-party antivirus.

There are many great antivirus tools available on the market, but the best solution is to choose a good antivirus with least impact on resources.

Bullguard is probably the best low resource Antivirus. Choosing this antivirus you will reduce CPU load and help your system achieve its highest performance.

Bullguard utilizes cloud processing to protect PC thereby removing the need for heavy software updates and demanding scans. Here are its most important features:

• Real-time antivirus protection
• Ransomware attack prevention
• Safe online shopping and banking
• Blocking of dangerous websites
• VPN for private, anonymous Internet access

Bullguard

After you install a third-party antivirus, Windows Defender will automatically turn itself off and your problem should be resolved.

Editor’s Note: This article continues on the next page with more methods to help you disable the Antimalware Service Executable. If you want to read more about the best antivirus solutions for Windows 10, check out our collection of guides.

Submit a file for malware analysis

Microsoft security researchers analyze suspicious files to determine if they are threats, unwanted applications, or normal files. Submit files you think are malware or files that you believe have been incorrectly classified as malware. For more information, read the submission guidelines.

You are signed in with a account, however you have chosen to submit as a . Choose a different option or sign in with a account

Submit file as a

Customers using Microsoft security products at home or in small organizations

Corporate account holders with licenses to run Microsoft security solutions in their businesses

Software providers wanting to validate detection of their products

Microsoft Defender Response Portal

This portal is for internal use by Microsoft employees to report detection concerns to Microsoft Defender Research

Submit a file internally

Submit files so our analysts can check them for malicious characteristics. Provide the specific files that need to be analyzed and as much background information as possible.

Escalate to WD Response

WD Response serves as the primary contact point to our malware analysts. Submit your files through regular channels before contacting WD Response for special requests or submission follow-ups.

Attack Surface Reduction

Report issues with undetected suspicious activities or activities that have been incorrectly detected (false positives).

Network Protection

Report issues with the detection and blocking of URLs and IP addresses.

View your submissions

Track the results of your submissions. You can view detailed detection information of all the files you have submitted as well as the determination provided by our analysts.

Search file hash

Enter a file hash Sha1, Sha256 or Md5 format to view the file details including scan results.

Enter a valid SHA 1/256 or MD5

File with the entered Hash was not found

Submit a file for malware analysis

Specify the file and provide information that will help us to efficiently handle your case.
Required fields are marked with an asterisk (*).

Specify valid email addresses, separating each with a semicolon

Grant other members of your organization access to submission details

Select a Microsoft security product

Specify the company name

Specify affected organization

Specify a valid customer email address

Select the number of affected devices

Specify a valid Software Assurance ID

Specify a valid admin email address for SAID

SAID validated. Make high priority submissions only when dealing with active malware or incorrect detections that require immediate attention

Invalid SAID. The specified SAID could not be validated. All submissions are given regular priority

Problems validating SAID. Could not connect to the validation service. Please try again later

Use this option only during emergencies to address active malware

Select the file to submit

The selected file is too large ( )

The selected file is empty

Select a date between 30 days and 5 years from now

Specify a detection name

Specify additional information

Review your submission

Was this file found in the Microsoft corporate network?

Customer email address

Number of affected devices

Software Assurance ID

What do you believe this file is?

Unable to upload the file

Submission details will be retained for up to 30 days. For privacy information, read the Microsoft Privacy Statement.

Sign in to track your submissions

Use your Microsoft account to track the results of your submissions. You will also be able to link submissions to existing support cases, view past submissions, and rescan files.

By clicking “Accept” below, you consent to the following terms:

Any data provided by or on behalf of you to the Microsoft Security Intelligence submission portal (“MSI”) will be treated as set forth in the OST (as defined below) and this consent. Your data will be transferred from other Microsoft services into MSI and from MSI back to applicable Microsoft services. Any data submitted to MSI will constitute Support Data (as defined in the Online Service Terms («OST»)). You acknowledge that such MSI commitments may differ from the services from which that data is transferred. Further, Microsoft will store your data in MSI within the United States only.