How to Disable the Antimalware Service Executable on Windows 11/10?

Disable Antimalware Service Executables

Is your computer running slower than before? Even after trying “n” number of different things, such as closing background tasks, clearing up the RAM, or running system diagnostics, do you still have a high CPU usage?

If something similar or the exact thing is happening with your PC, then let me tell you, “You are not the only one!” Numerous individuals encounter this problem, and just like you, they are also unable to figure out the real cause of it.

But fret not! Because, as, usual, we are here with the solution. All that you need to do is turn off the – “antimalware service executable.” But remember, turning this service off can leave your computer vulnerable to malware attacks; hence, proceed with caution

Before diving deeper, it would be better to be aware of what the antimalware service executable is exactly.

What is Antimalware Service Executable?

Antimalware service executable, a.k.a. msmpeng.exe, is an integral component of Microsoft’s Windows Defender antivirus service. It’s fundamental role is to “detect” & “handle” malicious code that can jeopardize the system’s security.

But sometimes, despite being an integral component and having a paramount role, it leads to excessive CPU usage, which in turn can slow down your computer or cause other programs to run slowly.

Recommended: What is msmpeng.exe Antimalware Service Executable? How to Stop its Excessive CPU Usage?

Apart from this, overheating can also happen, ultimately damaging the hardware.

How to Disable Antimalware Service Executable on Windows 11/10?

You can try the methods below to turn off or disable the – Antimalware Service Executable on Windows 11/10.

Method 1:- End the Process Using Task Manager

Method 2:- Turn Off Real Time Protection

Method 3:- Turn Off Periodic scanning

Method 4:- Disable Windows Defender via Registry

Method 5:- Reschedule Windows Defender Scheduled Scan

Method 6:- Add Program to Exclusion List

Let’s explore each method in depth. 

Method 1: Terminate the Process Using Task Manager

Task Manager offers a straightforward approach to temporarily disable Antimalware Service Executable in Windows 11/10. Follow the steps mentioned below to terminate or end the process by utilizing Task Manager:

  • Click Search, placed on the taskbar. 
  • Type Task Manager and press Enter
  • The Task Manager window will open. 
  • In the Task Manager window, under the Process section, click Antimalware Service Executable.
  • At the top, click End task

Note: After you restart the PC, the Antimalware Service Executable will get activated again. 

Method 2: Turn Off Real Time Protection

Real-time protection continuously scans files in the background, ensuring immediate threat detection. Temporarily turning off this feature can help alleviate CPU usage caused by Windows Defender.

Follow the steps mentioned below to turn off real time protection:

  • Click Search, placed on the taskbar. 
  • Type Windows Security and press Enter
  • The Windows Security window will open. 
  • In the Windows Security window, in the left pane, click Virus & threat protection, if applicable. 
  • In the right pane, under the Virus & threat protection settings section, click Manage settings
  • In the right pane, click the toggle button placed under the Real-time protection section to Off
  • The User Account Control dialog box will appear.
  • In the User Account Control dialog box, click Yes

Follow the steps mentioned below to turn off real time protection using Local Group Policy Editor:

  • Click Search, placed on the taskbar. 
  • Type RUN and press Enter
  • The Run dialig box will appear.
  • In the Run dialog box, in the Open field, type gpedit.msc, and click OK.
  • The Local Group Policy Editor window will appear. 
  • In the Local Group Policy Editor, navigate to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus > Real-time Protection.
  • In the left pane, double-click Real-time Protection.
  • The Turn off real-time protection window will appear. 
  • In the Turn off real-time protection window, click the radio button in front of the Enabled option. 
  • Click OK

Method 3: Turn Off Periodic Scanning

The periodic scanning feature of Windows Defender is another feature that can cause the Antimalware Service Executable to run. Hence, you should turn it off.

But deactivating it can make your PC susceptible to – malware and other threats. Hence, this method should only be performed if another antivirus program is installed on the PC to shield it from threats. 

Follow the steps mentioned below to turn off the periodic scanning feature:

  • Click Search, placed on the taskbar. 
  • Type Windows Security and press Enter
  • The Windows Security window will open. 
  • In the Windows Security window, in the left pane, click Virus & threat protection, if applicable. 
  • In the right pane, under the Virus & threat protection, click Microsoft Defender Antivirus options
  • Click the Periodic scanning toggle button to Off.

Method 4: Disable Windows Defender via Registry

You can disable Windows Defender entirely using the Registry. But doing so can be – risky. If it is not done correctly or if a mistake is made while editing it, “n” number of severe problems can occur in your PC or system, such as system instability, performance issues, unexpected errors, etc. Hence, perform it carefully.

Follow the steps mentioned below to disable Windows Defender via Registry:

  • Click Search, placed on the taskbar. 
  • Type RUN and press Enter
  • The Run dialig box will appear.
  • In the Run dialog box, in the Open field, type regedit, and click OK.
  • The Registry Editor window will appear. 
  • In the Registry Editor window, in the left pane, expand HKEY_LOCAL_MACHINE.
  • Expand SOFTWARE.
  • Expand Policies.
  • Expand Microsoft.
  • Expand Windows Defender.
  • Double-click DisableAntiSpyware. 
  • Type Value data as 1
  • Click OK

Method 5: Reschedule Windows Defender Scheduled Scan

You can reschedule the Windows Defender scheduled scan to a more convenient time. Doing so will reduce the frequency of the – Antimalware Service Executable running, but it may not completely solve the problem.

Follow the steps mentioned below to reschedule Windows Defender Scheduled Scan:

  • Click Search, placed on the taskbar. 
  • Type Task Scheduler and press Enter
  • The Task Scheduler window will appear. 
  • In the Task Scheduler window, in the left pane, expand Task Scheduler Library. 
  • Expand Microsoft
  • Expand Windows
  • Expand Windows Defender.
  • Click Windows Defender Scheduled Scan.
  • In the right pane, click Properties
  • The Windows Defender Scheduled Scan Properties window will appear. 
  • In the Windows Defender Scheduled Scan Properties window, under the security section, uncheck the checkbox placed adjacent to the Run with highest privileges.
  • Click Conditions.
  • Uncheck the checkboxes placed under the IdlePower, and Network.
  • Click OK.
  • Choose the option base – as per your liking. 
  • Click OK

Method 6: Add Program to Exclusion List 

Adding a program or file to the exclusion list means that Windows Defender will – “not scan it.” 

Follow the steps mentioned below to add the program to the exclusion list:

  • Click Search, placed on the taskbar. 
  • Type Settings and press Enter
  • The Settings window will appear. 
  • Click Update & Security. 
  • In the left pane, click Windows Defender.
  • Under the Exclusions section, click the Add an exclusion link.
  • Scroll down, under Processes, and click Exclude a .exe, .com or .scr process.
  • The Add exclusion window will appear. 
  • In the Add exclusion window, in the Enter a new exclusion name field type MsMpEng.exe.
  • Click OK
Windows Security CTA

Janki Mehta

Janki Mehta is a Cyber-Security Enthusiast who constantly updates herself with new advancements in the Web/Cyber Security niche. Along with theoretical knowledge, she also implements her practical expertise in day-to-day tasks and helps others to protect themselves from threats.