How to Turn Off Antimalware Service Executable in Windows 11: A Step-by-Step Guide

By / October 10, 2025

If you’ve noticed high CPU usage, memory spikes, or slow performance on your Windows 11 PC, the Antimalware Service Executable (MsMpEng.exe) might be the culprit. This background process is part of Windows Defender, responsible for scanning your system for malware in real-time. While it’s essential for security, it can sometimes consume excessive resources.

In this guide, we’ll show you how to safely turn off or limit the Antimalware Service Executable in Windows 11 without compromising your system’s security entirely.

📘 Quick Overview

Method Description Best For
Windows Security Settings Temporarily disable real-time protection Quick solution for testing apps
Group Policy Editor Permanently disable Windows Defender Advanced users (Pro/Enterprise)
Registry Editor Disable Defender via registry tweak For advanced tweaking
Exclusions in Windows Defender Prevent high CPU usage on certain files Safe performance improvement
Scheduled Scans Adjustment Reduce background scanning impact Low resource impact

⚡ Important: Turning off Windows Defender permanently exposes your PC to malware. Consider using a trusted third-party antivirus if disabling Defender.

What Is Antimalware Service Executable (MsMpEng.exe)?

  • MsMpEng.exe is the process behind Windows Defender Antivirus.

  • It runs in the background to scan files, processes, and apps for malware.

  • Windows uses it to protect your PC automatically, even if you don’t open the Windows Security app.

Why It Consumes High CPU

  • Running real-time scans during updates or installations.

  • Scanning large files or external drives.

  • Conflicts with third-party antivirus software.

Method 1: Temporarily Turn Off Real-Time Protection

This is the safest and easiest method to stop MsMpEng.exe temporarily.

Steps:

  1. Press Windows + I → open Settings.

  2. Navigate to Privacy & Security → Windows Security → Virus & threat protection.

  3. Under Virus & threat protection settings, click Manage settings.

  4. Toggle Real-time protection Off.

✅ Result: Antimalware Service Executable stops scanning temporarily. It will turn back on automatically after a short time or system restart.

💡 Tip: Use this method when installing large files or running resource-heavy apps.

Method 2: Add Exclusions in Windows Defender

Instead of disabling Defender completely, you can exclude specific files, folders, or processes to reduce CPU usage.

Steps:

  1. Open Settings → Privacy & Security → Windows Security → Virus & threat protection → Manage settings → Add or remove exclusions.

  2. Click Add an exclusion → select File, Folder, File type, or Process.

  3. Browse to the file or folder that triggers high CPU → click Open.

✅ Result: Windows Defender skips scanning these files, reducing resource usage without compromising security on the rest of your system.

⚙️ Pro Tip: Exclude game folders, video editing files, or large projects that you know are safe.

Method 3: Disable Antimalware Service Executable via Group Policy (Pro/Enterprise)

If you are using Windows 11 Pro or Enterprise, you can disable Defender permanently using Group Policy Editor.

Steps:

  1. Press Windows + R, type:

    gpedit.msc

    and press Enter.

  2. Navigate to:

    Computer Configuration → Administrative Templates → Windows Components → Microsoft Defender Antivirus

  3. Double-click Turn off Microsoft Defender Antivirus.

  4. Select Enabled → click Apply and OK.

  5. Restart your PC.

✅ Result: Defender and the Antimalware Service Executable will no longer run.

⚠️ Warning: Disabling Defender permanently makes your system vulnerable. Ensure you have another antivirus installed.

Method 4: Disable Windows Defender via Registry Editor (Home Edition)

Windows 11 Home doesn’t include Group Policy, but you can edit the registry.

Steps:

  1. Press Windows + R, type regedit, press Enter.

  2. Navigate to:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

  3. If the key DisableAntiSpyware doesn’t exist, create a DWORD (32-bit) Value named DisableAntiSpyware.

  4. Set its value to 1.

  5. Restart your PC.

✅ Result: Defender is disabled and MsMpEng.exe will stop running.

⚠️ Caution: Incorrect registry edits can cause system instability. Always backup your registry first.

Method 5: Schedule Windows Defender Scans for Low-Usage Times

Instead of turning off MsMpEng.exe, you can reduce its impact by scheduling scans when you’re not actively using your PC.

Steps:

  1. Press Windows + S → search Task Scheduler → open it.

  2. Navigate to:

    Task Scheduler Library → Microsoft → Windows → Windows Defender

  3. Right-click Windows Defender Scheduled Scan → Properties → Triggers → New.

  4. Set a time when PC is idle, e.g., night hours → click OK.

✅ Result: Background scans will run only during low-usage times, keeping CPU usage low.

Method 6: Limit CPU Usage via Registry

You can limit CPU usage for MsMpEng.exe during scans.

Steps:

  1. Press Windows + R, type regedit, press Enter.

  2. Navigate to:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan

  3. Create a DWORD (32-bit) Value named AvgCPULoadFactor.

  4. Set the value to percentage of CPU usage (e.g., 50 for 50%).

  5. Restart your PC.

✅ Result: Defender will scan using limited CPU, reducing system lag.

Troubleshooting: Antimalware Service Executable Issues

Problem Possible Cause Solution
High CPU usage Real-time scanning Turn off real-time protection temporarily
MsMpEng.exe keeps running Background scans Add exclusions or schedule scans
Unable to disable via Settings Windows Home edition Use Registry Editor method
System slow even after disabling Another antivirus conflict Uninstall other antivirus software

Tips for Safe Performance

  • ⚡ Don’t disable Defender permanently unless you have another antivirus installed.

  • 🧹 Add safe folders as exclusions instead of turning off real-time protection.

  • 🔄 Schedule scans for idle times to maintain performance.

  • 🖥️ Keep Windows and Defender updated for optimal protection.

Frequently Asked Questions (FAQs)

1. Is it safe to turn off Antimalware Service Executable?

Only if you have another trusted antivirus installed. Otherwise, your PC will be vulnerable to malware.

2. Will disabling Defender stop Windows updates?

No, Windows updates will continue, but security patches might be less effective without Defender.

3. How do I reduce high CPU usage without turning off Defender?

Add exclusions, schedule scans during idle hours, or limit CPU usage via the registry.

4. Can I temporarily turn off MsMpEng.exe for gaming?

Yes, turning off real-time protection temporarily is safe for gaming sessions.

5. Does turning off Antimalware Service Executable improve performance?

It can reduce CPU and memory usage temporarily, but security risk increases.

Conclusion: Control Antimalware Service Executable in Windows 11 Safely

The Antimalware Service Executable is essential for keeping Windows 11 secure but can sometimes slow down your system.

With the steps in this guide, you can:

  • ✅ Temporarily disable real-time protection

  • ✅ Add exclusions to reduce CPU usage

  • ✅ Schedule scans for idle times

  • ✅ Permanently disable Defender (Pro/Registry methods) if needed

By using these methods wisely, you can improve system performance while maintaining security.

Related Posts:

Scroll to Top