How to Turn Off Antimalware Service Executable in Windows 11: A Step-by-Step Guide

If your laptop fan is constantly running and your CPU usage is unusually high, chances are you’ve spotted something called Antimalware Service Executable in your Task Manager.

This background process is part of Windows Security (Defender) — Microsoft’s built-in antivirus protection. While it’s essential for keeping your system safe, it can sometimes consume a lot of CPU and memory, slowing down your computer.

In this guide, we’ll show you how to turn off Antimalware Service Executable in Windows 11 safely, without leaving your system unprotected. You’ll also learn what it does, why it uses so much power, and the best ways to manage it effectively.

What Is Antimalware Service Executable?

Antimalware Service Executable (process name: MsMpEng.exe) is the core background process of Windows Defender Antivirus.

It continuously runs in the background to:

• Scan files for viruses and malware

• Protect your PC in real-time

• Perform scheduled system scans

• Download and apply security updates

You can find it in:

---

2. Why Does Antimalware Service Executable Use So Much CPU?

There are a few common reasons for high CPU or memory usage:

• Real-time scanning: Constantly checks every file you open or download.

• Full scans: Automatically runs scheduled scans in the background.

• Large file operations: Scanning big folders or archives can spike CPU usage.

• System updates: When Defender updates definitions, it may temporarily use more resources.

💡 Tip: CPU usage often spikes temporarily during active scans — it’s normal and typically subsides after a few minutes.

---

3. Should You Turn It Off?

Here’s the honest answer:
👉 You should not permanently disable Antimalware Service Executable unless you have another reliable antivirus installed.

However, if you want to temporarily disable or limit its activity (for performance reasons, gaming, or testing), you can safely turn it off using one of the methods below.

---

4. Safety Warning Before Disabling It

Before you proceed:

⚠️ Warning: Turning off Windows Defender removes your real-time protection.
If you browse the internet or use USB drives, your system becomes more vulnerable to malware and phishing attacks.

✅ Recommended:

• Turn it off only temporarily.

• Keep another antivirus (like Bitdefender, Kaspersky, or Avast) installed for continuous protection.

• Re-enable it once you’re done.

---

5. Method 1: Turn Off Real-Time Protection in Windows Security

The simplest and safest way to stop Antimalware Service Executable temporarily.

Step-by-Step:

1. Press Win + I to open Settings.

2. Go to Privacy & Security → Windows Security → Virus & threat protection.

3. Click Manage settings under Virus & threat protection settings.

4. Turn Off the toggle for Real-time protection.

5. Optionally, turn off:

   • Cloud-delivered protection

   • Automatic sample submission

That’s it — the process will stop temporarily. Windows may re-enable it automatically after a restart for security.

---

6. Method 2: Disable Antimalware Service Executable via Group Policy Editor

This method permanently disables Windows Defender, suitable for advanced users or administrators.

Steps:

1. Press Win + R, type gpedit.msc, and hit Enter.

2. Navigate to:

   Computer Configuration → Administrative Templates → Windows Components → Microsoft Defender Antivirus


3. Double-click Turn off Microsoft Defender Antivirus.

4. Select Enabled → Click Apply → OK.

5. Restart your computer.

✅ Once done, Antimalware Service Executable will stop running in the background.

🧠 Note: This option is available only in Windows 11 Pro, Enterprise, and Education editions — not in Home.

---

7. Method 3: Disable Windows Defender Using the Registry Editor

If you’re using Windows 11 Home, you can disable it via the registry.

⚠️ Important:

Editing the registry incorrectly can cause system issues — follow the steps carefully or back up your registry first.

Steps:

1. Press Win + R, type regedit, and press Enter.

2. Navigate to:

   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender


3. Right-click in the right pane → New → DWORD (32-bit) Value.

4. Name it:

   DisableAntiSpyware


5. Double-click it → Set Value data to 1.

6. Click OK, then restart your PC.

Now, Defender (and Antimalware Service Executable) will be turned off.

💡 Tip: To re-enable it, delete the same DWORD or set its value back to 0.

---

8. Method 4: Exclude Windows Defender Folder from Scanning

This trick reduces high CPU usage without disabling Defender completely.

Steps:

1. Open Windows Security → Virus & threat protection → Manage settings.

2. Scroll down → click Add or remove exclusions.

3. Click Add an exclusion → Folder.

4. Browse to:

   C:\Program Files\Windows Defender


5. Select the folder → click Select Folder.

Now, Windows Defender won’t scan its own folder — lowering CPU load.

---

9. Method 5: Disable Scheduled Scans

Windows Defender automatically performs scheduled scans that can cause CPU spikes.

To disable scheduled tasks:

1. Press Win + S, type Task Scheduler, and open it.

2. Navigate to:

   Task Scheduler Library → Microsoft → Windows → Windows Defender


3. Disable the following tasks:

   • Windows Defender Scheduled Scan

   • Windows Defender Cache Maintenance

   • Windows Defender Verification

   • Windows Defender Cleanup

Right-click each → Disable.

---

10. Method 6: Use a Third-Party Antivirus (Auto-Disables Defender)

Installing a trusted third-party antivirus automatically turns off Windows Defender — and with it, the Antimalware Service Executable.

Recommended Options:

Once installed, Windows Security automatically disables real-time protection to prevent conflicts.

---

11. How to Check if Antimalware Service Executable Is Disabled

You can confirm by opening Task Manager:

1. Press Ctrl + Shift + Esc.

2. Click the Details tab.

3. Search for MsMpEng.exe.

If it’s missing from the list — it’s successfully disabled.

---

12. How to Re-enable Windows Defender (If Needed)

To restore Defender functionality:

Via Settings:

1. Go to Windows Security → Virus & threat protection → Manage settings.

2. Turn Real-time protection back ON.

Via Registry:

• Delete the DisableAntiSpyware entry (if created earlier).

• Reboot your system.

---

13. Common Errors and Fixes

---

14. Alternative Ways to Reduce CPU Usage Without Turning It Off

If you’d rather keep Defender active but reduce its impact:

✅ Try These Tips:

• Add large folders (like Games or Downloads) to Exclusions.

• Schedule scans when you’re not using the PC.

• Limit background apps via Settings → Apps → Startup.

• Disable cloud-delivered protection temporarily.

• Upgrade to SSD storage — speeds up scan performance.

⚙️ Pro Tip: Ensure your system isn’t running multiple antivirus programs simultaneously, as this doubles the scanning workload.

---

15. Frequently Asked Questions (FAQs)

Q1: Is it safe to turn off Antimalware Service Executable?
Yes, but only temporarily or if you install another antivirus. Keeping it off permanently exposes your system to threats.

Q2: Why does it keep re-enabling itself?
Windows automatically turns Defender back on after updates or restarts to maintain protection.

Q3: Can I remove the executable file manually?
No — deleting system files can break Windows Defender and cause stability issues.

Q4: How do I permanently disable it in Windows 11 Home?
Use the Registry Editor method (create DisableAntiSpyware key).

Q5: Does disabling it improve performance?
Yes — you’ll notice reduced CPU and memory usage, especially on low-end systems.

---

16. Summary & Key Takeaways

Let’s wrap up what we’ve learned.

✅ Key Takeaways:

• Antimalware Service Executable is part of Windows Defender — not malware.

• You can safely disable it using Settings, Group Policy, or Registry.

• Always back up your data and enable another antivirus if disabling Defender.

• To reduce performance issues, use exclusions or scheduled scans instead.

• Keep your system updated to maintain protection with minimal CPU usage.