Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.os.windows-10 > #181302

Re: Defender running slowly

Show all headers | View raw

On 13/01/2025 15:00, VanguardLH wrote:
> Jim the Geordie <jim@jimXscott.co.uk> wrote:
> 
>> On 13/01/2025 12:50, VanguardLH wrote:
>>> Jim the Geordie <jim@jimXscott.co.uk> wrote:
>>>
>>>> I have followed instruction (from several sources) to make the file
>>>> MsMpEng.exe as an exception for Defender, but it is still there after a
>>>> restart.
>>>> What am I doing wrong?
>>>> Windows 10
>>>> Brave browser.
>>>> Thunderbird.
>>>
>>> MsMpEng.exe *is* Windows Defender:
>>>     MS (Microsoft)
>>>     Mp (Malware Protection)
>>>     Eng (Engine)
>>>     
>>> An exception does not kill a process, but exclude it from getting
>>> scanned.
>>>
>>> Are you running some other/3rd-party anti-virus program?  If so, only
>>> ONE should be running at a time (as the on-demand aka realtime scanner),
>>> not multiple running at the same time.  If you want to use a 3rd-party
>>> AV, disable Windows Defender.  Be sure to use a 3rd-party AV that
>>> properly registers itself in Windows which will have Windows grant the
>>> 3rd-party AV as the antimalware protector.
>>>     
>>> The "instructions" came from where, specifically?  Just because you
>>> found something on the Web doesn't mandate it is valid, or applies in
>>> your situtation.
>>
>> That's fine.
>> My PC seems to be faster/less 'laggy'.
>> The instructions came from Microsoft (among others, but they were all
>> the same)
>> I am not running any other AV program.
> 
> If you add msmpeng.exe as an exception to the scans by Windows Defender,
> you leave your setup vulnerable if the file becomes compromised, but you
> told Defender not to scan itself.  The expection is that Defender will
> defends its own core files, but I wasn't aware that Defender would scan
> its own core files in scans, but instead defend itself at all times, not
> just during scans.
> 
> If you are going to exclude msmpeng.exe from scans, you might as well as
> exclude its entire folder (C:\Program Files\Windows Defender).
> 
> Are you seeing high CPU usage for long periods which are eliminated by
> excluding msmpeng.exe (the scanner) from Defender's own scans?  There
> are high CPU moments when Defender scans itself, but the on-access
> (real-time) scanner should only be scanning changed files (changed or
> new), not every file all the time.  If there are lots of file changes,
> like thousands (either in file count, or rewrites to the same file) then
> Defender will be busy rescanning those files.  Possibly on ancient
> hardware the msmpeng.exe process may remain high.  If hardware upgrading
> (CPU, memory) is not an option, you might want to switch off Defender to
> go with a 3rd-party AV; however, most will also get busy when there are
> lots of file changes as they, too, have to scan the changed files.
> 
> If you scheduled the on-demand scanner, you might want to move that
> schedule to a time when you are not using the computer.  However,
> on-demand scans won't find anything the on-access/realtime scanner did
> not find.  Only if you disabled the on-access scanner, installed new
> files during which the scanner was disabled, and then reenabled the
> scanner then the scanner won't see the changed files, so an on-demand
> scan later will look at those files added while the on-access scanner
> was quiesced.

Starting at the beginning:
My pc was running sluggishly, so I installed Process Explorer to see if 
I could spot where it was happening.
The three most active processes seem to be My email (Thunderbird), My 
browser (Brave) and MsMpEng.exe (not necessarily in that order at all times)
As I said, I excluded MsMpEng.exe and my pc seems to be running more 
smoothly. However, the MsMpEng.exe process is still showing the same 
kind of numbers as before.
Perhaps I should quit while I'm ahead?

-- 
Jim the Geordie

Back to alt.comp.os.windows-10 | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Defender running slowly Jim the Geordie <jim@jimXscott.co.uk> - 2025-01-13 09:43 +0000
  Re: Defender running slowly VanguardLH <V@nguard.LH> - 2025-01-13 06:50 -0600
    Re: Defender running slowly Jim the Geordie <jim@jimXscott.co.uk> - 2025-01-13 13:11 +0000
      Re: Defender running slowly VanguardLH <V@nguard.LH> - 2025-01-13 09:00 -0600
        Re: Defender running slowly Jim the Geordie <jim@jimXscott.co.uk> - 2025-01-13 15:23 +0000
        Re: Defender running slowly Paul <nospam@needed.invalid> - 2025-01-13 11:05 -0500
          Re: Defender running slowly Zaidy036 <Zaidy036@air.isp.spam> - 2025-01-13 13:51 -0500
          Re: Defender running slowly VanguardLH <V@nguard.LH> - 2025-01-13 15:37 -0600

csiph-web