{"id":4437,"date":"2020-01-24T03:42:58","date_gmt":"2020-01-24T03:42:58","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=4437"},"modified":"2020-01-24T03:42:58","modified_gmt":"2020-01-24T03:42:58","slug":"antimalware-service-executable-windows-defender-disable-processservice","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/random\/antimalware-service-executable-windows-defender-disable-processservice","title":{"rendered":"Antimalware Service Executable ( Windows Defender ) &#8211; Disable Process\\Service"},"content":{"rendered":"<div>\u00a0&#8221; Antimalware Service Executable &#8221; was using 250MB ran and 20% CPU even though we had deployed the Reg Key to disable realtime scanning e.g. below<\/div><div>\u00a0<\/div><div><p id=\"zyyLvMu\"><img loading=\"lazy\" decoding=\"async\" width=\"538\" height=\"295\" class=\"alignnone size-full wp-image-4439  img-responsive\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a674432eae.png\" alt=\"\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a674432eae.png 538w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a674432eae-300x164.png 300w\" sizes=\"auto, (max-width: 538px) 100vw, 538px\" \/><\/p><\/div><div>\u00a0<\/div><div>Looks like the App has a party anyway with these scheduled Tasks<\/div><div><p id=\"LyEtxIv\"><img loading=\"lazy\" decoding=\"async\" width=\"965\" height=\"289\" class=\"alignnone size-full wp-image-4438  img-responsive\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a673c298ab.png\" alt=\"\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a673c298ab.png 965w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a673c298ab-300x90.png 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a673c298ab-768x230.png 768w\" sizes=\"auto, (max-width: 965px) 100vw, 965px\" \/><\/p><\/div><div>\u00a0<\/div><div>\u00a0<\/div><div>\u00a0<\/div><div>How to Disable Windows Defender properly<\/div><div>\u00a0<\/div><div>You can&#8217;t disable these Services , you have to do via Registry<\/div><div>\u00a0<\/div><div><p id=\"FDDccRF\"><img loading=\"lazy\" decoding=\"async\" width=\"1041\" height=\"108\" class=\"alignnone size-full wp-image-4440  img-responsive\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a67502efcb.png\" alt=\"\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a67502efcb.png 1041w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a67502efcb-300x31.png 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a67502efcb-1024x106.png 1024w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2020\/01\/img_5e2a67502efcb-768x80.png 768w\" sizes=\"auto, (max-width: 1041px) 100vw, 1041px\" \/><\/p><\/div><div><div>\u00a0<\/div><div>Boot machine into Safe Mode<\/div><div>\u00a0<\/div><div>Change Reg Key Below<\/div><div>\u00a0<\/div><div>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\WinDefend\\Start = Dword 4<\/div><div>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\WdNisSvc\\Start = Dword 4<\/div><div>\u00a0<\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>\u00a0&#8221; Antimalware Service Executable &#8221; was using 250MB ran and 20% CPU even though we had deployed the Reg Key to disable realtime scanning e.g. below\u00a0\u00a0Looks like [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[3148,2003,891,3149,3150,15,3151],"class_list":["post-4437","post","type-post","status-publish","format-standard","hentry","category-random","tag-antimalware-service-executable","tag-disable","tag-high-cpu","tag-memory","tag-msmpeng-exe","tag-windows-defender","tag-windows-defender-antivirus-service"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/4437","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=4437"}],"version-history":[{"count":1,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/4437\/revisions"}],"predecessor-version":[{"id":4441,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/4437\/revisions\/4441"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=4437"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=4437"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=4437"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}