Link to home
Start Free TrialLog in
Avatar of raymm
raymmFlag for Canada

asked on

MsMpEng.exe-what is it? How to prevent it from loading?

MsMpEng.exe-what is it?  How to prevent it from loading?
I end it using Task Manager, it pops right back up.
Avatar of Silly_Burrito
Silly_Burrito

Sounds like you may have some version of spyware.

Do a full scan with Ewido, then Ad-Aware, then Spybot, and finish it off with Microsoft Anti-Spyware.

Also, use Mike Lin's startup control panel (www.mlin.net) to make sure that it's not loading at bootup.

Finally, have you tried to end the process tree in Task Manager?
Whoops...spoke too soon. It looks like that is part of the new Microsoft Anti-Spyware (http://www.spyany.com/files/MsMpEng_exe.html)

From the site:

MsMpEng.exe is the Windows Defender Auto-Protect Service that is the core engine of Windows Defender, which is originally Microsoft AntiSpyware software. At the time of writing, Windows Defender is still in beta 2 phase, so do not be too surprised when you encounter a few errors.

So if you're trying to get rid of it, you may want to uninstall Windows Defender, and try Mike's control panel program if you really don't want it.
Yes, suspect that you have a virus or malware. Suggest you download and run HijackThis.

Create a folder where you would like the HijackThis file to reside, and run it from there, not from the Desktop or a temp folder. It is important that you download this file to its own folder as this folder will be used when HijackThis makes backups. Temp folders get deleted, taking with them HJT's 'backups' of items that were 'fixed'.

Run Hijackthis scan, save the log file, then copy and paste the logfile to the site below and select 'analyze'.  
http://www.hijackthis.de/
Wait a minute or so for the analysis, then scroll to the bottom of that page and you'll see "save analysis".  Click it, and the address we are after is in your top Address bar.  If you wish us to view it, copy and post that address here, *not* the log.   Thanks.
Avatar of jkr
Well, it is part of "Windows Defender":

"MsMpEng.exe is the Windows Defender Auto-Protect Service that is the core engine of Windows Defender, which is originally Microsoft AntiSpyware software. At the time of writing, Windows Defender is still in beta 2 phase, so do not be too surprised when you encounter a few errors."
Yes, i too may have fallen for that one >> MsMpEng.exe.     Will investigate some more.
ASKER CERTIFIED SOLUTION
Avatar of Merete
Merete
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
As other users have said it IS Windows Defender, I found this other solution on the web which allows you to keep using defender and stops this high processor usage.

Run Windows Defender from the start menu. Click on Tools then Options. Scroll down to Advanced Options. Where is says "Do not scan these files or locations" click on the Add button. Browse to the folder where Windows Defender is installed (c:\program files\windows defender) and click OK. The path c:\program files\windows defender should now be shown in the field. Click on the Save button. Thats it.
Since the link to the app above was removed... maybe this solution is as good as any:

summarized from:
http://helpdeskgeek.com/windows-vista-tips/what-is-msmpeng-exe/

Exclude directory for scanning
Apparently, the service scans its self and therefore eats up all the CPU. Open Windows Defender, click on Tools and then Options. Now scroll down to the Advanced Options section:
Now click on the add button under the Do not scan these files or locations section. Now type in the path for the Windows Defender directory:

c:\program files\windows defender

Click OK and now make sure to click the Save button.

---OR---

Turn off Windows Defender
To turn off Windows Defender, open the program and click on Options. Now go to Administrator options and uncheck the Use Windows Defender box. Make sure to click Save.