Windows 10: What are the chances of Defender excluding msmpeng.exe automatically.

msmpeng.exe was added to exclusion by Defender and no one manually initiated it.What are possible reasons for something like that and what are the possible threats involved.

:)

 

Programs Slow To Open Due To Windows Defender (MsMpEng)


This is something that I've noticed since Windows 8, but Windows Defender make some programs so slow to open. It's pretty noticeable on the programs that it does it on as it takes approx. 20-30 seconds to open them, even from an SSD, and if you look at Resource Monitor listed by CPU usage, you can see it's due to MsMpEng.exe running a scan before the program will open.

It would be understandable if it was doing it the first time the program had ever ran, or if the program wasn't signed, but that's not always the case. Canon DPP for example isn't signed, so presumably that's why Defender keeps scanning that, however here's an example of another program (SyncBackFree) that is signed, but yet Windows Defender still wants to keep scanning it on a daily basis despite nothing changing since previous scans.





Obviously I can add individual programs to the Windows Defender Exclusion list and exclude them from real-time protection, but what it is that Defender doesn't like with certain programs that is feels the need to keep scanning them daily? Is this a Microsoft problem, or is it down to the software not adhering to some sort of best practice policies Microsoft have laid out? There must me something that makes Defender treat it as potentially signed malware?

 

Microsoft Smart Screen and Windows Defender blocking ScanUtilities to install and RUN

Often during install it will download any updates automatically,

It may also be that the defender & other av have received updates to their software which is now detecting this software as a problem, you can add the installer’s exe to the exclusion list by finding it under quarantine & choosing to exclude it.

You can also try the original suggestion with the program’s installer in case that is blocked.

 

Windows Defender automatically disabled

Hi Ahmad,

Thank you for responding.

I suggest you to place the computer in safe mode and check if the Windows Defender works.

Method 1:

Step 1: Start computer in safe mode.

• 
  Type Settings in the search box on the desktop, select
  Settings.
  
• 
  Here select Change pc settings and then
  General.
  
• 
  Scroll down to Advanced startup, click
  Restart now.
  
• 
  Click on Troubleshoot, Advanced options, and Startup Settings.
  
• 
  Click Restart, select
  Safe mode and then press Enter.
  

Step 2: Try to
run the Windows Defender in safe mode.

Steps:

• Press Windows key and type Windows Defender.
• Right click on it and select Run as Administrator.
• It may prompts you to enter the password.

Method 2: If the issue still persists, place the computer in normal mode and check for the Windows Defender services.

Step 1: Place the computer in normal mode.

• Press Windows + R keys to open
  Run command.
• Type msconfig and press
  Enter.
• In the System Configuration
  window, click on General tab.
• Select Start-up selection as Normal startup, click on Apply and Ok.
• Follow onscreen instructions.

Step 2: Once you are in normal mode, I suggest you to check for the
Windows Defender services.

• Press Windows + R keys to open
  Run command.
• Type services.msc and press
  Enter.
• Search for Windows Defender, right click on it and
  start the service.
• Also, set the Startup type to
  Automatic.
• Do the same for Windows Defender Network Inspection Service.
• Now check if you are able to access Windows Defender.

Hope it helps. Kindly update the status of this issue, we will be happy to help you.