If Windows Defender is "off" should MsMpEng even be running?

0

Note: system is Windows 7

Lately my computer's been grinding to a halt for a couple minutes at a time throughout the day for no apparent reason and with no obvious pattern. All I could see in the Task Manager is that CPU usage spiked, though it didn't seem to be caused by anything visible in the process list.

Eventually, in Resource Monitor I found MsMpEng.exe (not visible in TM, at least not with that name), which is evidently a core process for Windows Defender, also doing an enormous amount of grinding on the disk among other things right when one of these was happening. So that's the current suspect. I'm waiting for another one to confirm/deny.

Besides that, though:
When I went to check if there were any settings I could tweak, it turns out that Windows Defender is "turned off" (that's what the dialog says). So should this process even be running in the first place?

The dialog also has a link to turn the program on that presumably should go to some options or something, but that just spins the activity cursor forever, and I still haven't found how to access/uninstall it otherwise, so it's possible the entire thing is just kind of broken at the moment. (It doesn't show up in the dialog to toggle Windows features, for example.)

Su'

Posted 2017-01-17T13:10:23.433

Reputation: 333

If it’s not visible in Task Manager, Task Manager is probably not running as Admin, e.g. via the “Show process from all users” button. – Daniel B – 2017-01-17T13:17:42.807

Answers

1

If Windows Defender is “off” should MsMpEng even be running?

Only and only if you have Microsoft Security Essentials or System Center Endpoint Protection installed.

Otherwise, no.

user477799

Posted 2017-01-17T13:10:23.433

Reputation:

Yeah, Security Essentials is installed, so that makes sense. A lot of information seems a little vague as to whether it and Defender are the same thing and/or just /kinda/ the same thing in the Windows 7 case, etc. – Su' – 2017-01-19T10:47:18.057

@Su' Speaking about the Defender that comes with Windows 8 and later, it and MSE are certainly like two brothers: They have the same UI and use Microsoft Antimalware Engine. Their virus definitions are compatible. Before Windows 8, no. Defender was an entirely different beast. – None – 2017-01-19T12:38:54.200