Page 1 of 2 12 LastLast
Results 1 to 15 of 16
  1. #1
    Star Lounger
    Join Date
    Dec 2009
    Location
    Olympia, Washington
    Posts
    61
    Thanks
    6
    Thanked 5 Times in 4 Posts

    ANY control of Antimalware possible?

    When first introduced, Antimalware tool ran appropriately, running once a week at 2:00am as the Task Manager specifies. Now it has gotten a Microsoft "improvement" which runs it every time my computer awakens from sleep. Process Explorer shows it burning up over 80% of my CPU time, making my computer useless to me for a considerable time.

    Yes, I have seen all the baloney out there saying that if Microsoft gave us any controls, antimalware would be rendered useless. Hogwash!

    Is there any way to kill this abomination? Is there any way to simply lower the tool priority to a point which allows me to actually use my computer while it runs? Of course, I have explored Windows as Administrator to the limits of my abilities. All control access I can find is denied.

    I have completely disabled Security Essentials, but Antimalware lives on forever! Is there any way to get Antimalware to honor the Task Manager settings? I suspect that "new network connection" is the event triggering the unwanted execution. Is there any way to get enough brainpower working at Microsoft to realize that my computer can not get infected while it is sleeping?

    Ironically, Microsoft Antimalware has now itself become my worst malware! My only recourse may be to use a third party "command line" boot disk (NTFS) without running Windows, so I can delete the Microsoft Malware executable. Does anyone know of such a tool? Do I have to install a Linus distro just to kill this malware?

    Any functional ideas will be most gratefully appreciated.

  2. #2
    Super Moderator RetiredGeek's Avatar
    Join Date
    Mar 2004
    Location
    Manning, South Carolina
    Posts
    9,436
    Thanks
    372
    Thanked 1,457 Times in 1,326 Posts
    Bob,

    Ok, I need some clarification here.

    What Version of Windows?
    Exactly what Microsoft AntiMalware product are you talking about (MSE - Microsoft Security Essentials (which you say you've disabled), WD - Windows Defender, EMET, or MSRT - Malicious Software Removal Tool)?

    Last edited by RetiredGeek; 2015-07-10 at 15:09.
    May the Forces of good computing be with you!

    RG

    PowerShell & VBA Rule!

    My Systems: Desktop Specs
    Laptop Specs

  3. #3
    Silver Lounger RolandJS's Avatar
    Join Date
    Dec 2009
    Location
    Austin metro area TX USA
    Posts
    1,735
    Thanks
    95
    Thanked 128 Times in 125 Posts
    Googling Microsoft Antimalware gave me the following search results:
    https://www.google.com/search?q=Microsoft+Antimalware&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{moz: official}&gws_rd=ssl
    I'm not sure where this utility originates from.
    I can't get rid the smile appearing in the middle of my copyNpaste into this post.
    Last edited by satrow; 2015-07-10 at 20:38.
    "Take care of thy backups and thy restores shall take care of thee." Ben Franklin revisited.
    http://collegecafe.fr.yuku.com/forum...-Technologies/

  4. #4
    Super Moderator
    Join Date
    Aug 2012
    Location
    Durham UK
    Posts
    6,645
    Thanks
    147
    Thanked 884 Times in 845 Posts
    Quote Originally Posted by RolandJS View Post
    Googling Microsoft Antimalware gave me the following search results:
    https://www.google.com/search?q=Microsoft+Antimalware&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{mo zfficial}&gws_rd=ssl
    I'm not sure where this utility originates from.
    I can't get rid the smile appearing in the middle of my copyNpaste into this post.
    Roland, can you go back to that web site, right click on the URL search box then select Copy and then you can paste an active link into to your reply.

  5. #5
    Super Moderator RetiredGeek's Avatar
    Join Date
    Mar 2004
    Location
    Manning, South Carolina
    Posts
    9,436
    Thanks
    372
    Thanked 1,457 Times in 1,326 Posts
    Quote Originally Posted by RolandJS View Post
    I can't get rid the smile appearing in the middle of my copyNpaste into this post.
    Roland,

    Use [noparse] your line here [/noparse] tag set around your line. The icons usually appear when there is a : in the line.

    HTH
    May the Forces of good computing be with you!

    RG

    PowerShell & VBA Rule!

    My Systems: Desktop Specs
    Laptop Specs

  6. #6
    Star Lounger
    Join Date
    Dec 2009
    Location
    Olympia, Washington
    Posts
    61
    Thanks
    6
    Thanked 5 Times in 4 Posts

    Smile Problem Solved!

    Thanks Retired,
    I have factory installed Win7 on a five year old H-P laptop (dual processor 64 bit).

    I have had the issues described in the first five paragraphs at this link for over a year.
    http://answers.microsoft.com/en-us/p...a11be20?auth=1

    I erred saying that I had killed Win Security Essentials. Rather, it was Win Defender which I have apparently completely killed. See attached clip. The offending hog, MsMpEng.exe, continued to run. I was not allowed to delete it.

    Apparently, Windows is monitoring all of my communications, and noticed that I wrote a post at the Lounge ;-) I seem to have scared Windows enough to stop it from running the the offender. Upon opening the laptop lid this morning, I was able to actually use my little PC as MsMpEng.exe was NOT run!! Amazing technology! ;-) I looked in Task Manager and found that the default entry (once a week at 2:00 am) which Windows installed, but was not using, has been removed overnight.

    So, writing a post on the Lounge seems to have fixed this year long problem! (at least for this morning)

    Thanks for your part in solving this major annoyance! I had no idea that Windows could be threatened into running properly!

  7. #7
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,756
    Thanks
    171
    Thanked 653 Times in 576 Posts
    Quote Originally Posted by Bob Spafford View Post
    I have had the issues described in the first five paragraphs at this link for over a year.
    http://answers.microsoft.com/en-us/p...a11be20?auth=1
    The second reply there shows you how to stop it if necessary: NET STOP MSMPSVC at an Admin Command Prompt.

    I suspect that when you see 80% CPU on waking from sleep, MSE is updating definitions; so you may see this again if they've become outdated while the laptop lid was closed.

  8. #8
    Silver Lounger RolandJS's Avatar
    Join Date
    Dec 2009
    Location
    Austin metro area TX USA
    Posts
    1,735
    Thanks
    95
    Thanked 128 Times in 125 Posts
    https://www.google.com/search?q=Microsoft+Antimalware&ie=utf-8&oe=utf-8&aq=t&rls={moz:distributionID}:{moz:locale}:{mo z: official}&gws_rd=ssl

    Charlie Brown sigh here. CopyNpaste still generates a problem. The above apparently works no better

    "Roland, can you go back to that web site, right click on the URL search box then select Copy and then you can paste an active link into to your reply." --Sudo15
    That's what I did the first time & again & again
    [Que FD Roosevelt]

    Microsoft Community
    http://answers.microsoft.com/en-us/p...um?tab=Threads
    also has a similar situation thread.
    Last edited by RolandJS; 2015-07-11 at 15:26.
    "Take care of thy backups and thy restores shall take care of thee." Ben Franklin revisited.
    http://collegecafe.fr.yuku.com/forum...-Technologies/

  9. #9
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,756
    Thanks
    171
    Thanked 653 Times in 576 Posts
    Quote Originally Posted by RolandJS View Post
    Microsoft Community
    http://answers.microsoft.com/en-us/p...um?tab=Threads also has a thread about OP's situation.
    A solution has not yet been posted over there.
    That links to 1,000 threads. Which one?

  10. #10
    Silver Lounger RolandJS's Avatar
    Join Date
    Dec 2009
    Location
    Austin metro area TX USA
    Posts
    1,735
    Thanks
    95
    Thanked 128 Times in 125 Posts
    http://answers.microsoft.com/en-us/p...1-146b0a11be20

    titled: Microsoft Antimalware still runs after uninstalling it. __I Uninstalled after the continual 80-100% CPU usage effectively slows the PC to a crawl.
    "Take care of thy backups and thy restores shall take care of thee." Ben Franklin revisited.
    http://collegecafe.fr.yuku.com/forum...-Technologies/

  11. #11
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,756
    Thanks
    171
    Thanked 653 Times in 576 Posts
    Quote Originally Posted by RolandJS View Post
    http://answers.microsoft.com/en-us/p...1-146b0a11be20

    titled: Microsoft Antimalware still runs after uninstalling it. __I Uninstalled after the continual 80-100% CPU usage effectively slows the PC to a crawl.
    Same link as in posts #6 and #7.

  12. #12
    Silver Lounger RolandJS's Avatar
    Join Date
    Dec 2009
    Location
    Austin metro area TX USA
    Posts
    1,735
    Thanks
    95
    Thanked 128 Times in 125 Posts
    Cool! I rarely click on external links, that's why I did not see it was the same.
    Also WSL truncates the view of any long URL, had it not been truncated, I probably would have noticed it was the same
    "Take care of thy backups and thy restores shall take care of thee." Ben Franklin revisited.
    http://collegecafe.fr.yuku.com/forum...-Technologies/

  13. #13
    4 Star Lounger
    Join Date
    Jul 2011
    Location
    Florida
    Posts
    404
    Thanks
    173
    Thanked 28 Times in 26 Posts
    Is there a "Thread of the year" award or suchlike for the Lounge?

  14. #14
    Silver Lounger RolandJS's Avatar
    Join Date
    Dec 2009
    Location
    Austin metro area TX USA
    Posts
    1,735
    Thanks
    95
    Thanked 128 Times in 125 Posts
    Quote Originally Posted by Trev View Post
    Is there a "Thread of the year" award or suchlike for the Lounge?
    Trev, I win one award for not checking the external links; and WSL does truncate the displays of long URLs, hence I did not notice the sameness; live & learn
    "Take care of thy backups and thy restores shall take care of thee." Ben Franklin revisited.
    http://collegecafe.fr.yuku.com/forum...-Technologies/

  15. #15
    Star Lounger
    Join Date
    Dec 2009
    Location
    Olympia, Washington
    Posts
    61
    Thanks
    6
    Thanked 5 Times in 4 Posts
    Thanks guys! It makes me feel less a novice to see the experts stumped as I am :-) "Thread of the year" award indeed! The CPU Cycle Eating Monster is still absent, but I have a dreaded fear that the next reboot will see it return. Again, thanks for your interest in this Major Microsoft Pimple!

Page 1 of 2 12 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •