Windows 10: constant intermittant activity from the "antimalware services executab

noted repeating activity on drive monitor and looked into task manager to check it out. The windows processes "antimalware service executable", "services" and "microsoft windows search indexer" keeping cpu activity in the low 20's percent range.

Any help or explanation for this?

:)

 

Antimalware service executable

I've finding some process - either the Windows Error Reporting Service or Antimalware Service Executabe - is interrupting my typing every 3 seconds - causing very bad problems with missing letters during typing. It also causes problems managing selections
with the cursor. For example, when I get a dropdown menu with a selection list, if I don't make a selection within a second or two, the offensive process runs and the dropdown disappears.

 

PC won't restart after Windows 10 upgrade

Unfortunately, doesn't seem to make a difference. Through task manager, I'm now seeing "Antimalware Service Executable" taking 80-92% of the CPU constant. It seems things might be running, but with so much cpu being taken, it takes hours for any response.
Should I redo the Windows 10 install? I've created a usb from the microsoft site.

 

Hi, suggest you try to separate the two (Defender and search). Try disabling Windows Defender and making sure Windows search completes indexing. Presumably Defender is scanning items being indexed.

Press Windows key + X together, click Control Panel, click Indexing Options. Have a look at the number of items indexed. Wait until Indexing complete appears. (The number of indexed items should increase until it does, of course).

Note: if you have changed the indexed items from the default, make sure you aren't going to be waiting a long time 'cos you have many items to be indexed.

Windows Defender Real-time Protection - Turn On or Off in Windows 10 - Windows 10 Forums
Note that Defender only stays off for a while in Win 10- unless you take definite steps to disable it or install an alternative.

 

Thanks for the tip; still have a lot to learn about win10. One question, do you think malwarebytes anti-malware is better than defender or could the two work together?

 

Malwarebytes Free is an on demand scanner while Malwarebytes Paid version provides real time scanning. You don't want two real-time scanners. See
anti virus - Is running windows defender with malwarebytes safe? - Super User

But Malwarebytes attempts to address different threats to general AV programs.

It's compatible
https://www.malwarebytes.org/pdf/rev...tingReport.pdf

After that it depends rather on your risk behaviour. What sites you go to, where you download things from.

 

Thanks again. I have turned MBAM on and Defender off. Past experience leads me to believe MBAM is the better bet.

 

Just to clarify, MBAM Premium is a specialized, anti-malware program specifically designed to be run alongside a robust, real-time AV.
MBAM is NOT an AV and does not replace an AV.
It targets certain types of non-viral, zero-hour and zero-day malware often missed by your AV.
It is part of a layered approach to security.
(There are other layers, such as anti-exploit, anti-ransomware, custom hosts files, etc.)

So, there should be no need to disable MBAM Premium realtime protection modules if you are running WD under Win10.
To the contrary, MBAM Premium would help to bolster your realtime protection alongside WD.
Running MBAM Premium alongside an AV is NOT the same thing as the ill-advised practice of running 2 realtime AVs.

MBAM Free, as pointed out, is just a manual, on-demand scanner to help detect/remove malware that has already made it past your AV onto the system.
If you disable MBAM Premium's realtime protection or revert to the Free version, you will only be able to clean up, not help PREVENT infection.

If you need help installing, configuring or running MBAM, we'd be happy to assist you.*Smile

HTH,
MM

 

You won't be getting much protection then - as pointed out already MBAM is not a replacement AV

 

You're right. MBAM is not a sub and I've turned defender back on. Activity is apparently related to the indexing function and has calmed down for now.