How to Disable Msmpeng.exe and Reduce High CPU Usage

High CPU usage is not a new issue on Windows computers as it has, for a long time, affected both Windows 10 and 7 users. Just recently, we covered how to fix high CPU usage after the KB4512941 update on Windows 10. And now users are complaining about a process called msmpeng.exe causing a high spike in CPU usage. The interesting part about this process is that it’s not a virus, but a system process handled by the native antivirus itself. So to understand the problem better, let’s go ahead and learn how to disable msmpeng.exe process which will eventually reduce the high CPU usage on Windows computers.

Disable Msmpeng.exe and Reduce High CPU Usage

Before moving to the guide, let me clarify that Msmpeng.exe is not a virus. In fact, it’s an Antimalware Service Executable process that is run by the native antivirus, Windows Defender (now called Windows Security). Many users have pinned down the issue to a database file called mpenginedb.db which is used by Windows Defender for storing hash values. Due to some false identifiers, Windows Security keeps scanning all the data on the disk and rehashes them in the database file. As a result, the CPU usage spikes from 50% to 100%. So, we will have to delete the mpenginedb.db file to fix this issue.

Delete Mpengine.db File

1. Since Mpengine.db is a system file related to the antivirus, we can’t delete it normally. We will have to temporarily disable the antivirus and then only we can delete the file. So open Windows Security and go to “Virus and threat protection”. Here, click on “Manage Settings”.

Disable Msmpeng.exe and Reduce High CPU Usage

2. After that, disable all the toggles under this section.

Disable Msmpeng.exe and Reduce High CPU Usage

3. Now, press and hold the “Shift” button and restart your computer. It will boot to the Advanced Recovery Window.

Disable Msmpeng.exe and Reduce High CPU Usage

4. Here, choose Troubleshoot -> Advanced Options -> Startup Settings -> Restart. After that, press the “4” number key to boot into Safe Mode.

safe mode

5. Once you are in the Safe Mode, search for “registry” in the Windows Search box. After that, click on “Run as administrator” in the right pane.

registry

6. Copy the below address and paste it in the Registry address bar and hit enter. You will be instantly taken to the Windows Defender folder.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

Disable Msmpeng.exe and Reduce High CPU Usage

7. Right-click on “Windows Defender” and select New -> DWORD (32-bit) value. Name the file “DisableAntiSpyware” and click on the “Ok” button.

Disable Msmpeng.exe and Reduce High CPU Usage

8. Now double-click on the file and change the value to 1. After that, click on the “Ok” button and restart your computer.

Disable Msmpeng.exe and Reduce High CPU Usage

9. This time, search for “Powershell” and open it as an Administrator.

powershell

10. After that, copy the command below and paste it on your PowerShell window. Following that, hit enter. This will delete the mpengine.db file from your PC.

Remove-Item 'C:\ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db'

powershell

11. Now open the Registry again and delete the “DisableAntiSpyware” file. After that, restart your computer and Windows Security will start working again. And this time, you won’t see Msmpeng.exe causing any CPU spike. In case, you are still facing the same issue then either reinstall Windows or use a third-party antivirus, preferably Malwarebytes (Free, Pro version at $47.30/year).

Disable Msmpeng.exe on Your Windows PC

So that is how you can delete the mpengine.db file to bring down the high CPU usage. As I already said, the issue is with Windows Defender which scans the whole disk because of a false-positive result. While the process is a bit complex, you can definitely do it if you follow the guide step by step. Anyway, that is all from us. If you found the article helpful, do let us know in the comment section below. Also, if the issue still persists, try reinstalling Windows 10 from scratch.

#Tags
comment Comments 13
  • VenusMarrs says:

    Following the instructions didn’t help me, but somewhat following another commenter’s idea: I did everything up to the point where we delete the DisableAntiSpyware, since doing so did nothing. But not deleting that Registry entry lowered the CPU usage to 50% and no more mpengine or whatever it was. I downloaded Malware Bytes and this time it finally found a few things and quarantined them. I feel better now. Slightly nervous, but better I think.

  • fred says:

    there is no mpenginedb.db file to remove

  • Kritio says:

    Thank you so much it helped me a lot I hope you enjoying your life and doing whatever you want

  • Adam says:

    When you restart the second time, it has to be in safe mode again.

    • Rob says:

      Yes! Thank you Adam! I couldn’t understand why it wasn’t working for me, then I tried your suggestion of restarting in safe mode for the 2nd restart and now it’s worked! Thank you!

  • moutchou says:

    Works like a charm 🙂 My old and low perf thanks you !

  • Anonymous says:

    I dont have the powercell application…

  • Chasity Myers says:

    It did not work for me.

  • 6655rana says:

    I am working on it

  • Pera says:

    When i restart my pc for first time after finishing registry step and start doing poweshell step, pasting that row into it, it says that it cannot be remowed since it’s being used. I did excatly as it was written in blog. Help

    • Rijal says:

      manually deleting the file works for me

    • markus says:

      same thing happened for me, manually deleting didn’t work too, said it was being in use, even in safe mode tried to delete the source, but it said access denied

    • Marc Parella says:

      I ended up permanently disabling the Anti Spyware because removing the file did not stop the CPU spikes.

Leave a Reply