VersionsVersions

4.5.0218.0 4.51%
4.5.0218.0 1.56%
4.5.0216.0 4.51%
4.4.0304.0 2.69%
4.4.0304.0 0.52%
4.4.0304.0 0.26%
4.4.0304.0 0.09%
4.4.0207.0 0.09%
4.3.0219.0 3.90%
4.3.0219.0 2.60%
4.3.0216.0 1.30%
4.3.0216.0 0.95%
4.3.0215.0 2.17%
4.3.0215.0 5.72%
4.3.0215.0 0.78%
4.3.0215.0 1.04%
4.2.0223.0 13.27%
4.2.0223.0 10.15%
4.2.0223.0 1.04%
4.2.0223.0 10.93%
4.2.0216.0 0.09%
4.2.0216.0 0.26%
4.1.0522.0 12.32%
4.1.0522.0 12.06%
4.0.1526.0 0.09%
4.0.1526.0 1.13%
3.0.8402.0 1.30%
3.0.8402.0 1.73%
3.0.8107.0 1.39%
3.0.8107.0 0.61%
2.0.6212.0 0.95%

Relationships

MsMpEng.exe

Microsoft Malware Protection by Microsoft Corporation (Signed)

Remove MsMpEng.exe

Overview

There are 31 versions of MsMpEng.exe in the wild, the latest version being 4.5.0218.0. It is started as a Windows Service called 'Windows Defender-Dienst' with the name 'WinDefend' and described as “Schützt Benutzer vor Schadsoftware und weiterer potenziell unerwünschter Software.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 18.55 KB. The file is a digitally signed and issued to Microsoft Corporation by Microsoft Corporation. The programs Microsoft Security Essentials, Microsoft Antimalware and MS Security Essentials have been observed as installing specific variations of MsMpEng.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0069% including both foreground and background operations, the average private memory consumption is about 78.91 MB with the maximum memory reaching around 155.72 MB. Addionally, typically read and write I/O disk operations is about 5.37 MB per minute for reads and 1.76 MB per minute for writes.

What is MsMpEng.exe?

MsMpEng.exe is the back-end of Microsoft Security Essentials. It is important to remember that this process is actually used by both Windows Defender and MSE. When you install Microsoft Security Essentials, then Windows Defender is automatically turned off and Microsoft Security Essentials uses this process. This is the main process that runs the program and takes quite some system memory. If you end this process then Microsoft Security Essentials will be disabled and an alert will be shown aski

About MsMpEng.exe (from Microsoft Corporation)

Windows Defender is software that helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software by detecting and removing known spyw

DetailsDetails

File name:MsMpEng.exe
Publisher:Microsoft Corporation
Product name:Microsoft Malware Protection
Description:AntiMalware Service Executable
Typical file path:C:\Program Files\microsoft security essentials\msmpeng.exe
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Effective date:Wednesday, October 22, 2008
Expiration date:Friday, January 22, 2010
Windows Service
Service name:WinDefend
Display name:Windows Defender-Dienst
Description:“Schützt Benutzer vor Schadsoftware und weiterer potenziell unerwünschter Software.”
Type:Win32OwnProcess

ResourcesPrograms installed in

(Note, the programs listed below are for all versions of Microsoft Malware Protection.)
Microsoft Corporation
8% remove
Microsoft Security Essentials is an antivirus software product that provides protection against different types of malware such as computer viruses, spyware, rootkits and Trojan horses. It runs on Win...
Microsoft Corporation
3% remove
Microsoft Antimalware is an antivirus software (AV) product that fights malware (malicious software), including computer viruses, spyware, Trojan horses and rootkits. The software runs on Windows XP, ...
Microsoft Corporation
1% remove
The Microsoft Security Essentials Prerelease program allows users to run the latest & greatest versions of Security Essentials before they are publicy available.
Microsoft Corporation
1% remove
Manage PCs and multiple types of mobile devices in one unified solution, either through the cloud or by extending your existing on-premises infrastructure. Whether using corporate or employee-owned de...
Microsoft Corporation
4% remove
Endpoint Protection uses the monitoring and deployment capabilities of Configuration Manager to streamline the deployment of antimalware definitions and uses Configuration Manager to provide an in-con...
Microsoft Corporation
1% remove
Microsoft Forefront is a family of line-of-business security software that are designed to help protect computer networks, network servers (such as Microsoft Exchange Server and Microsoft SharePoint ...
Microsoft Corporation
4% remove
Microsoft Security Client for Microsoft Security Essentials is an antivirus software product that provides protection against different types of malware such as computer viruses, spyware, rootkits and...
Microsoft Corporation
5% remove
Security and management have traditionally existed as two separate disciplines, yet both play a central role in keeping your users safe and productive. Microsoft System Center 2012 Endpoint Protection...
Microsoft Corporation
4% remove

BehaviorsBehaviors

(Note, the behaviors below are for all versions of MsMpEng.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • WinDefend
  • 'MsMpSvc' (Microsoft Antimalware Service)

VersionsAll file variations of MsMpEng.exe

MD5SHA-1File size
ed70edcc4107f3727973c312e0049bd5 fdb29638944a097d83c8c3442970287a890a0a03 23.27 KB
c482599717e3bd0ea778eb2b12e24de5 0540d572c15d5f4f2f93084478db17639055fe1d 15.68 KB
89f2aedc2788696702141ab82c3e7866 c894455b32298caff66eef7cceff2c89f0db3448 23.25 KB
7675e15d1b2180745e4da4d26aad7385 a065f1c21fb9e5cccbcdcd6b5ff97f4327535357 23.25 KB
b0f49da36f30922f5ddc3b623b778fce dfbd5d8df898f4f36eb8f6c420d644df460df098 21.69 KB
7ce5405b192ac912b9405f72386c7d4b a0ca26d37d0a546f8c5c0dd1fb89b7e1a21e661e 23.27 KB
0bb1cee3514ce93a0a4e6376a9038eff 7b025e98c614622dbbec699f41e9041f4e1057b3 15.67 KB
5f33f3c972209359fd5bd2d18dc5a58c efc769fa3f757fa62e7e22c098090f2b5b15042e 23.25 KB
52d60e642263719b37f1e4a785e676eb 18681112eaf0bed82515c0705b452aa69dd2e925 23.25 KB
0a7f86657755ada92c57e597bf5151f7 76fe1dc273a85d19bfdcf57c69c00be2a736e392 21.69 KB
3ea6a1a744d79328ae7e2c6fae4c4420 4aee6a79517ed56df397115bb8bbfa74baa12638 21.7 KB
fd909d744acfcf61cac3a77854f8b301 29e0529e1325849dd826000791da477f0bef7d11 23.26 KB
66238063b53e51adda16764bab9a3f7c 465d209d81cea9de88d1845efc58b8706f22700c 23.25 KB
7c8ef404852d1c675ce2a77d9852fa97 342bca723497eebe5c490b9820cf166d509508f7 15.67 KB
37f77aebff23a99d1bfb4f34cd2d07f2 c40ec2adf7f5c60af4aef8ba885b52b29d9dd8b3 21.69 KB
e5b069655f93515d9b9fa97726398d2d 376eb8ce0c5ef69b902b143f0d1f4e8f6ef91887 14.14 KB
e07dec52ff801841ba9b6878a60304fb 45384a6d955e90733e48ada8464fc87d22f45816 21.54 KB
473b9548568ba927ace0b77ec208a561 f472d8ba70f75ca07c83c0194dc0510ba7a2b87a 14.57 KB
5595edbda4fd99c82119046c0bdc3be2 c7c88742d34af0abcf3943d645d2b7ab62e7319e 13.03 KB
c1f19d2bacbee9ab64d9ae69e9859ac0 1712e818e2d8cdc6c63560bcdba47b754fff9823 19.98 KB
ad360a236fb951db405ea699fdc9f521 6c2877ecc25ff5437bc14f1efcc9e79ff3d25a81 20 KB
1e687428128049fa09c10fb4ad4fc160 e208e6bed0d3ff2ef18fb96fecd3359e5d5ab603 21.54 KB
cc8e4f72f21340a4d3a3d4db50313ef5 2a346aecaf922b214ff45a5ebec7b2ff0ba5ebf8 21.55 KB
e077fca2a7e79fb9bf67d3e30b5ce593 4883e30d050ace54fca402110a83e9c203803381 19.99 KB
24516bf4e12a46cb67302e2cdcb8cddf 16d4cdc5704785d269c8ea6b528264f52846ec84 11.28 KB
59faaf2c83c8169ea20f9e335e418907 564d03a55fa39928cd7df3fd0e7541b54e0a305c 12.3 KB
157e9e498206a3366baa7e4697bdd947 ce7b7e09eaebddee4876b92bb085e5ab877bc5aa 12.48 KB
cfce43b70ca0cc4dcc8adb62b792b173 fb350df576841443fb3dbfac047957c75c261e60 11.46 KB
90dc23d940551db35367fb1e40575b25 fa0940f3200829b5d8b2b79b23150f1481cbc75c 11.46 KB
64e69a217d861776ca848b453fb96d71 35ce7b3bdfb8691cdc43797943334301ac7505c2 12.48 KB
895d27930107553c275e5679e7572b58 84bafe7983859e5b329658b1e044a157f36ac5db 17.48 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 32.25%
Windows 8 12.75%
Windows 7 Ultimate 10.00%
Windows 8 Pro 9.50%
Windows 8.1 7.25%
Windows 7 Professional 6.50%
Microsoft Windows XP 4.50%
Windows 8.1 Pro 3.25%
Windows 8 Single Language 3.25%
Windows Vista Home Premium 3.00%
Windows 8 Enterprise 1.75%
Windows 8.1 Single Language 1.50%
Windows 8 Pro with Media Center 1.25%
Windows 8.1 Pro with Media Center 1.00%
Windows Vista Business 0.50%
Windows Vista Ultimate 0.50%
Windows 8.1 N 0.25%
Windows 8.1 Enterprise Evaluation 0.25%
Windows 8 Enterprise N 0.25%
Windows 8 Enterprise Evaluation 0.25%
Windows 8 Pro N 0.25%
21 other Windows OS version

Distribution by countryDistribution by country

United States installs about 47.22% of Microsoft Malware Protection.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 24.71%
Hewlett-Packard 14.83%
ASUS 12.55%
Acer 10.46%
Lenovo 9.51%
Toshiba 9.51%
Sony 5.32%
Intel 4.56%
GIGABYTE 2.09%
Compaq 1.52%
Samsung 1.14%
American Megatrends 0.95%
Gateway 0.76%
MSI 0.76%
NEC 0.76%
Sahara 0.38%
Alienware 0.19%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE