Home How it works Support Boost Connect Download

Boost Connect

Uncovering the DNA of programs.
Good programs    
1
6
7
,
7
9
6
 
Fair programs  
0
1
1
,
1
2
0
 
Bad programs 
0
0
4
,
2
7
7

What is MsMpEng.exe?

Part of Microsoft Malware Protection by Microsoft

What is it?

MsMpEng.exe is the back-end of Microsoft Security Essentials. It is important to remember that this process is actually used by both Windows Defender and MSE. When you install Microsoft Security Essentials, then Windows Defender is automatically turned off and Microsoft Security Essentials uses this process. This is the main process that runs the program and takes quite some system memory. If you end this process then Microsoft Security Essentials will be disabled and an alert will be shown aski

What if I disable Microsoft Malware Protection?

If you disable Microsoft Security Essentials, then Windows Defender will be enabled and will start using this process. So in a way both Windows Defender and Microsoft Security Essentials use this single process.
Description of msmpeng.exe from Microsoft
Windows Defender is software that helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software by detecting and removing known spyware from your computer. Windows Defender features Real-Time Protection, a monitoring system that recommends actions against spyware when it's detected, minimizes interruptions, and helps you stay productive.
Download Boost and enjoy your PC. Speed up Microsoft Malware Protection and optimize your PC.

How does msmpeng.exe run?

Service - MsMpEng.exe runs as a background Windows service called 'MsMpSvc' (Microsoft Antimalware Service). This service runs as the SYSTEM account with extensive privileges on the local computer, and acts as the computer on the network. Microsoft Antimalware Service runs as a program that can be started by the Service Controller and that obeys the service control protocol. This type of service runs in a process by itself.

Community

What is the community is seeing?What is the community is doing?
About 0.1% of all Boost users have the msmpeng.exe process running.Of the 0.1% of msmpeng.exe users, 23.0% have disabled it.
How stable is Microsoft Malware Protection?
Based on crash data discovered by Boost, stability is a measure of how sound this particular process and the average percent of times it crashes.
     msmpeng.exe0.03%
Typical program1.26%
How resource intensive is MsMpEng.exe?
Comparison based on the average resource utilization across all programs.
0.00790% CPU78959.9%
Average CPU utilization across all programs is 0.00001%.
71.03 MB RAM329.9%
Average private memory utilization across all programs is 21.53 MB.
     167 /min7.4%
Average I/O read and write operations for all programs is 2,253 per minute.
         4 GDI objects2.7%
Average number of GUI GDI and USER objects for all programs is 150.
45 context switches/sec45.0%
Average context switches for all programs is 100 per second.
Typical file (disk image) location:
C:\Program Files\microsoft security client\antimalware\msmpeng.exe

Are there other versions of Microsoft Malware Protection?

Why are multiple of the same versions listed?

What modules are loaded?

A module is a dynamic link library (DLL) or an executable file that is loaded into the process. Below is a list of non-system modules that are loaded by Microsoft Malware Protection.

What programs install MsMpEng.exe?

Microsoft Antimalware by Microsoft Corporation - Microsoft Antimalware is an antivirus software (AV) product that fights malware (malicious software), including computer viruses, spyware, Trojan horses and rootkits. The software runs on Windows XP, Windows Vista and Wi
Install path: C:\Program Files\Microsoft Security Client\Antimalware
Microsoft Security Essentials Prerelease by Microsoft Corporation - The Microsoft Security Essentials Prerelease program allows users to run the latest & greatest versions of Security Essentials before they are publicy available.
Program URL: go.microsoft.com/fwlink/?LinkID=228940&mkt=en-us
Install path: C:\Program Files\Microsoft Security Client
Size: 25.56 MB
Microsoft Security Essentials by Microsoft Corporation - Microsoft Security Essentials is an antivirus software product that provides protection against different types of malware such as computer viruses, spyware, rootkits and Trojan horses. It runs on Windows XP, Windows Vis
Program URL: go.microsoft.com/fwlink/?LinkID=195291&mkt=en-us
Install path: C:\Program Files\Microsoft Security Client
Size: 21.86 MB
Microsoft Security Client by Microsoft Corporation - Microsoft Security Client for Microsoft Security Essentials is an antivirus software product that provides protection against different types of malware such as computer viruses, spyware, rootkits and Trojan horses. Buil
Install path: C:\Program Files\Microsoft Security Client\
System Center 2012 Endpoint Protection by Microsoft Corporation
Program URL: go.microsoft.com/fwlink/?LinkId=225780&mkt=es-es
Program help URL: go.microsoft.com/fwlink/?LinkId=225780&mkt=en-us
Install path: C:\Program Files\Microsoft Security Client
Size: 21.98 MB
Windows Intune Endpoint Protection by Microsoft Corporation
Program URL: go.microsoft.com/fwlink/?LinkID=206391&mkt=en-us
Install path: C:\Program Files\Microsoft Security Client
Size: 22.1 MB
Microsoft Forefront Endpoint Protection by Microsoft Corporation - Microsoft Forefront is a family of line-of-business security software that are designed to help protect computer networks, network servers (such as Microsoft Exchange Server and Microsoft SharePoint Server) and individu
Program URL: go.microsoft.com/fwlink/?LinkID=195301&mkt=en-us
Install path: C:\Program Files\Microsoft Security Client
Size: 28.04 MB

What else is related?

Microsoft Malware Protection Stability

msmpeng.exe crashes or has encountered a critical error 0.8900% of the time.
1.  
Error: MpTelemetry (MpTelemetry)
Occurred: over 3 months ago
2.  
Error: MpTelemetry (MpTelemetry)
Occurred: over 3 months ago
3.  
Error: MpTelemetry (MpTelemetry)
Occurred: over 3 months ago

What Windows OS versions does this run on?

Microsoft Windows XP (5.1.2600.131072)
Microsoft Windows XP (5.1.2600.196608)
Windows Vista (TM) Home Premium (6.0.6001.65536)
Windows Vista (TM) Business (6.0.6002.131072)
Windows Vista (TM) Home Basic (6.0.6002.131072)
Windows Vista (TM) Home Premium (6.0.6002.131072)
Windows Vista (TM) Ultimate (6.0.6002.131072)
Windows 7 Starter (6.1.7600.0)
Windows 7 Ultimate (6.1.7600.0)
Windows 7 Enterprise (6.1.7601.65536)
Windows 7 Home Premium (6.1.7601.65536)
Windows 7 Professional (6.1.7601.65536)

About Microsoft Corporation

Microsoft, founded in 1975 by Bill Gates and Paul Allen, is a veteran software company, best known for its Microsoft Windows operating system and the Microsoft More...
Download Boost

File details

File name: MsMpEng.exe
Publisher: Microsoft Corporation (verified)
Name: Microsoft Malware Protection
Description: Antimalware Service Executable
Version: 4.2.0223.0
Size: 19.98 KB
Original file name: MsMpEng.exe

Digital certificate

Certificate authority: Microsoft Corporation
Expiration date: 10/26/2013

Resource utilization

CPU utilization averages
Total CPU: 0.0134590170%
Privileged CPU: 0.0055630318%
User CPU: 0.00789598519151%
Privileged CPU time: 57625827.34 ms
Privileged CPU time /min: 11,807 ms
CPU cycle count: 155,480,277
CPU cycle count /min: 261,689,040
Context switches /sec: 45
Memory utilization averages
Committed memory: 201.44 MB
Peak committed memory: 412.35 MB
Paged memory: 71.03 MB
Peak paged memory: 281.83 MB
Paged system memory: 177.35 KB
Non-paged system memory: 37.22 KB
Working set memory: 53.59 MB
Peak working set memory: 258.43 MB
Min working set memory: 29.89 MB
Private memory: 71.03 MB
Page faults: 8,270,100
Page faults /min: 14,712
Process I/O averages
Total read operations: 211,812
Read operations /min: 162
Total read transfer: 347.11 MB
Read transfer /min: 971.61 KB
Total write operations: 40,915
Write operations /min: 5
Total write transfer: 261.31 MB
Write transfer /min: 279.9 KB
Total other operations: 4,600,134
Other operations /min: 5,699
Total other transfer: 72.96 MB
Other Transfer /min: 272.41 KB
GUI Object Averages
GDI objects: 4
USER objects: 3
Resources
Handle count average: 494
Thread count average: 27
Thread resource averages
ntdll.dll
msvcrt.dll
ntdll.dll
ntdll.dll
ntdll.dll
ntdll.dll
ntdll.dll

Process details

Runs as (owner): System
Integrety level: Undefined
Windows platform: 32-bit
Runs as a service: Yes
Parent Processes
Child Process
Process Commands
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"

Service details

Name: Microsoft Antimalware Service
Service name: MsMpSvc
Service type: Win32OwnProcess
Description: “Helps protect users from malware and other potentially unwanted software”

Image hashes

MD5: c1f19d2bacbee9ab64d9ae69e9859ac0
SHA-1: 1712e818e2d8cdc6c63560bcdba47b754fff9823
SHA-256: 11f55350ef5219b132a1e04c8bf8a521089f62d7207d40f7f3c6e8b6e04090a1

PE image details

CLR assembly: Yes
CLR NGENed: No
Subsystem: Windows GUI
Langauge*: Microsoft Visual C# / Basic .NET
File packed: No
Import Table
kernel32.dll
mpsvc.dll
Stay up to date with news about Boost
Subscribe to our newsletter to receive the latest Boost news and discounts.
 
© 2016 Reason Software Company Inc.
228 Park Ave S #74122 New York, NY 10003
(646) 664-1038 | info@boostbyreason.com
How it works Privacy Terms Support Contact Download Donate Reason Software, the makers of Boost logo

Download Boost and enjoy your PC.

Increase your PC's performance.
Remove unwanted crapware.
Reduce your boot time.
Identify and resolves crashes.
Download the FREE unlimited trial of Boost!
No spyware, no adware, no bundles, no tricks.
Download

Save 40% on Boost

For a limited time, from now until Saturday, December 3, 2016 you can purchase Boost for 40% off of the normal price, only $39.95 $24.95.
The instant online savings will be automatically applied during checkout.
 

100% Satisfaction Guarantee

Purchase with confidence. We stand behind Boost.
If for any reason you are not satisfied with your software purchase, simply contact our Customer Support within 30 days, and we'll refund the purchase price. We won't make you jump through hoops to get all your money back!