How to fix Windows 11 running slow due to Windows Defender real-time protection high CPU usage

Summary

This guide helps you troubleshoot and resolve: How to fix Windows 11 running slow due to Windows Defender real-time protection high CPU usage. Follow the steps below to fix the issue.

Common Causes

Windows Defender's real-time protection is designed to keep your PC safe by scanning files and processes as they run. Occasionally, this background scanning can consume excessive CPU and disk resources, making your Windows 11 computer feel sluggish or unresponsive. This guide will walk you through diagnosing the issue and applying fixes to restore normal performance.

If your computer is generally slow, you may also want to review our broader guide on computer running slow.

Quick Fix Steps

1. Open Task Manager (press Ctrl + Shift + Esc) and check whether Antimalware Service Executable is using a high percentage of CPU or disk.
2. Wait for the current scan to complete, then restart your PC.
3. Update Windows 11 to the latest version via Settings > Windows Update.
4. Schedule a full scan for a time when you're not using the computer.
5. Add any legitimate, trusted folders to the Defender exclusion list.

Detailed Instructions

1. Confirm Windows Defender is the Cause

Before making changes, verify that Defender is actually responsible for the slowdown.

1. Right-click the Start button and select Task Manager.
2. Click More details if the compact view appears.
3. Sort the Processes tab by CPU or Disk usage.
4. Look for entries named Antimalware Service Executable or MsMpEng.exe.

If these processes are consistently consuming more than 30–40% of CPU or disk resources during normal use, Defender is likely the culprit.

2. Let the Scan Finish or Restart Your PC

Real-time protection continuously monitors files, but a full scan can take a while, especially on larger drives.

1. Open Windows Security from the Start menu.
2. Select Virus & threat protection.
3. Under Current threats, check whether a scan is in progress.
4. If a scan is running, allow it to complete, or click Cancel if you need to use the PC urgently.
5. Restart your computer once the scan finishes to clear any lingering processes.

3. Update Windows 11

Microsoft regularly releases fixes for Defender performance issues. Keeping Windows up to date can resolve known bugs.

1. Open Settings (press Win + I).
2. Select Windows Update from the left pane.
3. Click Check for updates.
4. Install any available updates and restart when prompted.

4. Adjust Real-Time Protection Settings

You can fine-tune how aggressively Defender scans your system.

1. Open Windows Security > Virus & threat protection.
2. Under Virus & threat protection settings, click Manage settings.
3. Locate Real-time protection and ensure it is toggled On (turning it off leaves your PC vulnerable).
4. Scroll down and review Exclusions. Click Add or remove exclusions to add trusted folders or file types that Defender should skip.

5. Schedule Scans Outside Working Hours

If full scans are the main cause of slowdowns, schedule them for when the PC is idle.

1. Press Win + R, type taskschd.msc, and press Enter.
2. In the left pane, expand Task Scheduler Library > Microsoft > Windows > Windows Defender.
3. Double-click Windows Defender Scheduled Scan.
4. Under the Conditions tab, tick Start the task only if the computer is idle.
5. Switch to the Triggers tab and adjust the schedule to suit your usage (for example, overnight).
6. Click OK to save.

6. Check for Conflicting Software

Running two antivirus programs at once can cause Defender to work harder than necessary.

1. Open Settings > Apps > Installed apps.
2. Review the list for any third-party antivirus or internet security software (such as Norton, McAfee, Bitdefender, or Kaspersky).
3. If found, uninstall any product you no longer use, or follow its instructions to disable its real-time scanning so it does not conflict with Defender.

7. Re-register Windows Security Components (Last Resort)

If Defender continues to misbehave, re-registering its components can clear corrupted configuration.

1. Open an elevated PowerShell window (right-click Start > Terminal (Admin) or Windows PowerShell (Admin)).
2. Run the following command to re-register the Windows Security app: Get-AppxPackage Microsoft.SecHealthUI -AllUsers | Reset-AppxPackage
3. Restart your PC when the command completes.

Troubleshooting

Defender CPU usage stays high after a restart

This often indicates a corrupted definition file or a stuck scan job. Try the following:

• Run sfc /scannow from an elevated Command Prompt to repair system files.
• Run DISM /Online /Cleanup-Image /RestoreHealth to repair the Windows component store.
• Manually update Defender definitions from Windows Security > Virus & threat protection > Protection updates.

Performance issues continue after applying all fixes

If Windows 11 remains slow, the problem may not be Defender at all. Consider checking:

• Startup programmes consuming resources — review them in Task Manager > Startup apps.
• Disk health — open a Command Prompt and run wmic diskdrive get status.
• Whether applications are freezing or crashing, which can indicate broader system instability.

If you have completed the steps above and your PC is still running poorly, our team can investigate further. Please open a ticket through the 220 support portal with details of the symptoms and any error messages you've observed.

Still Having Issues?