Microsoft Defender Endpoint memory leak, high CPU, black screens..

Topic

New Reply

[Alex5723]

Defender for Endpoint causes issues with Windows 10 20H2 clients (April 26, 2022)

https://www.neowin.net/news/microsoft-defender-apparently-causing-high-memory-usage-issue-black-screen-and-more/

The high memory usage issue is likely being caused by a memory leak bug. The problem is apparently not new and Microsoft had fixed the issue once earlier (via Reddit). The company states that the issue started with signature build 1.363.177.0 (via Jay on Twitter). However, the bug has apparently returned and it looks like the earlier resolution may have been a temporary one only.

The high memory usage by Defender’s “Antimalware Service Executable” process (MsMpEng.exe) is a quite common bug and sometimes a temporary workaround to reduce the memory consumption is to disable the Real-time Protection.

• This topic was modified 3 years, 1 month ago by Alex5723.

Reply | Quote

Replies

Alex5723 wrote:

Defender for Endpoint causes issues with Windows 10 20H2 clients (April 26, 2022)

Hi Alex5723:

I’m not sure if this is related, but the Monthly Platform and Engine Versions section of the MS Defender product release notes at Manage Microsoft Defender Antivirus Updates and Apply Baselines notes that the latest MS Defender engine update v1.1.19200.5 (rel. 22-Apr-2022) “resolves issues with high resource utilization (CPU and/or memory) related to the earlier March 2022 Microsoft Defender engine update (1.1.19100.5)” that was released on 07-Apr-2022.

I checked my Win 10 v21H2 machine today at Windows Security | Settings | About and confirmed that my MS Defender engine was updated from v1.1.19100.5 to v1.1.19200.5 some time in the past few days.  There’s nothing at Windows Update | View Update History | Definition Updates that shows the exact date this engine update was delivered to my system.

———–
Dell Inspiron 5584 * 64-bit Win 10 Pro v21H2 build 19044.1645 * Firefox v99.0.1 * Microsoft Defender v4.18.2203.5-1.1.19200.5 * Malwarebytes Premium v4.5.8.191-1.0.1666

1 user thanked author for this post.

Alex5723

Reply | Quote

Note Defender for Endpoint is not the same as MS Defender.  Also I’m not seeing this in my network.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote