What does MSASCui.exe do exactly?

[Guest]

I installed Windows Defender on my computer, turned off automatic updates and
real-time protection so I'm not sure why this process is still running after
I quit the program? ProcessExplorer reports the following but as I've
already quit the program where's the interface.

MSASCui.exe 4224 Windows Defender User Interface Microsoft
Corporation

 

[Guest]

Hello Damole,

Exactly, MSASCui.exe (the user interface).

 

[Guest]

Thanks Engel.

I guess I should re-phrase my question. Why is this process running when
there is no user interface? I see that the program is launched with the
-hide flag but still don't understand why after quitting the program (UI)
this process is still running?

I'm just trying to keep my computer running as speedily as possible by
avoiding having unnecessary processes running in the background.

cheers
Damole

 

[Guest]

Hi Damole,

Defender loads two executables (the aforementioned MSASCui.exe and
MSMPeng.exe).

To answer your question...there is no shutdown option for Defender like you
get in Microsoft AntiSpyware.

WD is designed to be integrated into the next operating system (Vista). If
you want to stop the program you will need to manually stop the two Defender
executable files in Task Manager (hit Control-Shift-Escape keys to quickly
bring up Task Manager). Or to permanently remove Windows Defender there is an
uninstall entry in Add/Remove Programs.
--

 

[Philip Taron]

Hello,

MSASCUI.exe is not just the Windows Defender user interface, but also
contains all the real-time protection features of Defender (run-key
monitoring and so forth.) When you kill that process you are turning off
that protection.

 

[Guest]

I guess my point is that I opted not to have real-time protection by
un-checking the box in the options so why is it still running? Every time I
start my computer there seem to be a gazillion processes running which not
only make it startup slower but run slower so when a program offers me the
option not to check for updates automatically or not to provide real time
protection I usually take that option.

 

[Guest]

Hi Philip,

Thank you for the explanation.

I learn something new today ;-) Thanks again
--

 

[Philip Taron [MSFT]]

Hello damole,

Well, it's also got the user interface of Defender for launching scans and
alerting that malware has been detected (this is why it's running all the
time--malware could be found at any given point). If you really want the
process gone, uncheck the "Use Windows Defender" checkbox at the bottom of
the options screen.