• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Windows Defender can Significantly Impact Intel CPU Performance, We have the Fix

btarunr

Editor & Senior Moderator
Staff member
Joined
Oct 9, 2007
Messages
43,239 (7.97/day)
Location
Hyderabad, India
System Name RBMK-1000
Processor AMD Ryzen 7 5700G
Motherboard ASUS ROG Strix B450-E Gaming
Cooling DeepCool Gammax L240 V2
Memory 2x 8GB G.Skill Sniper X
Video Card(s) Palit GeForce RTX 2080 SUPER GameRock
Storage Western Digital Black NVMe 512GB
Display(s) BenQ 1440p 60 Hz 27-inch
Case Corsair Carbide 100R
Audio Device(s) ASUS SupremeFX S1220A
Power Supply Cooler Master MWE Gold 650W
Mouse ASUS ROG Strix Impact
Keyboard Gamdias Hermes E2
Software Windows 11 Pro
Kevin Glynn, aka "Uncle Webb," our associate software author behind popular utilities such as ThrottleStop and RealTemp, developed a new utility named Counter Control, which lets you monitor and log the performance counters of Intel Core processors since 2008 (Core "Nehalem"). During development for ThrottleStop, Kevin discovered a fascinating bug with Windows Defender, the built-in security software of Windows, which causes significantly higher performance impact on the processor than it should normally have. Of course a security software is bound to have some (small) performance impact during real-time protection, but this is much bigger.


The first sign that something is happening is that HWiNFO will be reporting a reduced "Effective Clock" speed when the CPU is fully loaded. A much bigger problem is that when Defender is affected by the bug, performance of your machine will be significantly reduced. For example, a Core i9-10850K running at 5.00 GHz all-core loses 1000 Cinebench points (or 6%). Such a performance loss has been reported by owners of Intel Core 8th, 9th, 10th and 11th Gen, both desktop and mobile CPUs, on both Windows 10 and Windows 11. AMD processors are not affected.




The underlying issue that costs so much performance is that Windows Defender will randomly start using all seven hardware performance counters provided by Intel Core processors, which includes three fixed function counters. Each of these counters can be programmed in one of four modes, to configure at which privilege level it counts—Disabled, OS (ring-0), User (ring>0), and All-Ring levels. Since these counters are a shared resource, it is possible that multiple programs want to access these counters at the same time.

Popular system utilities like HWiNFO, OCCT, Core Temp, and ThrottleStop, all set these counters to "mode 3" or "All-Ring Levels." Since they all set the same mode, there's no issues with multiple programs using the same counter. Windows Defender on the other hand will set these counters to "mode 2", at what looks like random intervals, for random durations of time. This can happen when a computer first boots up or it can happen at any time after that. While Windows Defender is running in the background, it can start and stop or continuously try to change these counters to mode 2 at any time. Just to clarify, the performance loss will happen even without any monitoring software running—Defender will still use excessive CPU time.

The issue is not with the Intel hardware, as setting the same timers as Windows Defender manually has no negative performance impact. Also, if these counters are manually overwritten, Defender detects that, immediately stops whatever it is doing and performance returns to normal—without any negative effect on the ability to detect viruses in real-time.


Our Counter Control software monitors and logs the "IA32_FIXED_CTR_CTRL" register of Intel Core processors, located at MSR 0x38D. This register provides access to the three fixed-function performance monitoring counters mentioned before. Counter Control will inform users if any software is using the Intel fixed-function counters, and for how long they've been in use. Typical values reported by Counter Control look like this:
  • Not Used - 0x000: The three fixed function counters are stopped. None of the counters are presently being used.
  • Defender - 0x222: All three fixed function counters are programmed to mode 2. This is the value that Windows Defender sets these counters to when it is using them.
  • Normal - 0x330: Two counters are programmed to mode 3. One counter is programmed to mode 0 and is not being used. This is normal. Most monitoring programs that use these counters will program the counter control register to this value.
  • Warning - 0x332: This is shown when two counters are being used normally by monitoring software while the third counter has been set to mode 2, likely by Windows Defender. This is a warning that two different programs might be fighting over control of the shared counters. You might see the counter control register constantly changing between 0x222 and 0x332. This is what you will see when running HWiNFO if Windows Defender is trying to use the IA32_FIXED function counters at the same time.


If your system seems affected, showing the "Defender" readout, then a quick fix is to click the "Reset Counters" button in Counter Control. By pressing the button, one timer will be reprogrammed to mode 3, which will be detected by Defender, and Defender will stop doing its thing and restore performance. Please verify with benchmarks.


There are two ways to go about mitigating this performance loss permanently. You could disable Windows Defender Real-time Monitoring, which is highly not recommended due to the security implications; or you could use the latest version 9.5 of ThrottleStop, which has a feature in the "Options" window, called "Windows Defender Boost." Ticking this ensures maximum performance and accurate Core Effective Clock monitoring in all applications whether Windows Defender real-time protection is enabled or not. To achieve that goal, ThrottleStop activates one of the programmable timers immediately. When Windows Defender detects that some user software is trying to use one of the programmable counters, it stops using all the counters and leaves them alone for as long as that counter stays enabled. This returns performance back to normal. The "Reset" button in Counter Control does the same, and gives people a way to activate only this mechanism, without having to start ThrottleStop. Just to clarify, Windows Defender will continue to work fine. It can still detect and notify users of any viruses. When started once, with the "Windows Defender Boost" option, ThrottleStop will let the timer running in mode 3, even when closed. This means you can start ThrottleStop once at bootup, close it right afterward, and your system will be protected from the Defender performance issues.

If "Windows Defender Boost" is not checked, the counter will be initially cleared. This stops the Window Defender algorithm but ThrottleStop will no longer try to keep one counter running while using ThrottleStop and it will not keep that one counter running after you exit ThrottleStop. This allows a person to use ThrottleStop without having to worry that ThrottleStop might be doing something to Windows Defender that it should not be doing. After ThrottleStop starts up, if that timer is not being used, after 10 minutes or so, Windows Defender will check that timer, see that it is not being used, and will be able to start its mysterious performance-eating algorithm again.

Let us know your experience in the comments of this article. It'll be interesting to see how widespread this issue is, we have confirmed (thread at TPU, thread at OCN) it to be happening on many systems in recent months. If we make enough noise, I'm sure Microsoft will look into why they need that many timers in Defender, why there's such a big performance hit, and fix it accordingly.

As always, let us know your thoughts and questions in the comments. Also let us know if you didn't understand certain technical details, so we can improve this writeup.

Counter Control is available as free download in our downloads section.

View at TechPowerUp Main Site
 
Joined
Nov 13, 2007
Messages
9,097 (1.69/day)
Location
Austin Texas
System Name Espresso Machine
Processor 12600K @ 5.2Ghz 1.235v
Motherboard MSI 690-I PRO
Cooling 280MM AIO
Memory 32 GB DDR5 6200 MHZ 32-36-36-95
Video Card(s) MSI Ventus RTX 3080 UV @1810mhz 800mv
Storage 3x1TB SSDs, 2TB SSD
Display(s) LG CX 48", Samsung 28" 4k 144hz
Case SLIGER S610
Audio Device(s) Bose Solo
Power Supply Corsair SF750
Mouse Superlight wireless
Keyboard 65% mini hyperspeed wireless
Software Windows 11
wow what a great find... and solution!
 
Joined
Apr 30, 2011
Messages
2,254 (0.55/day)
Location
Greece
Processor AMD Ryzen 5 5600@76W
Motherboard MSI B550 Tomahawk
Cooling Deepcool Gammaxx 400 Black
Memory 2*8GB PATRIOT PVS416G400C9K@3600MT_C15
Video Card(s) Sapphire Radeon RX 5700 Pulse 8GB
Storage Sandisk SSD 128GB, Kingston A2000 NVMe 1TB, Samsung F1 1TB, Hitachi HUS724040ALE640 4TB
Display(s) AOC 27G2U/BK IPS 144Hz
Case SHARKOON M25-W 7.1 BLACK
Audio Device(s) Realtek 7.1 onboard
Power Supply Zalman Z550
Mouse Sharkoon SHARK Force Black
Keyboard Trust GXT280
Software Win 7 Ultimate 64bit/Win 10 pro 64bit
Good thing it was both found and solved using a small tool. Kudos!
 
Joined
Apr 11, 2021
Messages
809 (1.65/day)
Location
ÐҼƱ₸ꞨƇҤՆԹՌÐ
System Name °( ఠ ͟ʖ ఠ)° | egon 11v1
Processor Intel | i7 _ 11700K | 5GHz all |
Motherboard Asus | ROG Strix -- Z 590-E wifi
Cooling Asus | ROG Ryujin 240 2* _Noctua F PPC °3000 | 4+1* _beQuiet_ Silent/Light Wings 3 °2200
Memory G Skill | Trident Z *RGB @ 4266_ | _15-15-15-30_ | _[331~1N]
Video Card(s) Asus | ROG Strix -- RTX 3070Ti_ #OC Edition
Storage Samsung -- 2* 980pro , 970pro/evo+ , 860evo |ADATA SU 800 | Toshiba HDD | WD red+ HDD
Display(s) Alienware | AW3821DW _ 38" {3840*1600} wide - curved
Case be Quiet | DARK BASE PRO 900 --- _rev. 2 --- #Silver
Audio Device(s) Asus | ROG Throne - Qi_7.1 | LOGITECH_G560 Speaker (RGB)
Power Supply be Quiet | DARK Power PRO 12 __ 1200W *titanium
Mouse Razer | NAGA Trinity (19 buttons)
Keyboard Razer | Huntsman V2 analog | Razer Goliathus (RGB) black
VR HMD Razer | Kraken Ultimate HEADSET __7.1 THX ____| DX RACER - Gaming Leather Chair_____ VR?? is odd!
Software Windows 11 Pro
Benchmark Scores See signature URL
i have always known and said...!
now we have it in black and white. :cool:

great job!
:lovetpu:

The Office Reaction GIF

@lexluthermiester :D

i killed it a long time ago
:nutkick:
Screenshot 2022-06-27 192136.png
 
Last edited:
Joined
Feb 20, 2020
Messages
5,252 (5.80/day)
Location
Texas
System Name Ghetto Rigs x299 & z490 & x99
Processor 9940x w/Optimus SigV2 & 10900k w/Optimus Foundation & 5930k w/Noctua D15
Motherboard X299 Rampage VI Apex & z490 Maximus XII Apex & x99 Sabertooth
Cooling D5 combo/280 GTX/ VRM water block copper/280 GTX/ D5 Top/Optimus sigV2/TitanXp/Mora 360x2
Memory Trident-Z 3600C16 4x8gb & Trident-Z Royal 4000c16 2x16gb & Trident-Z 3200c14 4x8gb
Video Card(s) 1080ti FTW3 & Titan Xp & evga 980ti gaming
Storage 970 evo plus 500gb & 970 evo 500gb many sammy 2.5" ssd's and WD BLK hdd's
Display(s) 1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case D450 second floor for 2nd rad x2/ Cherry Entertainment center on Test bench
Audio Device(s) Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply EVGA 1200P2 & 1000P2 with APC AX1500 & 850P2 with CyberPower-GX1325U & 750P2
Mouse Redragon Perdition x3
Keyboard G710+x3
Software Win-7 pro x3 and Linux Cinnamon 20.2x2 & win-10 & 11pro x3
Benchmark Scores Are in the benchmark section
Hi,
Well I'll stick with disabling windows/ microsoft pretender Oops defender with @W1zzard scripts
It's pure-d crapware anyway get a real antivirus
10
11
 

unclewebb

ThrottleStop & RealTemp Author
Joined
Jun 1, 2008
Messages
4,933 (0.95/day)
Here is an easy test to see if this is an issue for your Intel based computer.

Run Counter Control 1.1 and see if it reports 0x222 for the status of the counters. This is usually a sign that Windows Defender is hard at work, wasting CPU cycles. Run Cinebench R23 and see what score you get for a baseline.

1656350471359.png


It appears that Windows Defender is reducing CPU performance. Press the Reset Counters button and this will stop the Windows Defender Real-time Notification messaging system that has run amok. It also resets the counters to normal values. The result is a nice boost in performance.

1656350563017.png


People have been aware of inconsistent performance for quite a while. This problem has been around for at least 2 years and probably longer. Nice to finally find a way to detect this issue as well as come up with a solution for this problem. Simply running ThrottleStop 9.5 is enough to fix this issue and restore full performance.
 
Last edited:
Joined
Dec 14, 2006
Messages
503 (0.09/day)
System Name Ed-PC
Processor Intel i5-12600k
Motherboard Asus TUF Z690 PLUS Wifi D4
Cooling Noctua NH-14S
Memory Crucial Ballistix DDR4 C16@3600 16GB
Video Card(s) Nvidia MSI 970
Storage Samsung 980, 860evo
Case Lian Li Lancool II mesh Perf
Audio Device(s) onboard
Power Supply Corsair RM750x
Software Win10 Pro 64bit
I tried it on a 12600k and it shows normal all times running CBxx with HWinfo64, also checked with PE and defender shows 0.0 usage.
So seems I am not affected or at least not while I tested, maybe right after a fresh reboot would show different results.
 
Joined
Jan 14, 2019
Messages
2,858 (2.19/day)
Location
Midlands, UK
System Name Nebulon-B Mk. 3
Processor Intel Core i7-11700 @ ASUS Optimized (200 W)
Motherboard ASUS TUF B560M-Plus (WiFi)
Cooling be quiet! Silent Loop 2 280 mm
Memory 2x 16 GB Kinston Fury Beast RGB 3200 MHz
Video Card(s) ASUS TUF Radeon RX 6500 XT @ 2975/2400
Storage 1 TB Crucial P5, 1 TB Crucial P5 Plus
Display(s) Samsung C24F390, 7" Waveshare touchscreen
Case Corsair Crystal 280X black
Audio Device(s) Genius SP-HF160, AKG Y50
Power Supply Seasonic Prime GX-750
Mouse Cherry MW 8 Advanced
Keyboard MagicForce 68
Software Windows 10 Pro
Benchmark Scores Cinebench R23 multi core: 14,000, single core: 1,500. Superposition 1080p Extreme: 2,935.
@AusWolf good you brought up Defender CPU usage few days ago, this might be something worth checking out for yours
Huh? Do you mean Defender initiating a search even when Cinebench is running if I don't move the mouse? If so, that's really annoying. I'll test the program, see what it says.

Honestly, I thought it was an issue of Defender not considering Cinebench as "user input". I wouldn't have thought it had anything to do with having an Intel CPU. o_O
 
Joined
Feb 21, 2006
Messages
1,518 (0.25/day)
Location
Toronto, Ontario
System Name The Expanse
Processor AMD Ryzen 7 5800X
Motherboard Asus Prime X570-Pro BIOS 4403 AM4 AGESA V2 PI 1.2.0.7
Cooling Corsair H150i Pro
Memory 32GB Gskill Trident RGB DDR4-3200 14-14-14-34-1T
Video Card(s) AMD Radeon RX 6800 XT 16GB
Storage Corsair MP600 1TB PCIe 4 / Samsung 860Evo 1TB x2 Raid 0 / Asus NAS AS1004T V2 14TB
Display(s) LG 34GP83A-B 34 Inch 21: 9 UltraGear Curved QHD (3440 x 1440) 1ms Nano IPS 160Hz
Case Fractal Design Meshify S2
Audio Device(s) Creative X-Fi + Logitech Z-5500
Power Supply Corsair AX850 Titanium
Mouse Corsair Dark Core RGB SE
Keyboard Corsair K100
Software Windows 10 Pro x64 21H2
Benchmark Scores 3800X https://valid.x86.fr/1zr4a5 5800X https://valid.x86.fr/2dey9c
I tried it on a 12600k and it shows normal all times running CBxx with HWinfo64, also checked with PE and defender shows 0.0 usage.
So seems I am not affected or at least not while I tested, maybe right after a fresh reboot would show different results.
"Such a performance loss has been reported by owners of Intel Core 8th, 9th, 10th and 11th Gen, both desktop and mobile CPUs"
 

unclewebb

ThrottleStop & RealTemp Author
Joined
Jun 1, 2008
Messages
4,933 (0.95/day)
I tried it on a 12600k and it shows normal all times
So far this issue has only been reported on computers with Intel 8th to 11th Gen CPUs.

Try doing a sleep resume cycle. Exit HWiNFO and leave Counter Control running on the desktop. Does Counter Control still report Normal or Not Used after you resume? My 10th Gen computer always shows Defender has set the counters to 0x222 after I resume from sleep.

Some users originally thought that this might only last for a few minutes. In some instances, I have seen this slow down due to Windows Defender go on for 3 or 4 hours. I gave up monitoring after that. Performance is reduced for the entire time.

1656352450498.png
 
Joined
Sep 17, 2014
Messages
16,880 (5.84/day)
Location
The Washing Machine
Processor i7 8700k 4.6Ghz @ 1.24V
Motherboard AsRock Fatal1ty K6 Z370
Cooling beQuiet! Dark Rock Pro 3
Memory 16GB Corsair Vengeance LPX 3200/C16
Video Card(s) MSI GTX 1080 Gaming X @ 2100/5500
Storage Samsung 850 EVO 1TB + Samsung 830 256GB + Crucial BX100 250GB + Toshiba 1TB HDD
Display(s) Gigabyte G34QWC (3440x1440)
Case Fractal Design Define C TG
Audio Device(s) Situational :)
Power Supply EVGA G2 750W
Mouse XTRFY M42
Keyboard Lenovo Thinkpad Trackpoint II
Software W10 x64
Fork some of my supporter Kudos over to the Webb please :)

Well done sir!
 

unclewebb

ThrottleStop & RealTemp Author
Joined
Jun 1, 2008
Messages
4,933 (0.95/day)
Do you mean Defender initiating a search even when Cinebench is running if I don't move the mouse?
You can be running Cinebench or playing a game or moving the mouse or using your computer however you normally use your computer. Whatever Windows Defender is doing, it can have a big negative impact on performance. Do some 3D Mark testing while Windows Defender has the counters set to 0x222 and then do a similar test when this is not happening. The drop in performance should be obvious.
 
Joined
Feb 20, 2020
Messages
5,252 (5.80/day)
Location
Texas
System Name Ghetto Rigs x299 & z490 & x99
Processor 9940x w/Optimus SigV2 & 10900k w/Optimus Foundation & 5930k w/Noctua D15
Motherboard X299 Rampage VI Apex & z490 Maximus XII Apex & x99 Sabertooth
Cooling D5 combo/280 GTX/ VRM water block copper/280 GTX/ D5 Top/Optimus sigV2/TitanXp/Mora 360x2
Memory Trident-Z 3600C16 4x8gb & Trident-Z Royal 4000c16 2x16gb & Trident-Z 3200c14 4x8gb
Video Card(s) 1080ti FTW3 & Titan Xp & evga 980ti gaming
Storage 970 evo plus 500gb & 970 evo 500gb many sammy 2.5" ssd's and WD BLK hdd's
Display(s) 1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case D450 second floor for 2nd rad x2/ Cherry Entertainment center on Test bench
Audio Device(s) Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply EVGA 1200P2 & 1000P2 with APC AX1500 & 850P2 with CyberPower-GX1325U & 750P2
Mouse Redragon Perdition x3
Keyboard G710+x3
Software Win-7 pro x3 and Linux Cinnamon 20.2x2 & win-10 & 11pro x3
Benchmark Scores Are in the benchmark section
Hi,
Last I looked a 5800x with 3060 laptop would be my choice.
 
Joined
May 2, 2022
Messages
722 (6.94/day)
Location
G-City, UK
System Name My first new build
Processor Ryzen 5 3600
Motherboard MSI B450M mortar max
Cooling Vetroo V5 Arctic MX4
Memory 32gb Corsair Vengeance LPX 3200@3800mhz
Video Card(s) MSI GTX 1660 Super OC Ventus
Storage Samsung 870 QVO 1tb x 2, Lexar 256 GB, Western Digital 500 GB nvme
Display(s) 22'' Some p tv
Case Aerocool Eclipse
Audio Device(s) Razer Kraken 2019 Edifier M201BT
Power Supply MSI MPG AGF 850 watt gold
Mouse Logitech M510
Keyboard Dell KB212-B
Software Windows 10 pro
Benchmark Scores Cinebench R23 multicore 9995 single 1274 7.84 3d mark : Timespy 6180
Even though I'm on AMD, this is an amazing find. Well done @unclewebb
 
Joined
May 9, 2012
Messages
7,448 (1.99/day)
Location
Ovronnaz, Wallis, Switzerland
System Name main/SFFHTPCARGH!(tm)/Xiaomi Mi TV Stick/Poco F3 5G/Formuler Z7+/Realme Pad
Processor Ryzen 5 3600 @4.2/i7-3770/S905X/Snapdragon SD870 5G/HiSilicon Hi3798MV200/Helio G80
Motherboard MSI MAG B550 Tomahawk/HP SFF Q77 Express/uh?/uh?/uh?/UH?!?!?!???
Cooling Enermax ETS-T50 Axe aRGB /basic HP HSF /Aluminum heatsink/Heatpipe/Aluminum heatsink/Aluminum
Memory 2x8gb G.Skill Aegis DDR4/8gb DDR3 1600/2gb LPDDR3/6gb LPDDR5 dual channel/2gb LPDDR4/6gb LPDDR4x
Video Card(s) Powercolor Red Devil RX 6700 XT 12gb/Asus GT 730 2gb/Mali 450MP5/Adreno 650/Mali 450MP4/Mali-G52 MC2
Storage 250gb 870EVO/500gb 860EVO/2x1tb/NVMe 512gb+1tb/1tbSE770G&P1-Arion/500gb/8gb/128gb/8gb+uSD 64gb/128gb
Display(s) X58222 32" 2880x1620/273E3LHSB 27" 1920x1080/Samsung E4 6.67" FHD+120hz/32"FHDTV/10.4" IPS 1200x2000
Case Cougar Panzer Max/Elite 8300 SFF/None/back/front glass GG5/OTT/Aluminum
Audio Device(s) Fiio Q1 Mark II+Logitec Z333/SB Audigy RX/HDMI/Nothing ear (1)/HDMI/quad speaker Dolby Atmos
Power Supply Chieftec Proton BDF-1000C /HP 240w/12v 1.5A/4Smart VoltHub PD/QC3.0 9-12V 1.96A
Mouse Speedlink Sovos Vertical-Asus ROG Spatha-Logitech MX Ergo/Xiaomi XMRM-006/touch/Formuler Q2F9
Keyboard Deltaco DK440R/none/touch/Formuler RCU 02F9
VR HMD Medion Erazer
Software Win10 64/Win8.1 64/Android 5.1.1 custom/Android TV 8.1/Android 12/Android 7.0/Android 11
Benchmark Scores bench...mark? i do leave mark on bench sometime, to remember which one is the most comfortable. :o
I have a fix too...AMD CPU :roll: (couldn't resist :))
and here i was, "awwwww defender is the issue" and then read "AMD cpu not affected" proceed to "oh, so Defender is perfectly fine ... Intel is the issue"

did they use a "performance boost shortcut that turned ou to be a vulnerability" (after mitigation: also a loss of performance ) but failed and instead made an issue?

nonetheless AWESOME @unclewebb :lovetpu: fantastic job!

@ThrashZone actually Defender is perfectly fine ... and other "real" antivirus always turned bad later on ... (free or not)
i use defender since i switched to Win 8.1 and never had any issue ever (which i had with "real" antivirus which were ranging from "ressources hog" to "not efficient at all and had to do all manually or reinstall" to me every single paid/subscription even the "free" version of them are just scam. )
 
Last edited:
Joined
Jan 14, 2019
Messages
2,858 (2.19/day)
Location
Midlands, UK
System Name Nebulon-B Mk. 3
Processor Intel Core i7-11700 @ ASUS Optimized (200 W)
Motherboard ASUS TUF B560M-Plus (WiFi)
Cooling be quiet! Silent Loop 2 280 mm
Memory 2x 16 GB Kinston Fury Beast RGB 3200 MHz
Video Card(s) ASUS TUF Radeon RX 6500 XT @ 2975/2400
Storage 1 TB Crucial P5, 1 TB Crucial P5 Plus
Display(s) Samsung C24F390, 7" Waveshare touchscreen
Case Corsair Crystal 280X black
Audio Device(s) Genius SP-HF160, AKG Y50
Power Supply Seasonic Prime GX-750
Mouse Cherry MW 8 Advanced
Keyboard MagicForce 68
Software Windows 10 Pro
Benchmark Scores Cinebench R23 multi core: 14,000, single core: 1,500. Superposition 1080p Extreme: 2,935.
You can be running Cinebench or playing a game or moving the mouse or using your computer however you normally use your computer. Whatever Windows Defender is doing, it can have a big negative impact on performance. Do some 3D Mark testing while Windows Defender has the counters set to 0x222 and then do a similar test when this is not happening. The drop in performance should be obvious.
Wow! This is night and day. :eek:

Here's a Cinebench run after a normal startup (Steam and GOG Galaxy running in the background):
defender.png


And here's a Cinebench run after clicking "Reset Counters" (Steam and GOG Galaxy still running in the background):
normal.png
 

OneMoar

There is Always Moar
Joined
Apr 9, 2010
Messages
8,384 (1.86/day)
Location
Rochester area
System Name RPC MK2.5
Processor Ryzen 5800x
Motherboard Gigabyte Aorus Pro V2
Cooling Enermax ets-t50
Memory CL16 BL2K16G36C16U4RL 3600 1:1 micron e-die
Video Card(s) GIGABYTE RTX 3070 Ti GAMING OC
Storage ADATA SX8200PRO NVME \512GB Intel 545s ssd \500GB ADATA SU800 ssd 3TB Spinner
Display(s) 1440p Dell
Case Phanteks P300 /w 300A front panel conversion
Audio Device(s) onboard
Power Supply HX 750i
Mouse Kone burst Pro
Keyboard redragon k580 vata /w QMK-ORGB
Software Windows 11 +startisallback
cue microsoft & intel patching this in 3 2 1 ...
 
Last edited:

unclewebb

ThrottleStop & RealTemp Author
Joined
Jun 1, 2008
Messages
4,933 (0.95/day)
For a long time some people have noticed that HWiNFO was not reporting the full effective clock speed when the CPU was fully loaded. This was not a problem with HWiNFO. This happens because Windows Defender is changing the system counters that HWiNFO is trying to use. This interferes with HWiNFO's Effective Clock results.

The small difference in Effective Clock speed when fully loaded does not accurately indicate the drop in performance.
Many users might have noticed this issue but chose to ignore it, thinking it was not that important.

1656353536616.png


1656353615027.png
 
Joined
Feb 20, 2020
Messages
5,252 (5.80/day)
Location
Texas
System Name Ghetto Rigs x299 & z490 & x99
Processor 9940x w/Optimus SigV2 & 10900k w/Optimus Foundation & 5930k w/Noctua D15
Motherboard X299 Rampage VI Apex & z490 Maximus XII Apex & x99 Sabertooth
Cooling D5 combo/280 GTX/ VRM water block copper/280 GTX/ D5 Top/Optimus sigV2/TitanXp/Mora 360x2
Memory Trident-Z 3600C16 4x8gb & Trident-Z Royal 4000c16 2x16gb & Trident-Z 3200c14 4x8gb
Video Card(s) 1080ti FTW3 & Titan Xp & evga 980ti gaming
Storage 970 evo plus 500gb & 970 evo 500gb many sammy 2.5" ssd's and WD BLK hdd's
Display(s) 1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case D450 second floor for 2nd rad x2/ Cherry Entertainment center on Test bench
Audio Device(s) Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply EVGA 1200P2 & 1000P2 with APC AX1500 & 850P2 with CyberPower-GX1325U & 750P2
Mouse Redragon Perdition x3
Keyboard G710+x3
Software Win-7 pro x3 and Linux Cinnamon 20.2x2 & win-10 & 11pro x3
Benchmark Scores Are in the benchmark section
and here i was, "awwwww defender is the issue" and then read "AMD cpu not affected" proceed to "oh, so Defender is perfectly fine ... Intel is the issue"

did they use a "performance boost shortcut that turned ou to be a vulnerability" (after mitigation: also a loss of performance ) but failed and instead made an issue?

nonetheless AWESOME @unclewebb :lovetpu: fantastic job!

@ThrashZone actually Defender is perfectly fine ... and other "real" antivirus always turned bad later on ... (free or not)
i use defender since i switched to Win 8.1 and never had any issue ever (which i had with "real" antivirus which were ranging from "ressources hog" to "not efficient at all and had to do all manually or reinstall" to me every single paid/subscription even the "free" version of them are just scam. )
Hi,
No thanks I'll stick with the "bad third party" mbam pro and keep getting rid of pretender :cool:
 
Joined
Jan 14, 2019
Messages
2,858 (2.19/day)
Location
Midlands, UK
System Name Nebulon-B Mk. 3
Processor Intel Core i7-11700 @ ASUS Optimized (200 W)
Motherboard ASUS TUF B560M-Plus (WiFi)
Cooling be quiet! Silent Loop 2 280 mm
Memory 2x 16 GB Kinston Fury Beast RGB 3200 MHz
Video Card(s) ASUS TUF Radeon RX 6500 XT @ 2975/2400
Storage 1 TB Crucial P5, 1 TB Crucial P5 Plus
Display(s) Samsung C24F390, 7" Waveshare touchscreen
Case Corsair Crystal 280X black
Audio Device(s) Genius SP-HF160, AKG Y50
Power Supply Seasonic Prime GX-750
Mouse Cherry MW 8 Advanced
Keyboard MagicForce 68
Software Windows 10 Pro
Benchmark Scores Cinebench R23 multi core: 14,000, single core: 1,500. Superposition 1080p Extreme: 2,935.
and here i was, "awwwww defender is the issue" and then read "AMD cpu not affected" proceed to "oh, so Defender is perfectly fine ... Intel is the issue"

did they use a "performance boost shortcut that turned ou to be a vulnerability" (after mitigation: also a loss of performance ) but failed and instead made an issue?
Actually, Defender is the issue... on a few select Intel platforms. :roll: (including mine) :(
 

unclewebb

ThrottleStop & RealTemp Author
Joined
Jun 1, 2008
Messages
4,933 (0.95/day)
AMD cpu not affected
AMD CPUs have not been tested yet. They might have a similar issue where Windows Defender is hard at work, doing something in the background that it really does not need to be doing.

microsoft patching this in 3 2 1 ...
Given that this issue has been around for years, it will likely take longer than that.

Wow! This is night and day.
Thanks for posting your results.

Was this all just an honest mistake or was someone trying to make Intel CPUs look slower than they are? All CPU reviews during the last few years are suddenly suspect if they were not testing for this issue. Windows Defender can start and stop this part of its algorithm at any time. As soon as it starts, performance tanks.
 
Joined
May 9, 2012
Messages
7,448 (1.99/day)
Location
Ovronnaz, Wallis, Switzerland
System Name main/SFFHTPCARGH!(tm)/Xiaomi Mi TV Stick/Poco F3 5G/Formuler Z7+/Realme Pad
Processor Ryzen 5 3600 @4.2/i7-3770/S905X/Snapdragon SD870 5G/HiSilicon Hi3798MV200/Helio G80
Motherboard MSI MAG B550 Tomahawk/HP SFF Q77 Express/uh?/uh?/uh?/UH?!?!?!???
Cooling Enermax ETS-T50 Axe aRGB /basic HP HSF /Aluminum heatsink/Heatpipe/Aluminum heatsink/Aluminum
Memory 2x8gb G.Skill Aegis DDR4/8gb DDR3 1600/2gb LPDDR3/6gb LPDDR5 dual channel/2gb LPDDR4/6gb LPDDR4x
Video Card(s) Powercolor Red Devil RX 6700 XT 12gb/Asus GT 730 2gb/Mali 450MP5/Adreno 650/Mali 450MP4/Mali-G52 MC2
Storage 250gb 870EVO/500gb 860EVO/2x1tb/NVMe 512gb+1tb/1tbSE770G&P1-Arion/500gb/8gb/128gb/8gb+uSD 64gb/128gb
Display(s) X58222 32" 2880x1620/273E3LHSB 27" 1920x1080/Samsung E4 6.67" FHD+120hz/32"FHDTV/10.4" IPS 1200x2000
Case Cougar Panzer Max/Elite 8300 SFF/None/back/front glass GG5/OTT/Aluminum
Audio Device(s) Fiio Q1 Mark II+Logitec Z333/SB Audigy RX/HDMI/Nothing ear (1)/HDMI/quad speaker Dolby Atmos
Power Supply Chieftec Proton BDF-1000C /HP 240w/12v 1.5A/4Smart VoltHub PD/QC3.0 9-12V 1.96A
Mouse Speedlink Sovos Vertical-Asus ROG Spatha-Logitech MX Ergo/Xiaomi XMRM-006/touch/Formuler Q2F9
Keyboard Deltaco DK440R/none/touch/Formuler RCU 02F9
VR HMD Medion Erazer
Software Win10 64/Win8.1 64/Android 5.1.1 custom/Android TV 8.1/Android 12/Android 7.0/Android 11
Benchmark Scores bench...mark? i do leave mark on bench sometime, to remember which one is the most comfortable. :o
Actually, Defender is the issue... on a few select Intel platforms.:roll: (including mine) :(
well the issue is caused by Intel thus Intel is the cause then?

AMD CPUs have not been tested yet. They might have a similar issue where Windows Defender is hard at work, doing something in the background that it really does not need to be doing.
if they have, i do not notice it ;) defender is at 0% Malware protection is at 0.2% which is MsMp (and also use half the RAM your screenshot show )

@ThrashZone MBAM is ok ... but i meant other AV like well ... Norton and co which are more akin to malware than AV in the end
and defender was recognized as one of the best (if not the best) in the AV category, some time ago, although i do not remember the source but i am 100% sure i did read it somewhere
 
Joined
Jan 14, 2019
Messages
2,858 (2.19/day)
Location
Midlands, UK
System Name Nebulon-B Mk. 3
Processor Intel Core i7-11700 @ ASUS Optimized (200 W)
Motherboard ASUS TUF B560M-Plus (WiFi)
Cooling be quiet! Silent Loop 2 280 mm
Memory 2x 16 GB Kinston Fury Beast RGB 3200 MHz
Video Card(s) ASUS TUF Radeon RX 6500 XT @ 2975/2400
Storage 1 TB Crucial P5, 1 TB Crucial P5 Plus
Display(s) Samsung C24F390, 7" Waveshare touchscreen
Case Corsair Crystal 280X black
Audio Device(s) Genius SP-HF160, AKG Y50
Power Supply Seasonic Prime GX-750
Mouse Cherry MW 8 Advanced
Keyboard MagicForce 68
Software Windows 10 Pro
Benchmark Scores Cinebench R23 multi core: 14,000, single core: 1,500. Superposition 1080p Extreme: 2,935.
Thanks for posting your results.
No problem. I hope something can be done to bring this to Microsoft's attention and fix this.

Was this all just an honest mistake or was someone trying to make Intel CPUs look slower than they are? All CPU reviews during the last few years are suddenly suspect if they were not testing for this issue. Windows Defender can start and stop this part of its algorithm at any time. As soon as it starts, performance tanks.
It starts as soon as you boot up the system. I think Intel would be under more suspicion if AMD CPUs were slowed down. Who would want to cripple Intel? Microsoft? Nah, they're best buddies for life.

well the issue is caused by Intel thus Intel is the cause then?
How is it caused by Intel?
 
Top