Microsoft Defender 防病毒软件(Microsoft Defender Antivirus)（以前称为Windows Defender）提供全天候保护，以抵御Windows设备上的各种威胁。尽管它是一个独立的安全工具，但它由幕后的几个微进程提供支持。
这些微进程有助于Microsoft Defender 防病毒软件(Microsoft Defender Antivirus)的正常运行。MsMpEng.exe和MpCmdRun.exe是支持(MpCmdRun.exe)Microsoft Defender的重要核心进程的良好示例。
在此解释器中，我们将介绍MpCmdRun.exe在您的Windows计算机上的作用、如何使用它来管理Microsoft Defender以及进程出现故障时该怎么办。
什么是 MpCmdRun.exe？
MpCmdRun 是恶意软件保护命令行实用程序(Malware Protection Command Line Utility)。MpCmdRun.exe由微软(Microsoft)开发并内置于所有Windows设备，是构成Windows防御系统的可执行文件。它是一个重要的命令行工具，专用于在Windows设备上自动执行Microsoft Defender 防病毒(Microsoft Defender Antivirus)操作。
该实用程序的核心功能是保护您的计算机免受恶意软件攻击和其他威胁。有趣的是，您还可以使用 mpcmdru.exe 来管理、配置和操作Microsoft Defender 防病毒(Microsoft Defender Antivirus)软件本身。下一节将对此进行更多介绍。
如何在Windows 10中(Windows 10)访问(Access)和使用(Use)mpcmdrun.exe
MpCmdRun.exe没有图形用户界面 ( GUI )。它的结构是通过Windows 命令提示符(Windows Command Prompt)运行。右键单击(Right-click)开始(Start)菜单图标，然后在快速访问菜单上选择命令提示符（管理员） 。(Command Prompt (Admin))
之后(Afterward)，将下面的命令粘贴到命令提示符(Command Prompt)控制台中，然后按Enter继续。
“%ProgramFiles%\Windows Defender\MpCmdRun.exe”
该命令将显示恶意软件保护命令行实用程序(Malware Protection Command Line Utility)的所有可用选项和操作。查看(Look)选项并确定您要执行的操作。要使用命令提示符(Command Prompt)中的 mpcmdrun.exe 执行任务，请在控制台中键入/粘贴“%ProgramFiles%\Windows Defender\MpCmdRun.exe”，留一个空格，输入操作的命令，然后按Enter。
例如，要运行完整的系统扫描，请在命令提示符(Command Prompt)控制台中键入或粘贴“%ProgramFiles%\Windows Defender\MpCmdRun.exe” -Scan -ScanType 2 ，然后按键盘上的Enter 。
这将触发Microsoft Defender 防病毒软件(Microsoft Defender Antivirus)扫描您的整个计算机以查找恶意软件、病毒和其他形式的威胁。扫描完成后，您将在通知区域或Windows 操作中心收到(Windows Action Center)Windows 安全(Windows Security)通知。
Microsoft Defender将自动中和并针对它检测到的任何威胁采取措施。单击通知以获取有关恶意程序或威胁的详细报告。
阅读此 Microsoft 官方文档(this official Microsoft documentation)以了解您可以使用MpCmdRun.exe命令行工具执行的更多命令。
mpcmdrun.exe 安全吗？
您需要计算机上的恶意软件保护命令行实用程序(Malware Protection Command Line Utility)。该实用程序的可执行文件（即 mpcmdrun.exe）是一个安全的操作系统文件，适用于所有Windows设备。然而，尽管此文件具有合法性，但仍有几份报告表明网络攻击者可以使用 mpcmdrun.exe 文件通过 Internet 将文件下载到您的 PC。
幸运的是，有几种方法可以确定您计算机上MpCmdRun.exe可执行文件的合法性。我们在下面重点介绍其中一些。
1.检查文件的位置(1. Check the File’s Location)
您会在Windows计算机上的Windows Defender文件夹中找到MpCmdRun.exe 。启动文件资源管理器(File Explorer)，转到本地磁盘 (C:)(Local Disk (C:)) >程序文件(Program Files)> Windows Defender，然后找到 MpCmdRun.exe。
C:\Program Files\Windows Defender粘贴到文件资源管理器的地址栏中，然后按Enter。
2.检查数字签名(2. Check the Digital Signature)
Microsoft是恶意软件保护命令行实用程序(Malware Protection Command Line Utility)的创建者和开发者。如果 MpCmdRun.exe 在另一个目录（C:\Program Files\Windows Defender除外）中，则应验证文件的数字签名。这将帮助您确认您 PC 上的MpCmdRun.exe是否是恶意的，或者它是否被意外移动到了另一个文件夹。
在任务管理器(Task Manager)或文件资源(File Explorer)管理器中右键单击MpCmdRun.exe ，然后选择Properties。
前往数字签名(Digital Signature)选项卡并检查“签名者姓名”列。
如果该文件没有经过Microsoft Corporation的签名，那它肯定是一个伪装成合法系统文件的病毒。在这种情况下，请从您的计算机中删除该文件或使用您的防病毒软件或在线安全扫描程序对其进行扫描(online security scanners)。
修复 MpCmdRun.exe 问题
如果MpCmdRun.exe文件是恶意的，您的计算机可能无法运行恶意软件保护命令行实用程序。(Malware Protection Command Line Utility)或者，如果它意外地从Windows Defender文件夹中移出。(Windows Defender)如果可执行文件存在问题或您的 PC 已过时，Windows也可能会抛出几条错误消息。(Windows)
以下是一些可能导致MpCmdRun.exe命令行实用程序无法正常运行的问题的解决方案。
1.重启你的电脑(1. Restart Your Computer)
如果MpCmdRun.exe在后台消耗大量CPU和 Internet 带宽，我们建议您重启计算机。这应该会刷新您的设备，并有望解决导致该工具出现故障的问题。
2. 扫描病毒或恶意软件感染(2. Scan for Virus or Malware Infection)
MpCmdRun.exe文件可能是病毒，即使它位于您 PC 上的相应目录中。通过第三方防病毒应用程序或在线病毒扫描(online virus scanners)程序运行文件。如果您的安全工具将文件标记为危险或恶意文件，请从您的 PC 中删除该文件。
3.以管理员身份运行命令提示符(3. Run Command Prompt as Administrator)
如果命令提示符(Command Prompt)没有足够的权限，恶意软件保护命令行实用程序(Malware Protection Command Line Utility)可能无法执行某些操作。每当您需要使用MpCmdRun.exe公用行工具时，请确保启动命令提示符(Command Prompt)的管理员级别版本。
[02-launch-device-manager-windows-10]
4.更新你的电脑(4. Update Your Computer)
如果您在运行MpCmdRun.exe命令时收到“0x80070667”错误代码，那是因为您的 PC 运行的是旧的Windows 10版本。为获得最佳体验，请确保您的 PC 上安装了Windows 10版本 1703（或更高版本）。
转到设置(Settings)>更新和安全(Update & Security)> Windows 更新(Windows Update)以检查可用更新。
Microsoft Defender 防病毒软件(Microsoft Defender Antivirus)的安全智能(Intelligence)更新也与Windows 更新(Windows Updates)一起安装，确保您的 PC 免受最新威胁的侵害。
5. 运行系统文件检查器 (SFC) 实用程序(5. Run the System File Checker (SFC) Utility)
SFC 是一个命令行工具，用于修复和替换 Windows 设备上损坏的系统文件(fixes and replaces corrupted system files on Windows devices)。如果您从 PC 中删除了MpCmdRun.exe，可能是意外或由于恶意软件感染，请使用系统文件检查器(System File Checker)来恢复文件。将您的计算机连接到互联网，以管理员身份启动命令提示符，在终端中输入以下命令，然后按(Command Prompt)Enter。
DISM.exe /Online /Cleanup-image /Restorehealth
当您收到成功消息时，在终端中键入或粘贴sfc /scannow并按Enter。
该过程可能持续长达 30 分钟（或更长时间）。修复过程完成后重新启动计算机并检查是否恢复MpCmdRun文件并解决其他问题。
如果没有其他方法，您应该考虑在您的计算机上执行系统(System)还原或重新安装 Windows。
What Is mpcmdrun.exe and How To Use It
The Micrоsoft Defender Antivirus (formerly Windows Defender) offers round-the-clock protection against all kinds of threats on Windows devices. Despite being a standalone security tool, it is powered by several micro-processes behind the scenes.
These micro-processes contribute to the proper functioning of the Microsoft Defender Antivirus. MsMpEng.exe and MpCmdRun.exe are good examples of important core processes powering Microsoft Defender.
In this explainer, we’ll cover what MpCmdRun.exe does on your Windows computer, how you can use it to manage the Microsoft Defender, and what to do when the process malfunctions.
What Is MpCmdRun.exe?
MpCmdRun is the Malware Protection Command Line Utility. Developed by Microsoft and built-in all Windows devices, MpCmdRun.exe is an executable file that makes up the Windows defense system. It’s an important command-line tool dedicated to automating Microsoft Defender Antivirus operations on Windows devices.
The utility’s core function is to protect your computer against malware attacks and other threats. Interestingly, you can also use mpcmdru.exe to manage, configure, and operate the Microsoft Defender Antivirus software itself. More on this in the next section.
How to Access and Use mpcmdrun.exe in Windows 10
MpCmdRun.exe doesn’t have a graphical user interface (GUI). It’s structured to run via the Windows Command Prompt. Right-click the Start menu icon and select Command Prompt (Admin) on the Quick Access menu.
Afterward, paste the command below in the Command Prompt console and press Enter to proceed.
“%ProgramFiles%\Windows Defender\MpCmdRun.exe”
That command will display all available options and operations for the Malware Protection Command Line Utility. Look through the options and identify the operation you’d like to execute. To execute a task using mpcmdrun.exe from the Command Prompt, type/paste “%ProgramFiles%\Windows Defender\MpCmdRun.exe” in the console, leave a space, enter the operation’s command, and press Enter.
To run a full system scan, for example, type or paste “%ProgramFiles%\Windows Defender\MpCmdRun.exe” -Scan -ScanType 2 in the Command Prompt console and press Enter on your keyboard.
That’ll trigger the Microsoft Defender Antivirus to scan your entire computer for malware, viruses, and other forms of threats. When the scan is complete, you’ll get a Windows Security notification in the notification area or Windows Action Center.
Microsoft Defender will automatically neutralize and take action against any threat it detects. Click the notification to get a detailed report of the malicious program or threat.
Read this official Microsoft documentation to learn more commands that you can execute with the MpCmdRun.exe command-line tool.
Is mpcmdrun.exe Safe?
You need the Malware Protection Command Line Utility on your computer. The executable file powering the utility (i.e. mpcmdrun.exe) is a safe operating system file that works on all Windows devices. Despite the legitimacy of this file, however, there are several reports indicating that the mpcmdrun.exe file can be used by cyber attackers to download files to your PC via the internet.
Luckily, there are several ways to determine the legitimacy of the MpCmdRun.exe executable file on your computer. We highlight some of them below.
1. Check the File’s Location
You’ll find MpCmdRun.exe located in the Windows Defender folder on a Windows computer. Launch the File Explorer, go to Local Disk (C:) > Program Files > Windows Defender, and locate MpCmdRun.exe.
Alternatively, paste C:\Program Files\Windows Defender in the File Explorer’s address bar and press Enter.
2. Check the Digital Signature
Microsoft is the creator and developer of the Malware Protection Command Line Utility. If you MpCmdRun.exe in another directory (other than C:\Program Files\Windows Defender), you should verify the file’s digital signature. That’ll help you confirm whether or not the MpCmdRun.exe on your PC is malicious, or perhaps it was moved to another folder by accident.
Right-click MpCmdRun.exe in the Task Manager or File Explorer and select Properties.
Head to the Digital Signature tab and check the “Name of signer” column.
If the file isn’t signed by Microsoft Corporation, it’s most definitely a virus hiding under the guise of a legitimate system file. In that case, delete the file from your computer or scan it with your antivirus software or online security scanners.
Fix MpCmdRun.exe Issues
Your computer may fail to run the Malware Protection Command Line Utility if the MpCmdRun.exe file is malicious. Or, if it gets moved from the Windows Defender folder by accident. Windows may also throw off several error messages if there’s a problem with the executable file or if your PC is out-of-date.
Here are some potential solutions to issues preventing the MpCmdRun.exe command-line utility from functioning correctly.
1. Restart Your Computer
If MpCmdRun.exe is consuming an insane amount of CPU and internet bandwidth in the background, we recommend power-cycling your computer. That should refresh your device and hopefully fix issues causing the tool to malfunction.
2. Scan for Virus or Malware Infection
The MpCmdRun.exe file could be a virus, even if it’s in the appropriate directory on your PC. Run the file through a third-party antivirus app or online virus scanners. Delete the file from your PC if your security tool flags the file as dangerous or malicious.
3. Run Command Prompt as Administrator
The Malware Protection Command Line Utility may fail to execute certain operations if the Command Prompt doesn’t have enough privileges. Whenever you need to use the MpCmdRun.exe common-line tool, make sure you launch the administrator-level version of the Command Prompt.
[02-launch-device-manager-windows-10]
4. Update Your Computer
If you get a “0x80070667” error code when you run a MpCmdRun.exe command, that’s because your PC is running an old Windows 10 version. For the best experience, ensure you have Windows 10 version 1703 (or higher) installed on your PC.
Go to Settings > Update & Security > Windows Update to check for available updates.
Security Intelligence updates for the Microsoft Defender Antivirus are also installed alongside Windows Updates, ensuring your PC is protected against the latest threats.
5. Run the System File Checker (SFC) Utility
SFC is a command-line tool that fixes and replaces corrupted system files on Windows devices. If you removed MpCmdRun.exe from your PC, perhaps by accident or due to malware infection, use the System File Checker to restore the file. Connect your computer to the internet, launch Command Prompt as an administrator, enter the command below in the terminal, and press Enter.
DISM.exe /Online /Cleanup-image /Restorehealth
When you get a success message, type or paste sfc /scannow in the terminal and press Enter.
The process may last up to 30 minutes (or more). Restart your computer when the repair process is complete and check if that restores the MpCmdRun file and resolves other issues.
If nothing else works, you should consider performing a System restore or reinstalling Windows on your computer.
