If the Mac you use is managed by the company or other large organization you work for, it probably has lots of software on it to manage security and make sure that when you access the organization’s networks, you do so securely. The software tools installed on your Mac will be dependent on what the organization uses to detect threats to its networks. In many cases, that means Microsoft Defender, which works on both Macs and PCs. Microsoft Defender is the successor to Windows Defender, and some of its underlying processes still retain elements of the old name. Such is the case with wdavdaemon, which gets its name from an abbreviation of Windows Defender Antivirus Daemon. Many Mac users have noticed that wdavdaemon uses lots of system resources and slows their Mac down. In this article, we’ll show you how to fix wdavdaemon high CPU usage on your Mac.

What is wdavdaemon?

wdavdaemon takes its name from Windows Defender Antivirus Daemon. It’s a process used by Microsoft Defender and its presence on your Mac is probably explained by the fact that the Mac is currently or was at some point managed by an organization that used Defender to combat malware and protect its network. It may have been installed before the Mac was given to you or as part of the setup process when you first received it.

Why does wdavdaemon have high CPU usage?

There are a number of possible reasons why wdavdaemon might be using lots of CPU cycles on your Mac. Sadly, while many users have noticed the same thing, there is no single explanation. It could be an issue with Microsoft Defender. For example, that it’s not optimized for the version of macOS installed on your Mac. Or it could be that something it has found while scanning is causing it a problem. Or it could even be the way it has been configured. Real-time threat monitoring needs to strike a balance between security and its use of resources. In many cases, it seems that Defender doesn’t do that and wdavdaemon consumes way more than its fair share of CPU cycles.

How to check wdavdaemon CPU usage

There is a simple way to check how many CPU cycles wdavdaemon is using and whether it is using more than its fair share.

  1. Go to Applications > Utilities and open Activity Monitor.
  2. Click the CPU tab.
  3. You will see processes listed in order of the CPU cycles they are using. Normally, the list starts with the highest consumers, and the arrow next to CPU at the top of the column points down. If that’s not the case, click the column header to see the highest consumers at the top.
  4. Look for wdavdaemon on the list of all active processes.

How to fix wdavdaemon high CPU usage on your Mac

There are a couple of ways to fix wdavdaemon CPU usage in the long term. One is to update Windows Defender if there is an update available. The other is to uninstall it completely. However, if your Mac is managed by the organization you work for, those options may not be available to you. There are a few things you can try, however, that may help in the short term.

1. Check for malware

One reason wdavdaemon may use a lot of CPU on your Mac is that it has detected malware that is causing problems. Depending on the malware, Defender could use a lot of CPU cycles. To find out whether that’s the case, you need to scan your Mac for malware using a specialist cleaner tool. We recommend CleanMyMac’s Protection tool.

It scans your Mac looking for adware, ransomware, cryptocurrency miners, and other malware using its Moonlock technology. You can choose whether to run a deep, quick, or balanced scan. Also, you can choose whether to invoke the scan manually or have it run in the background and automatically detect threats. You can download CleanMyMac for free here. Here’s how to use it to find out if your Mac has been infected by malware:

  1. Open CleanMyMac and choose the Protection tool in the sidebar.
  2. Click Scan.
  3. Wait for it to finish. If it finds anything suspicious, follow the instructions on the screen to remove it.
  4. You can also click Review Found Threats to look at what CleanMyMac found. And then select what you want deleted and click Remove.
Scan completed in malware removal module of CMM

2. Restart your Mac in safe mode

When you boot into safe mode, it loads only those extensions needed for your Mac to start up. If a launch agent or extension is conflicting with wdavdaemon and causing it to use lots of CPU cycles, restarting in safe mode will reveal that. You can then restart normally, disable extensions in System Settings > General > Login Items, and then turn them on again one by one until you find the culprit. You will need to restart normally each time you enable an extension.

There are different processes for rebooting in Safe mode on Apple Silicon and Intel Macs. You can find the process for your Mac on Apple’s website here.

3. Clear out system junk

System junk includes files like temporary files that were never deleted, old cache files, settings files for applications that are no longer on your Mac, and language files for languages you don’t use. As well as taking up space on your Mac, these files can cause conflicts with other files on your Mac, making it run slowly or become unstable. Whenever you experience a problem like wdavdaemon using lots of CPU cycles, it’s a good idea to clear out system junk. Doing that manually is difficult and time-consuming because you need to track down every junk file and drag it to the Trash. However, you don’t have to do it manually. CleanMyMac's Cleanup tool can do it for you with just a couple of clicks:

  1. Once again, open CleanMyMac.
  2. Click Cleanup > Scan > Clean.
  3. You can also click Review All Junk and manually choose items to delete between System Junk, Mail Attachments, and Trash Bins.

4. Reinstall Windows Defender

Depending on how the Mac you’re using is configured, you may be able to reinstall Windows Defender. For example, if the organization managing it uses a mobile device management (MDM) tool, it may have installed a self-service app to allow you to install some applications and updates without the need for an admin password. Check to see if there is one installed on your Mac and, if so, whether it allows you to reinstall Windows Defender. If it does, use the reinstall option in the self-service app to reinstall Windows Defender. While you’re doing that, you could also use the app to update macOS. If not, you may need to speak to the organization’s IT support desk to reinstall it.

wdavdaemon is a process that runs in the background on your Mac when Windows Defender is installed. Usually, it works very well and does its job without you even realizing it’s there. However, you may sometimes notice that wdavdaemon has high CPU usage on your Mac. If that’s the case, follow the steps above to fix it and get your Mac running normally again.