

Task Scheduler and Event Viewer can be opened as separate apps from the Start Menu, but they can also be launched together in a Computer Management utility by typing WindowsKey+R> compmgmt.msc> This panel provides easy access to several other advanced utilities, including: Disk Management> Background Service, Device Manager, and Shared Folders. These logs are EXTENSIVE so unless you know the precise time of the event, you'll need Filter or Search the logs using the sidebar. Of related interest, you can use the Event Viewer App to see system logs, (like startup scans resulting from improper shutdown): If you just want to keep an eye on your background scans, you can also see the last run time of the scheduled scan in the Scheduler, and in the sidebar you can "Enable All Tasks History". Once you stop that from auto-starting, no background process will be running and it will have no affect on your system performance.

Task Schedular> Microsoft> Windows>Window Defneder> Windows Defender Scheduled Scan> "Disable" in sidebar> Yes that is correct, stop MalwareBytes from starting with Windows and only scan with that when your need to, that is the best way to use MalwareBytes, there is no need tot have that running in the background. Instead, use the Task Scheduler App to turn off * scheduled* background scans: What ever anti virus you remove please use their removal tool found on line to do the job correctly. I wasn't aware that this specific file runs in kernel mode, since that's the case.
STOP MALWAREBYTES FROM RUNNING IN BACKGROUND DRIVER
I see, because MBAMService.exe service and driver is running in kernel mode, a restart is (generally always) necessary. Settings> Update & Security > Windows Security > Virus & threat protection > Manage settings> But this is NOT what you want to do! You would only do this if windows is stopping you from running a game or some other program you know is safe. First I would keep Malwarebytes Anti Malware. Stopping a service that runs in kernel mode is a bad idea in general, and MBAMService is no exception to that.

You can only turn off * real-time* protection in the standard Windows settings pane:
