Question Bitdefender antivirus

Please provide comments and solutions that are helpful to the author of this topic.

chetuyet.hp

Level 1
Thread author
Dec 11, 2022
17
74
29
Can you tell me. Why Bitdefender antivirus has so many processes running? It has up to 11 processes running simultaneously.
Screenshot 2025-10-30 203137.png

Screenshot 2025-10-30 203207.png

I only installed Bitdefender Antivirus. But why is there also Bitdefender Agent? Should I remove Bitdefender Agent? What is the function of Bitdefender Agent?
Screenshot 2025-10-30 203829.png
 
Can you tell me. Why Bitdefender antivirus has so many processes running? It has up to 11 processes running simultaneously.
View attachment 292506
View attachment 292507
I only installed Bitdefender Antivirus. But why is there also Bitdefender Agent? Should I remove Bitdefender Agent? What is the function of Bitdefender Agent?
View attachment 292508
Hey @chetuyet.hp,

That's a fair question—Bitdefender can indeed look a bit "busy" in Task Manager with all those processes running. It's totally normal, though, and not a sign of anything wrong. Modern antivirus suites like Bitdefender are designed as modular systems to handle a bunch of different security tasks efficiently without putting everything into one massive process (which could slow things down or make it less stable). This way, they can run in the background without hogging resources, and if one part needs to update or restart, it doesn't affect the whole thing.

From what I can see in your screenshots, you've got processes like bdservicehost (which handles core scanning and protection services—sometimes multiple instances for different modules), bdagent (the main agent that coordinates everything), bdredline (related to network monitoring and threat detection), and others for updates, firewall, or device control. Bitdefender often spins up around 8-12 processes depending on your setup and what's active (e.g., if real-time scanning, VPN, or anti-ransomware is enabled). It's similar to how Windows Defender (as in your second screenshot) spreads out its workload across processes like MsMpEng or SecurityHealthService.

If it's bothering you performance-wise, you could check Bitdefender's settings to tweak things like scan schedules or disable unused features, but I wouldn't recommend killing processes manually—that could weaken your protection. If you think something's off (like unusually high CPU usage), running a repair install from the Control Panel (as shown in your third screenshot) or reaching out to Bitdefender support might help.

What's your system specs like? That could give more context if it's feeling sluggish.
 
Your first screen shot shows 2 bitdefender agents: one with a capital "A", and one with a lower case "a". highlight each and right click 'go to detailis' and see what each says. That doesnt look right to me. Although I dont use BitDefender. Then in the Details screen, right click on the column header area and choose to display the Command Line column. Then see which folder where each of the two agents are residing,
 
Your first screen shot shows 2 bitdefender agents: one with a capital "A", and one with a lower case "a". highlight each and right click 'go to detailis' and see what each says. That doesnt look right to me. Although I dont use BitDefender. Then in the Details screen, right click on the column header area and choose to display the Command Line column. Then see which folder where each of the two agents are residing,
These are those two processes.
Screenshot 2025-10-30 211638.png
 
They don't charge you per process so don't worry. But yeah, that’s actually expected behaviour for Bitdefender.
It runs a lot of background processes, but each one has a specific role.

bdservicehost.exe - main service host, handles core protection, real-time scanning, and updates
Bitdefender Agent - communication bridge between the AV and Bitdefender Central
Bitdefender Network OS Helper - web protection and network scanning
BitDefender Update Downloader / Update Service - signature and software updates
Bitdefender Redline Update - product update verification and module refresh

Anyways, you shouldn't worry. Many products use separate processes for each module, for several reasons:
  • Isolation: If one service crashes, others keep working
  • Permissions: Some modules need system-level privileges, others don’t
  • Performance: Lets Windows schedule them efficiently across CPU cores
 
I have two computers. On one computer I installed ESET antivirus and on the other I installed Bitdefender antivirus. With ESET, it only uses about over 100MB of RAM for all processes. But with Bitdefender, I see it uses more than 300MB of RAM for all processes.
What do you think about the RAM usage of these two software programs?
 
I have two computers. On one computer I installed ESET antivirus and on the other I installed Bitdefender antivirus. With ESET, it only uses about over 100MB of RAM for all processes. But with Bitdefender, I see it uses more than 300MB of RAM for all processes.
What do you think about the RAM usage of these two software programs?
I've never liked that, no matter what the reasoning or "excuses" were, and is partly why I don't use it.

Also, I wouldn't run to many BD full System Scans, have Task Manager open while its running and you'll see what I mean. Just run the occasional Quick Scan (and 2nd opinion scans) and let the real time and on access scanning do most of the work.

edit: when I was using BD Total, I was averaging about 320 - 350 MB of RAM, at times it spiked to 750, and is when I uninstalled it. Right now Avast free with it 7 main processes uses 204 MB of RAM, and has excellent protection. And there is the idea that RAM is meant to be used, but I still find some of the other companies AV's are more efficient with their engineering, as you're pointing out, noticing.
 
Last edited:
But are you sure that using around 300 MB of RAM when there are still many MB of free RAM left can affect your PC's performance? If there's still so much free RAM that BD uses 100 MB or 300-400 MB of it, what difference does it make? In my opinion, however, the CPU usage at "idle" is different, which is very low for BD anyway.
 
But are you sure that using around 300 MB of RAM when there are still many MB of free RAM left can affect your PC's performance? If there's still so much free RAM that BD uses 100 MB or 300-400 MB of it, what difference does it make? In my opinion, however, the CPU usage at "idle" is different, which is very low for BD anyway.
Which it can come down to personal preferences, as also with an apps stability. Is one more prone to glitches (exceptions not being saved, updater finding 1.1 GB phantom Windows update etc.)? And of features needed or used, like back up and restore of saved settings which Eset has. Did BD ever implement that?
 
Last edited:
Tutto questo può dipendere dalle preferenze personali, così come dalla stabilità di un'app. È più probabile che si verifichino problemi (eccezioni non salvate, aggiornamenti che trovano un aggiornamento fantasma di Windows da 1,1 GB, ecc.)? E quali sono le funzionalità necessarie o utilizzate, come il backup e il ripristino delle impostazioni salvate, come quelle di Eset? BD le ha mai implementate?
That's another story...... :D
 
A reply I got on the forum awhile back from one of the developers, is that it's a way to help share the load, and a redundancy back up of some of the seemingly duplicated processes in case something happens one of the other processes will cover it.
Yes, the main benefit of multi-process architecture is stability and safety. Performance can be achieved through multi-threading as well.

Having many processes means if there is an error in one of them, the rest is not affected.

When you run a very high number of logics, this is the recommended architecture.
 
Yes, the main benefit of multi-process architecture is stability and safety. Performance can be achieved through multi-threading as well.

Having many processes means if there is an error in one of them, the rest is not affected.

When you run a very high number of logics, this is the recommended architecture.
When comparing OnlyOffice to MS Office, OO runs 5 or more processes, uses much more RAM, and when opening large number (>15) of files, it crashes, while MSO runs only two, uses way less RAM, and does not crash with opening large number of files.
 
When comparing OnlyOffice to MS Office, OO runs 5 or more processes, uses much more RAM, and when opening large number (>15) of files, it crashes, while MSO runs only two, uses way less RAM, and does not crash with opening large number of files.
Yes, stability is not dependant just on that, it depends on many factors, mainly on how many of the potential errors are predicted and handled. But assuming that Bitdefender in all these years has handled main errors that can lead to a crash, this gives them a stability and persistence boost.

Of course, if your code is inefficient, you can have 32 processes with 64 threads each and you can crash all of them. 😂
 
Yes, stability is not dependant just on that, it depends on many factors, mainly on how many of the potential errors are predicted and handled. But assuming that Bitdefender in all these years has handled main errors that can lead to a crash, this gives them a stability and persistence boost.

Of course, if your code is inefficient, you can have 32 processes with 64 threads each and you can crash all of them. 😂
Or in Eset's case with very few processes, how many times do we hear of that crashing? Granted, they don't have the behavior blocker like BD has.
 
Or in Eset's case with very few processes, how many times do we hear of that crashing?
Norton as well had only 2 processes and they were mostly stable and persistent.

Over time you handle these unpredicted scenarios one by one and the architecture becomes more stable.

However, the more sensible architecture by the book is to isolate large sequences and loops in a separate process.

There is no right or wrong, it’s just different.

Bitdefender until one point didn’t have so many processes, majority of them were added throughout the years, some like the PCHookLaunch32 and 64 were removed.
It is likely that through trial and error Bitdefender discovered this architecture works for them better.