Faulting application FireSvc.exe, version 18.104.22.1681, faulting module 4fcfa357, version KERNELBASE.dll, fault address 0x6.1.7601.17965 is reported in the application log.
The faulting module is always the same.
Shortly after the crash the system log reports the following repeatedly:
Timeout (30000 milliseconds) waiting for a transaction response from the enterceptAgent service.
Memory dumps show that an exception bnreakpoint was reached.
FiresSvc.exe remains resident, the HIPS self protection mechanisms probably prevent it from terminating gracefully.
Once in that state only a reboot can fix the problem.
Client Control and the HIPS user interface don't work anymore.
In that state servers have major issues with RPC, IIS; remote access to Windows logs and services.msc extremely slow, access to shares extremely slow.
I have only experienced this on Server 2008 R2.
Does anyone have similar issues?
It looks like this problem mostly occured in Version 22.214.171.1241 (Patch 2). In V 126.96.36.1992 (P2 with HF Rollup) and V 188.8.131.5219 (Patch 4) it happens less frequent.