Just been running TCPView for something completely unrelated, however I noted that FireSvc.exe appears to be connecting to a McAfee IP over HTTPS. What is the purpose of this connection?
Trusted Source... McAfee KnowledgeBase - TrustedSource functionality for Host Intrusion Prevention 8.0 <slaps self on head>. One of my colleagues sensibly pointed this out :-)
I would have thought it would be mfefire, and not firesvc for this, however?