cancel
Showing results for 
Search instead for 
Did you mean: 
johnmmeni
Level 7

HIPS process (FireSVC.exe) causing High CPU usage @ 35%

The HIPS 8.0 Patch1 is causing a high CPU usage on my server.

Time:     2/14/2012 11:56:34 PM

Event:     Intrusion

IP Address/User:     NT AUTHORITY\SYSTEM

Description:     Host Process for Windows Services (svchost)

Path:     C:\WINDOWS\SYSTEM32\SVCHOST.EXE

Message:     Attack type: CMD Tool Access by a Network Aware Application (Sig Id = 1148)

Time:     2/15/2012 12:01:47 AM

Event:     Intrusion

IP Address/User:     NT AUTHORITY\SYSTEM

Description:     Host Process for Windows Services (svchost)

Path:     C:\WINDOWS\SYSTEM32\SVCHOST.EXE

Message:     Attack type: CMD Tool Access by a Network Aware Application (Sig Id = 1148)

Time:     2/15/2012 12:07:05 AM

Event:     Intrusion

IP Address/User:     NT AUTHORITY\SYSTEM

Description:     Host Process for Windows Services (svchost)

Path:     C:\WINDOWS\SYSTEM32\SVCHOST.EXE

Message:     Attack type: CMD Tool Access by a Network Aware Application (Sig Id = 1148)

0 Kudos