0 Replies Latest reply on Feb 15, 2012 3:24 AM by johnmmeni

    HIPS process (FireSVC.exe) causing High CPU usage @ 35%

      The HIPS 8.0 Patch1 is causing a high CPU usage on my server.

       

       

       

      Time:     2/14/2012 11:56:34 PM

      Event:     Intrusion

      IP Address/User:     NT AUTHORITY\SYSTEM

      Description:     Host Process for Windows Services (svchost)

      Path:     C:\WINDOWS\SYSTEM32\SVCHOST.EXE

      Message:     Attack type: CMD Tool Access by a Network Aware Application (Sig Id = 1148)

       

      Time:     2/15/2012 12:01:47 AM

      Event:     Intrusion

      IP Address/User:     NT AUTHORITY\SYSTEM

      Description:     Host Process for Windows Services (svchost)

      Path:     C:\WINDOWS\SYSTEM32\SVCHOST.EXE

      Message:     Attack type: CMD Tool Access by a Network Aware Application (Sig Id = 1148)

       

      Time:     2/15/2012 12:07:05 AM

      Event:     Intrusion

      IP Address/User:     NT AUTHORITY\SYSTEM

      Description:     Host Process for Windows Services (svchost)

      Path:     C:\WINDOWS\SYSTEM32\SVCHOST.EXE

      Message:     Attack type: CMD Tool Access by a Network Aware Application (Sig Id = 1148)