Today I noticed in task manager that my processor was pinged at 100% usage.
CISVC.EXE was the culprit.
It was running from the ...winnt\system32 folder.
A google search found two possibilities:
1) It's a legitimate system process (Index Service Helper)
Process Viewer ( http://www.xmlsp.com/pview/prcview.htm ) shows it
associated with 2 instances of CIDAEMON.EXE.
2) It's a key-logger...
http://www.spyarsenal.com/spy-forum/messages/567.html
Searching for cisvc.txt came up empty. Also, cisvc.exe was found only in
winnt\system32 & ...\DLLcache.
I'm inclined to believe the process is legit... however, there was a
"security incident" a few months ago, which still has me on guard... and
perhaps over-reacting.
What do you'all think?
TIA,
Chris
