Recently an svchost.exe has started taking up 50% of the cpu, I found that is related to the NSI service. However I hit a dead end. I have no viruses or rootkits that could cause this (I checked.) So here is my question(s).
I know NIS is a service that deals with internet connectivity, would restarting it be practical if this happens again? Is there a way for me to look into just what this service is actually doing?
Is there a program that can monitor for a spike of activity with that service so I can try and nail down the cause? Is there a way to find out what might have happened in the event viewer or an equivalent program? Is there someone who would be really knowledgeable about this?