Can you give the CPU, Disk, and Network percentages for each of those?
Base Filtering Engine:
A service that controls the operation of the Windows Filtering Platform. It performs the following tasks.
- Accepts filters and other configuration settings for the platform.
- Reports the current state of the system, including statistics.
- Enforces the security model for accepting configuration in the platform.
For example, a local administrator can add filters but other users can only view them.
- Plumbs configuration settings to other modules in the system.
For example, IPsec negotiation polices go to IKE/AuthIP keying modules, filters go to the filter engine.
Core Messaging:
This section presents core specifications used to formulate messages in the Web services architecture: XML, SOAP, and WS-Addressing [
WS-Addressing]. Web services rely on XML for the basic underlying data model, SOAP for the message processing and data model, and WS-Addressing for addressing services and identifying messages independent of transport.
Diagnostic Policy Service:
The Diagnostic Policy service enables problem detection, troubleshooting, and resolution for Windows components. If this service is stopped, diagnostics will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.
I'd be inclined to run Malwarebytes to check for malware on your system, possibly a botnet ... however this may be way off base given very little info. it's also possible the activity is external to your SP3 and its defending against incoming traffic so check other systems on the same network as well. As far as the 0% network traffic im not sure how that counter works... i.e. if it only counts accepted or sent traffic vs dropped packets that got filtered.
A Trace with Network Monitor might be useful or may show nothing... depending on the above
Look at the Firewall Log does it show dropped packets?
