The real-time protection feature causes the anti-malware Service to be a high-CPU executable that continuously scans the application system and connections.