Malware Defender svchost.exe Physical Disk Access

I'm getting occasional prompts in Malware Defender for svchost.exe requesting access to the physical disk. I've set a block rule and haven't had any ill effects. I typically default to blocking any activity like this with network applications. I was wondering if the other Malware Defender users in this forum allow or block this and why.

On a separate note, I'm trying to figure out why Malware Defender fails the RawDisk test in the Comodo Firewall Test Suite. It was also failing the ActiveDesktop test, but I added an ask rule under System Settings for HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General\* and that closed the hole.

 

svchost is permitted to access physical disk in my config. I must picked that config up during initial learning mode setup.

 

Mine is still at "Ask" so svchost has not yet attempted physical disk access.

 

Flicking mine back to "Ask" then and I'll see what happens

 

svchost.exe on my os in training mode has never ever accessed physical disk, neither has it attempted to after I locked down svchost.exe.

 

It depends on the services running on your system. Svchost.exe is a generic host process for services that run from DLLs. If one of such service need to access physical disk, you may permit it.

The RawDisk test in the Comodo Firewall Test Suite test reading, but MD check writing physical disk only.

Thanks,
Xiaolin

 

Thanks to everyone for your replies and to Xiaolin for the information.

I'm going to put my rule back to ask as well so that I can try to determine the service that is making the request. It's not something that I see in my logs regularly, so it must be a service that runs on demand and that I don't use often.

Besides the obvious security protection, one of the things I like about MD is that you can really gain an insight into what is going on "behind the scenes" on your system.

Darrell