Symantec Endpoint Protection Keeps Blocking Svchost.exe

I'm running Windows 7 and Symantec keeps causing a balloon to pop up on the bottom right of my screen saying that it has blocked traffic from svchost.exe.
I Googled the problem, and found an article on Symantec that says some malware disguises itself as that process, so I figured it didn't seem to be hurting anything, so I put up with it.

But then my DVD/CD drive stopped burning disks. And sometimes, Windows doesn't even recognize that there is a blank disk in the drive (though it can see disks that already have data on them). I've had previous drives wear out before, so I didn't connect this problem with svchost. But my hard drive is filling up, and I want to back up files to disks, so I need a burner that works.

So I thought, maybe if I get an external DVD/CD drive that burns, I can get around the problem until I get a chance to bring my PC in to get the internal drive replaced. When my new external drive came, it burned exactly one disk, then the system could not see a blank disk in the new drive after that, either.

So I tried to Google this problem and I found a YouTube video that suggested I go to Services > Shell Hardware Detection > Properties and change it to "Automatic". I saw that it already is set to Automatic, but I did notice the executable path for this seems to include svchost.exe.

So, I'm thinking maybe I need to get Symantec to stop messing with svchost if I want any DVD/CD drive to ever burn anything again. But I'm not sure how to do that. Can someone here help?

 

The svchost process is used by numerous services.
Read this article.
https://www.howtogeek.com/howto/windows-vista/what-is-svchostexe-and-why-is-it-running/

 

Thank you, that article was very informative, but didn't really answer my question.

I realize svchost is used by numerous services, which apparently include recognizing blank CDs and DVDs.

What I need to know is how to get Symantec Endpoint Protection to stop blocking svchost processes. I have looked on Symantec's website for answers, but their suggestions either don't seem to work, or they don't match my particular situation and they don't really seem to explain it clearly.

I just found a work around that seems to help; I just turned off Symantec while burning discs and it seems to be working so far.

But I think it would be better to find a way to get Symantec to just leave svchost alone so I don't have to turn SEP off completely while burning discs, leaving my PC vulnerable.

 

I agree.
I suggest you email Symantec.
In the mean time, see if adding svchost to Symantec Endpoint Protection's exceptions helps.

 

Thank you. I'll try emailing Symantec.
I did try adding svchost to SEP's exceptions (if I did it in the correct place) by putting in the file path to it, but it didn't seem to help.

One other weird thing I just discovered; as I mentioned, I deactivated SEP and I was able to burn 1 disc in the external drive, and then 1 disc in the internal drive, but now both drives are back to not recognizing the same brand of blank DVDs.

So maybe SEP isn't to blame after all? But if not that, what might be causing this problem?

 

What brand of DVDs are you using?

 

Verbatim

 

Verbatim is what I use and I've never had a problem.
This is indeed strange unless you got a bad batch of disks.
But, I'm guesstimating the problem is with SEP.

 

Do you think SEP can still interfere even when deactivated?

I just asked the opinion of a friend who works in IT; she thinks I might have a virus. Do you think that might be the problem? Should I repost this in the virus forum?

 

You posted you can burn disks with SEP deactivated.

Yes you should.