blocked mscorsvw.exe

Comodo Internet Security - CIS Defense+ / Sandbox Help - CIS
1

My Defense+ Events log shows that it has blocked mscorsvw.exe from trying to modify a key and 2 files:

2014-03-03 18:58:15 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe Modify Key HKLM\SYSTEM\ControlSet???\Services\clr_optimization_v4.0.30319_32

2014-03-03 18:58:15 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe Modify File C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenofflinequeuelock.dat

2014-03-03 18:58:15 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe Modify File C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngenrootstorelock.dat

It repeats this about 40 times in a row within a minute. Is this malware?

2

The mscorsvw.exe process is the that compiles and optimizes the .NET assemblies for your specific hardware. It should not be malicious behavior. mscorsvw.exe typicall runs after installing the .NET libraries or after hotfixes from Windows Update. However you should still check and make sure that mscorsvw.exe has a valid Microsoft signature.