SBIE1313 Blocked direct disk access by process

[Mr.X]

Actually, this is the full line:

icebookreader.exe: SBIE1313 Blocked direct disk access by process 'icebookreader.exe [Icecream_Ebook_Reader]'

The program is executed in a red box with, among other lines, these two ini lines:

NotifyDirectDiskAccess=y
NormalFilePath=*:\*

I know the above-mentioned message pops up due to the first line, but I don't quite understand what's really happening within the sandbox...

 

[bastik-1001]

While I can't tell you what's the reason the program behaves this way, there's a reason why this is shown, unless it would be a false alert. Usually applications hand off requests to open or write files to the operating system, which handles the file system. Some software, like a defragmentation tool, needs to access the disk directly. Similarly, anything else that works with the disk itself, and does not rely on system tools, e.g. to format a drive, to change the partition. Maybe, file deletion software, likes to handle writes to the disk itself, instead of relying on the operating system to do its job. Encryption tools could access a disk directly to perform their work on a lower level.

The operating system could filter what it shows to the application trying to list available files.

At what point is this message shown? (e.g. while starting, while trying to browse for files.)

 

[Mr.X]

At what point is this message shown?

While starting.