McAfee HIPS - what is the rules set that you are using ? I am not sure if I should allow svchost or not!