Symantec Corporate Antivirus, Vista, and EFS

[Gary Flynn <flynngn () JMU EDU>]

This is a heads up notification and a check to see if
someone can confirm something we've been able to
reproduce on two Vista computers here:

Files on a Vista computer that are encrypted using EFS
while Symantec anti-virus auto-protect feature is enabled
become inaccessible after the computer is rebooted. They
are inaccessible to all added user accounts and the
recovery account.

If autoprotect is turned off, the files encrypted while
it was turned on remain inaccessible. Newly encrypted
files behave as expected.

We have not found a way to recover the files encrypted
while Symantec was running.

Symantec Corporate Edition 10.2.0.276



--
Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security