Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

4.3.2.6 3.07%
4.3.1.3 1.53%
4.3.0.32 0.92%
4.3.0.18 0.31%
4.2.1.12 17.48%
4.2.0.53 16.26%
4.1.1.10 0.92%
4.1.1.9 19.94%
4.1.0.23 0.92%
4.0.0.139 19.33%
3.0.2.34 1.53%
3.0.1.6 1.53%
3.0.0.131 0.31%
2.2.1.4 1.53%
2.2.0.69 0.31%
2.1.4.2 9.20%
2.1.3.3 0.92%
2.1.2.11 0.31%
2.1.1.9 0.31%
2.1.0.120 0.31%
2.0.4.2 1.53%
2.0.2.10 0.31%
2.0.0.115 0.31%
1.1.0.4 0.61%
1.0.0.152 0.31%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
TraceMessage, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, ControlTraceW
kernel32.dll
lstrlenW, LocalAlloc, SetLastError, GetModuleHandleA, ResetEvent, GetOverlappedResult, CreateEventW, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, RtlUnwind, OutputDebugStringA, InterlockedExchange, GetVersionExA, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, CreateFileW, LoadLibraryW, GetSystemDirectoryW, FindResourceExW, LoadResource, LockResource, SizeofResource, FindResourceW, Sleep, DeleteFileW, CopyFileW, GetEnvironmentVariableW, GetModuleFileNameW, GetModuleHandleW, GetFileAttributesW, GetProcAddress, FreeLibrary, LoadLibraryExW, LoadLibraryA, CloseHandle, GetCurrentProcess, DuplicateHandle, GetLastError, DeviceIoControl, InterlockedIncrement, InterlockedDecrement, InterlockedCompareExchange
msvcrt.dll
DllMain
ntdll.dll
RtlCompareUnicodeString, RtlInitUnicodeString, RtlCopyUnicodeString
shlwapi.dll
PathAddBackslashW
user32.dll
UnregisterClassA, CharUpperBuffW, wvsprintfW
Export table
GetFactory
GetObjectCount

EFACli.dll

EFA by Symantec Corporation (Signed)

Remove EFACli.dll
Version:   4.3.1.3
MD5:   1bd9006f2d40a4eed352d36f1fb0509d
SHA1:   463ea41b1074add01b03d26f662ea32c70ba88bd

What is EFACli.dll?

Symantec Extended File Attributes is part of Norton Internet Security, a PC program that provides malware prevention and removal during subscription period and uses signatures and heuristics to identify viruses, trojans and other malware. Norton Internet Security features include a email spam filtering, personal firewall, and phishing protection.

About EFACli.dll (from Symantec Corporation)

“Norton Internet Security lets you email, chat and surf the Web without worrying about cybercriminals ripping you off. It delivers protection from online dangers without sacrificing performance. It g”

DetailsDetails

File name:efacli.dll
Publisher:Symantec Corporation
Product name:EFA
Description:Symantec Extended File Attributes
Typical file path:C:\Program Files\norton internet security\engine\20.1.0.24\efacli.dll
File version:4.3.1.3
Product version:4.3
Size:85.88 KB (87,944 bytes)
Build date:8/31/2013 5:01 AM
Certificate
Issued to:Symantec Corporation
Authority (CA):VeriSign
Expiration date:Saturday, November 23, 2013
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Norton AntiVirus
 Symantec Corporation
1% remove
“Basic antivirus protection that stops viruses and spyware, so you can safely go online and share. Five patented layers of protection quickly and accurately detect and eliminate viruses and spyware. Protects your privacy and prevents your passwords and identity from being stolen when you surf the Web. Deep clean your PC – our powerful Threat-Removal Layer targets and scrubs out aggressive, hard-to-remove infections that less sophisticate...”
Norton Internet Security
 Symantec Corporation
3% remove
Norton Internet Security, developed by Symantec Corporation, is a computer program that provides malware prevention and removal during subscription period and uses signatures and heuristics to identify viruses. Other features include a personal firewall, email spam filtering, and phishing protection. Symantec distributes the product as a download, a boxed copy, and as OEM software.
Norton 360
 Symantec Corporation
12% remove
Norton 360, developed by Symantec, is marketed as an "all-in-one" computer security suite. The package includes an antivirus, a personal firewall, a phishing protection program and a backup program. What distinguishes this suite from Norton Internet Security is the inclusion of file backup and PC maintenance capabilities.
Symantec Endpoint Protection
 Symantec Corporation
9% remove
“Customers have embraced Symantec Endpoint Protection 12 faster than any previous release. In Symantec Endpoint Protection 12.1.2, we've worked hard to further the Unrivaled Security, Blazing Performance and support for Virtual Environments. By layering technologies like Insight and SONAR, antivirus scans are reduced and maximum performance is achieved while stopping cyber-criminals and even zero-day threats in their tracks. Endpoint pro...”

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 40.50%
Windows 8 15.50%
Windows Vista Home Premium 9.00%
Windows 8 Pro 7.50%
Microsoft Windows XP 7.00%
Windows 7 Ultimate 5.50%
Windows 7 Professional 3.50%
Windows 8.1 3.00%
Windows 7 Home Basic 2.00%
Windows 8.1 Pro 1.50%
Windows 8 Pro with Media Center 1.50%
Windows 8 Enterprise 1.00%
Windows Se7en Titan 0.50%
Windows Developer Preview 0.50%
Windows Vista Ultimate 0.50%
Windows 8 Single Language 0.50%
Windows Vista Business 0.50%

Distribution by countryDistribution by country

United States installs about 67.51% of EFA.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 30.77%
Toshiba 21.37%
Dell 14.53%
Acer 13.25%
ASUS 5.98%
GIGABYTE 3.85%
Sony 3.42%
Intel 1.71%
Lenovo 1.71%
Samsung 1.28%
American Megatrends 1.28%
MSI 0.85%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE