Versions

4.3.2.6	3.07%
4.3.1.3	1.53%
4.3.0.32	0.92%
4.3.0.18	0.31%
4.2.1.12	17.48%
4.2.0.53	16.26%
4.1.1.10	0.92%
4.1.1.9	19.94%
4.1.0.23	0.92%
4.0.0.139	19.33%
3.0.2.34	1.53%
3.0.1.6	1.53%
3.0.0.131	0.31%
2.2.1.4	1.53%
2.2.0.69	0.31%
2.1.4.2	9.20%
2.1.3.3	0.92%
2.1.2.11	0.31%
2.1.1.9	0.31%
2.1.0.120	0.31%
2.0.4.2	1.53%
2.0.2.10	0.31%
2.0.0.115	0.31%
1.1.0.4	0.61%
1.0.0.152	0.31%

efacli.dll has 25 known versions, the most recent one is 4.3.2.6. The average file size is about 72.25 KB. It is an authenticode code-signed executable issued to Symantec Corporation by the certification authority VeriSign. The programs Norton Internet Security, Norton 360 and Norton 360 Premier Edition have been observed as installing specific variations of efacli.dll.

Symantec Extended File Attributes is part of Norton Internet Security, a PC program that provides malware prevention and removal during subscription period and uses signatures and heuristics to identify viruses, trojans and other malware. Norton Internet Security features include a email spam filtering, personal firewall, and phishing protection.