I logged in to my Windows 7 workstation this morning and there was a Symantec Endpoint Protection notification about a "Security Risk Found." There were 4 total notifications and it appears that SEP deleted encdec.dll from the winsxs directory and from the system32 directory.

Here is the text of the notifications SEP provided:


Scan type: Auto-Protect Scan
Event: Risk Found!
Security risk detected: Packed.Generic.271
File: C:\Windows\winsxs\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.1.7600.16385_none_e04e6c93efba3643\EncDec.dll