1 of 1 people found this helpful
I believe Mcafee injects (hooks) itself into system processes and every other process and directly blocks the access to that file. I'm not sure though if it just catches and blocks some "read" system calls or if it does it differently.
Thanks. I think I like that better than having it change the NTFS ACLs.