Viruses Protecting themselves with EFS

Symantec wrote about the threat of EFS being used to hide viruses from administrator accounts and system.
Of course if you don’t run as administrator, the virus wouldn’t (as easiliy) get the chance to create to create a new administrative user and use that account to encrypt itself. Another suggested best practice when Windows 2000 first came out was if you aren’t using EFS, then disable it. If either of these practices were followed, this wouldn’t be a problem.
McAfee wrote about this problem 6 weeks ago.
There is a virus family now that uses this technique.