Has anyone been able to figure out what the issue is? We have a client who’s experiencing the same issue. It’s to the point where we have removed AV on the workstations and server leaving them with Windows Defender and ransomware protection only. This only seems to happen right after the returns are efiled. At this point it’s NOT AV that’s causing it. We are able to retrieve them from backup or the tmp file it leaves behind.