Gelöst.
Danksagungen0

Norton NCrypt.exe file detected as Gen:variant.razy.896888

Gepostet: 2021-07-25 | 10:11 · Bearbeitet: 2021-08-10 | 05:49 · 1 Antwort · · Übersetzung:

i used a diffrent anti.v scanner today and up popped Gen:variant.razy.896888...as you can see it has attached its self to the security engine..just in case ive deleted this and removed norton...(i only the other scanner today this scanner comes as part of another pc cleaning tool thought hay ho give it a go)...before i go install norton again has the security engine been compromised on your part....or am i good to go and re-install?   cheers guys

[Admin Edit: Clarified Subject]

Dateianhang: 
Image icon Gen:variant.razy.896888

Antworten

Akzeptierte Lösung
Danksagungen0

Re: Norton NCrypt.exe file detected as Gen:variant.razy.896888

Gepostet: 2021-07-25 | 10:35 · Bearbeitet: 2021-07-25 | 10:53 · Permanenter Link

File Attachment: 
Gen:variant.razy.896888

C:\Program Files\Norton Security\Engine\22.21.6.51\NCrypt.exe      Gen:Variant.Razy.896888  

Please review:
https://community.norton.com/en/forums/ncryptexe-deteced-riskwarebitcoinminer

This detection is for the new Norton Crypto feature in the latest version of 360 that is explained in this product announcement.  
https://community.norton.com/en/blogs/product-service-announcements/norton-security-2221651-windows-now-available

It is not surprising that Malwarebytes or any other malware scanner might flag this file to protect users from unwanted apps from stealing your CPU cycles for crypto mining. So you need to report this Malwarebytes detection as a false positive to Malwarebytes.

The reason Malwarebytes cannot remove this detected file is the Norton Product Tamper Protection  feature protecting the valid Norton file.

https://community.norton.com/en/comment/8508579#comment-8508579 

This thread is closed from further comment. Please visit the forum to start a new thread.