Please Sign In with Norton Account to Ask a Question or comment in the Community
Posted: 04-Jan-2022 | 7:37PM · 19 Replies · Permalink
I am absolutely uninterested in mining Crypto. How do I uninstall or prevent the installation entirely?
Posted: 04-Jan-2022 | 8:00PM · Permalink
Posted: 04-Jan-2022 | 8:05PM · Permalink
Alright, then explain how/where to find all this information at as I may not have it just yet. I do have a system that is capable of doing so,I have a 1080ti and planning to upgrade to a 3080 eventually, and definitely don't want to waste my time with Crypto. I don't think I have the update or anything for it unless it's account related rather than via program itself.
Posted: 05-Jan-2022 | 3:29AM · Permalink
If it's optional and not on by default, why is it so hard to delete NCrypt.exe?
I do not want mining software on my computer in any fashion. What guarantee do I have that you won't change your terms and conditions and activate it by default at some future point?
Posted: 05-Jan-2022 | 5:59AM · Permalink
Users should be able to remove Crypto component after it has been installed. Also, users should be able to choose whether or not to install the Norton Crypto feature when Norton 360 is installed.
Posted: 05-Jan-2022 | 8:02AM · Edited: 05-Jan-2022 | 8:06AM · Permalink
Users claim that Norton 360 antivirus installs a crypto miner on PCs
[...]
Is Norton Crypto enabled by default?
The official website states that Norton Crypto is not enabled by default, but some users claim otherwise and that the new version is installing the crypto miner without the user's consent. According to this thread on Twitter, the antivirus installs a miner called NCrypt.exe. Some users have suggested that it can be deleted from the software's directory after disabling the Tamper Protection from the antivirus' settings. Here's another interesting discussion about it on HackerNews.Other antivirus programs seem to be detecting the file as malware, which is fair, in my opinion.
[...]
https://www.ghacks.net/2022/01/05/norton-360-antivirus-installs-a-crypto-miner-on-pcs/ - Jan 5, 2022
Posted: 05-Jan-2022 | 10:11AM · Permalink
you can remove the NCrypt.exe file from your computer here are the steps:
1) go to N360 dashboard and open device security
2) next click on "settings"
3) next disable "Norton Tamper Protection" (this will ask for a time frame, select 15 min)
4) navigate to /Program Files/Norton Security/engine/(product version)
There you will find NCrypt.exe and you can delete. Norton Tamper Protection will turn back on in 15 min or you can do it manually.
To be perfectly clear, this is off by default and will only be run when enabled by a user
Posted: 05-Jan-2022 | 10:27AM · Edited: 05-Jan-2022 | 10:32AM · Permalink
Why does Norton keep checking for a viable GPU?
Does Norton think I'll be swapping GPU that can support crypto mining?
Category: Crypto Mining
Date & Time,Risk,Activity,Status,Recommended Action,RIG ID
1/5/2022 11:28:51 AM,Info,No viable GPU found that can support crypto mining,Detected,No Action Required,2C40836F-E3C4-4C63-BF23-0B4C0F9D7128
1/5/2022 9:13:43 AM,Info,No viable GPU found that can support crypto mining,Detected,No Action Required,2C40836F-E3C4-4C63-BF23-0B4C0F9D7128
1/4/2022 9:34:53 PM,Info,No viable GPU found that can support crypto mining,Detected,No Action Required,2C40836F-E3C4-4C63-BF23-0B4C0F9D7128
1/4/2022 3:33:44 PM,Info,No viable GPU found that can support crypto mining,Detected,No Action Required,2C40836F-E3C4-4C63-BF23-0B4C0F9D7128
1/2/2022 5:15:57 PM,Info,No viable GPU found that can support crypto mining,Detected,No Action Required,2C40836F-E3C4-4C63-BF23-0B4C0F9D7128
1/2/2022 5:10:36 PM,Info,No viable GPU found that can support crypto mining,Detected,No Action Required,2C40836F-E3C4-4C63-BF23-0B4C0F9D7128
1/2/2022 4:42:12 PM,Info,No viable GPU found that can support crypto mining,Detected,No Action Required,2C40836F-E3C4-4C63-BF23-0B4C0F9D7128
1/1/2022 9:21:39 PM,Info,No viable GPU found that can support crypto mining,Detected,No Action Required,2C40836F-E3C4-4C63-BF23-0B4C0F9D7128
12/31/2021 9:04:12 PM,Info,No viable GPU found that can support crypto mining,Detected,No Action Required,2C40836F-E3C4-4C63-BF23-0B4C0F9D7128
12/28/2021 6:04:26 PM,Info,No viable GPU found that can support crypto mining,Detected,No Action Required,2C40836F-E3C4-4C63-BF23-0B4C0F9D7128
Posted: 05-Jan-2022 | 10:56AM · Permalink
@bjm_
The check happens on boot. And yes there have been instances where users swap out their GPU and wanted to be able to mine. Also as new cards become available or we update what cards can be used for mining we need to check.
It is still 100% OPT-IN. Users have the ability to determine if they want to mine or not.
Posted: 05-Jan-2022 | 2:20PM · Edited: 05-Jan-2022 | 2:26PM · Permalink
Norton has an interesting feature tucked inside its Norton 360 antivirus subscription—a cryptocurrency miner. It’s not turned on by default, but it is installed as part of your antivirus package whether you want it or not.
[...]
Norton says it made its crypto mining software because it “allows the customers to mine for Ethereum, a popular cryptocurrency, more safely during their PC’s idle time. They will operate within a “pool” of Norton Crypto miners, delivering greater efficiencies and enabling all users to share in the rewards.” Essentially, Norton believes this is a safer way to mine Ethereum than other methods.Of course, Norton isn’t offering this mining service out of the kindness of its heart. The company charges a high 15% fee off the top and an additional fee to transfer your currency to another wallet, so the company stands to make decent money off of its mining tool.
There’s nothing malicious happening here, but users are never thrilled when they get a piece of software to do one thing (in this case, protect their PCs), and it adds something else without their permission. With that said, as long as it’s not turned on by default and Norton is upfront about it, the company isn’t technically doing anything wrong.
https://www.howtogeek.com/777952/norton-360-antivirus-now-mines-cryptocurrency/ - JAN 5, 2022
Posted: 05-Jan-2022 | 4:40PM · Edited: 05-Jan-2022 | 4:44PM · Permalink
But how do I make sure it's not enabled? I can't find it anywhere on the security page unless I'm in the wrong section. This should be an OPTIONAL download, not something everyone gets.
Posted: 05-Jan-2022 | 5:29PM · Permalink
@demonicvampire
It is very likely your GPU does not qualify for Norton Crypto mining. Therefore there will be no settings anywhere. It will only show if your GPU is capable of mining.
If you want to check for sure it is not running, look at task manager; if NCrypt.exe is running, then it is mining, you can also look at the performance tab in task manager, and if your GPU is at 90-100% utilization with over 5GB of memory in use, it is likely mining.
HOWEVER, I have every confidence that if you don't see the "Norton Crypto" tile at the top of your Norton 360 dashboard that you are not mining.
Posted: 05-Jan-2022 | 5:35PM · Edited: 05-Jan-2022 | 5:36PM · Permalink
xjoex:@bjm,
I have not rebooted my machine in the past week and I have not had any entries in history about checking for my GPU.
as per Matt_Boucher. "The check happens on boot."
Posted: 05-Jan-2022 | 5:52PM · Permalink
@Matt_Boucher
As stated above, I have a 1080ti in this machine. That is a mining card according to Norton. It's got 11GB of ram on it.
Luckily I do not see it in the background on my PC currently. Mine says Norton Security and apparently we have the Norton Security Deluxe subscription. Thought it was Norton 360.
Posted: 06-Jan-2022 | 10:44AM · Permalink
Norton 360, one of the most popular antivirus products on the market today, has installed a cryptocurrency mining program on its customers’ computers. Norton’s parent firm says the cloud-based service that activates the program and allows customers to profit from the scheme — in which the company keeps 15 percent of any currencies mined — is “opt-in,” meaning users have to agree to enable it. But many Norton users complain the mining program is difficult to remove, and reactions from longtime customers have ranged from unease and disbelief to, “Dude, where’s my crypto?”
https://krebsonsecurity.com/2022/01/norton-360-now-comes-with-a-cryptominer/ - January 6, 2022
Posted: 09-Jan-2022 | 2:41PM · Permalink
I want to go on record that I am strongly against the practice of Norton installing its NCrypt.exe block chain currency miner (so-called "crypto-miner") as part of its Norton360, or any other security product. I am a long time subscriber to Norton, mainly for anti-virus and firewall functionality but at times also the utilities, like all the way back to when Peter Norton actually was part of the company. I have come to trust Norton products. However, the decision to bundle a "crypto-mining" product with a security product casts doubt on my trust. I can see that this decision is obviously one of the company making a bit of extra money, under the guise of providing a service to customers. It's fine if Norton wants to offer a crypto-mining product. If I wanted to buy-in to the supposed advantages of using Norton Crypto Miner then I would do so. I might even believe that their setup offers protections, which would be great. However, I believe it should be a stand-alone product, or at least not bundled with a security product.
I don't buy the b.s. that while installed it's off by default and customers must opt-in before it is activated. That misses the point. The point is that such a product should not be installed in the first place without the express permission, with informed consent, being granted by the customer before it is installed!!!
I have deleted NCrypt.exe from my computer. (After logging in as admin and temporarily deactivating Norton Tamper Protection. Simply go to C:/Program Files/Norton Security/engine/(product version) (as stated above) and delete NCrypt.exe.) I am not certain that this won't cause problems at some point, we'll see, I hope not. If it does then that will push me closer to a decision to move away from NOrton and find something else. (I know I am not alone in this sentiment.) I suspect that the next time Norton updates (pushes a patch) it will reinstall NCrypt.exe as it is now part of the default installation. (Don't get me wrong. Yes, Norton should push patches, of course!) Which means I will have to remember to once again delete NCrypt.exe at that time.
Before anyone from Norton, or otherwise, chimes in and indicates that NCrypt.exe is off by default and I have to opt-in before it activates, let me reiterate that that misses the point. A crypto-miner should not even be bundled with a security product as it in no way improves the security of my computers. It's just one more vector for malware compromise. Sure, Norton can claim that that NCrypt.exe will never be compromised. However, that is a claim that can not be guaranteed and if made further casts doubt on the trustworthiness of Norton products.
So, bottom line: Norton, stop bundling NCrypt.exe with your security related products. Offer it as a stand-alone. Doing it any other way risks losing customer trust.
Posted: 09-Jan-2022 | 2:45PM · Permalink
Yes, while it is not enabled by default it is installed. It should not even be installed by default! Perhaps as a stand-alone product, but not bundled with a security product.
Posted: 08-Feb-2022 | 4:35PM · Permalink
For as long as I've been into computers... When I first learned for Norton's anti-virus/security tools, i was impressed by its ability to protect my digital assets from viruses. Then, moving forward, when "internet security suite" and "norton 360" became available, I eagerly jumped on the Norton bandwagon! Norton always squashed viruses and malware, and always loved that me and my family felt confident in secure computing, both on and offline. When I learned of their background crypto-mining app being installed without the ability de-select its installation when installing Norton 360 on ALL of my devices, I became extremely disappointed with all of Norton. I feel betrayed. Norton 'SOLD OUT'. I don't care what the excuse is. Running a crypto-mining app in the background, claiming to profit it's users is a completely deceptive tactic. It's wrong, we do NOT PROFIT. Not only that... They RUN MACHINE CODE i'D NEVER AUTHORIZED. I hate Crypto, I hate unauthorized installations, and I HATE renting out my 8 cores for Norton's benefit. Goodbye Norton, forever. I not longer trust you. And, trying to cancel my subscription needed a THREE WEBPAGE clickthrough! F you Norton, F you.
Posted: 08-Feb-2022 | 4:54PM · Edited: 08-Feb-2022 | 4:55PM · Permalink
@bodycode, I want to make sure you have accurate information.
1) Norton does not and will not mine crypto in the background automatically; this is an entirely opt-in solution
2) while I can't say precisely how much ETH we have mined as a pool, we have certainly given our pool users the proper share
3) the Norton Crypto miner will not run without your authorization
4) it will not install the Norton Crypto miner unless you opt-in to Norton Crypto
Re: Preventing Installation
Posted: 05-Jan-2022 | 10:11AM · Permalink
you can remove the NCrypt.exe file from your computer here are the steps:
1) go to N360 dashboard and open device security
2) next click on "settings"
3) next disable "Norton Tamper Protection" (this will ask for a time frame, select 15 min)
4) navigate to /Program Files/Norton Security/engine/(product version)
There you will find NCrypt.exe and you can delete. Norton Tamper Protection will turn back on in 15 min or you can do it manually.
To be perfectly clear, this is off by default and will only be run when enabled by a user