This forum thread needs a solution.
Kudos0

ncrypt.exe

Posted: 12-Jan-2022 | 2:53PM · 12 Replies ·

Hi folks,

I just learned that the recent update of Norton Internet Security planted ncrypt.exe on my 2 yrs. old PC running on Windows 10.

Since a couple of days, if not weeks, I noticed a lot of performance issues on my PC in particular when being online.  This already made me cautious and I spent a lot of time to isolate issues. However now it seems that Norton is the cause for it, taking advantage of my PC for crypto mining.

Please understand that I don't like this idea.

I also noticed promotional activities asking me to subscribe further services,  like this has been quoted by other customers of yours in your blog section. That's nothing I'm and others are willing to pay for on an annual basis.

Having a long history in using products from Symantec More in the early nineties of last century and since then also virus protection I'm more than disappointed. I will stay polite though harder words are coming to my mind.

Please be alerted that you are on a dangerous track. Your customers are an asset as big as your command of technology. Don't misuse your power to define your product but understand your customers' demands to get their faith as mine lasted for more then three decades now and might come to an end soon. Consider your heritage and stay faithful to your ancestors in business.

In short:

- stop advertisement of further products in daily execution of Norton Internet Security

- stop bugging the PCs of your customers with unwanted software

Best regards    JP (Europe)

Labels: Mining

Replies

Kudos0

Re: ncrypt.exe

Posted: 12-Jan-2022 | 3:05PM · Edited: 12-Jan-2022 | 3:39PM · Permalink

JP_in_Europe:
I just learned that the recent update of Norton Internet Security planted ncrypt.exe on my 2 yrs. old PC running on Windows 10.

Since a couple of days, if not weeks, I noticed a lot of performance issues on my PC in particular when being online.  This already made me cautious and I spent a lot of time to isolate issues. However now it seems that Norton is the cause for it, taking advantage of my PC for crypto mining.

Norton Crypto is opted-out by default.   Norton Crypto is an opt-in feature.  
Norton Crypto is currently only available in the US.

FAQ: Norton Crypto
What is Norton Crypto?

Norton Crypto is a feature made available in Norton 360 which you can utilize for mining cryptocurrency when your PC is idle. Currently, Norton Crypto’s availability is limited to users with devices that meet the required system requirements.

Will Norton 360 mine my device without my permission?

No. In addition to having a device that meets system requirements, you must also turn on Norton Crypto on your device. If you have turned on Norton Crypto, but you no longer want to use the feature, you can disable it through your Norton Crypto dashboard.
[...]

https://support.norton.com/sp/en/us/home/current/solutions/v138473899 

Matt_Boucher Employee
If you don't see the green tile at the top of your Norton 360 dashboard, then your GPU is not viable to mine and therefore does not even show the option to "opt-in." You are opted-out by default regardless of whether you have a GPU capable of mining or not.

https://community.norton.com/en/comment/8519476#comment-8519476 

Norton Crypto Terms of Service
https://community.norton.com/en/comment/8519743#comment-8519743

Norton does install a crypto miner with its software, without making that clear in the initial setup process. But it isn’t going to do anything unless you specifically opt in, so it’s not a situation where you’ll install the security suite and instantly start seeing your computer lag as it crunches crypto in the background.

A NortonLifeLock spokesperson also told The Verge in an email that you can completely remove NCrypt.exe by temporarily turning off Norton’s tamper protection feature, and then deleting the executable. We confirmed that ourselves, and it could be good news for anyone worried about Norton remotely activating the feature.

https://www.theverge.com/2022/1/7/22869528/norton-crypto-miner-security-software-reaction - Jan 7, 2022

Norton says that Norton Crypto is currently only available in the US, and that this is a throttled release (A/B testing).

https://www.ghacks.net/2022/01/05/norton-360-antivirus-installs-a-crypto-miner-on-pcs/ - Jan 5, 2022

Introducing Norton Crypto! Posted: 20-Jul-2021 | 2:07PM · Edited: 04-Jan-2022

Note:

  • This is a throttled release
  • Norton Crypto is currently available only in the U.S. This feature will be made available to other regions soon

https://community.norton.com/en/blogs/product-service-announcements/introducing-norton-crypto 

Kudos0

Re: ncrypt.exe

Posted: 12-Jan-2022 | 5:54PM · Permalink

All: Norton Crypto IS opt-in "to setup and use". Even on machines, such as the one I am currently on. I DO NOT have a GPU that is capable of mining installed. That being said, NCrypt.exe IS PRESENT nevertheless. Please see my screenshot. This is what the OP is trying to convey. Not that they are mining but rather performance issues are arising due to creature feature files. 

@JP_in_Europe If you want to remove the mining feature, make sure you are NOT running the miner, disable Norton tamper protection, locate the NCrypt.exe file, rename the file and save it. Exit to your desktop and reboot.

There are two other files present for features I do not have within my Norton installation as shown below. I renamed them by adding 2022 INTO the file name, making sure not to remove the file original name and saved. Rebooted. Zero issues with my Norton product afterwards and my performance issues disappeared. 

SA

MS Certified Professional / Windows 11 Home 22H2 x 64 build 22621.1265 - Windows 10 Pro x 64 version 22H2 / build 19045.2728 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.1.21 / Opera GX LVL4 (core: 96.0.4693.104) 64 bit-Early Access w/Norton Chrome Extensions
Kudos0

Re: ncrypt.exe

Posted: 12-Jan-2022 | 6:06PM · Edited: 12-Jan-2022 | 6:08PM · Permalink

JP_in_Europe:
Since a couple of days, if not weeks, I noticed a lot of performance issues on my PC in particular when being online.  This already made me cautious and I spent a lot of time to isolate issues. However now it seems that Norton is the cause for it, taking advantage of my PC for crypto mining.

Kudos0

Re: ncrypt.exe

Posted: 12-Jan-2022 | 6:12PM · Permalink

Maybe missing something, but, where in this statement does it say the computer is running the mining feature and the OP opted in then setup the feature? 

I just learned that the recent update of Norton Internet Security planted ncrypt.exe on my 2 yrs. old PC running on Windows 10.

Since a couple of days, if not weeks, I noticed a lot of performance issues on my PC in particular when being online.  This already made me cautious and I spent a lot of time to isolate issues. However now it seems that Norton is the cause for it, taking advantage of my PC for crypto mining.

SA

MS Certified Professional / Windows 11 Home 22H2 x 64 build 22621.1265 - Windows 10 Pro x 64 version 22H2 / build 19045.2728 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.1.21 / Opera GX LVL4 (core: 96.0.4693.104) 64 bit-Early Access w/Norton Chrome Extensions
Kudos0

Re: ncrypt.exe

Posted: 12-Jan-2022 | 6:20PM · Edited: 12-Jan-2022 | 6:22PM · Permalink

 However now it seems that Norton is the cause for it, taking advantage of my PC for crypto mining.

Is JP_in_Europe? 

Kudos0

Re: ncrypt.exe

Posted: 13-Jan-2022 | 2:18AM · Permalink

Hi folks

Thanks a lot for taking the time and reviewing my post and clarifying status and potential remedies.

As you can take from my post I'm a consumer - I'm not a techie.

I'm looking for a protection against viruses and other threats, as they may be set into this world by criminals, global companies and even governmental institutions. I do not want to get anything else but what I'm asking for. If I develop further needs I will look for the according offerings.

I re-address the message to the commercials: customers are an asset as big as command of technology.

Let's try every day to make this world better for all in it and on it and not just to get a bigger share of its resources. Anyone may hunt but shall stay decent when partnering with others, respecting the heritage and our predecessors that built it in part. 

Best regards    JP (Europe)

Kudos0

Re: ncrypt.exe

Posted: 13-Jan-2022 | 2:48AM · Edited: 13-Jan-2022 | 3:14AM · Permalink

Hi folks,
Since a couple of days, if not weeks, I noticed a lot of performance issues on my PC in particular when being online.  This already made me cautious and I spent a lot of time to isolate issues. However now it seems that Norton is the cause for it, taking advantage of my PC for crypto mining.

@JP_in_Europe
Are you still noticing performance issues on your PC when online?
Are you still feeling Norton &or Norton Crypto is causal?

You may remove or rename NCrypt.exe and you may remove or rename the executable files @SoulAsylum  noted here > https://community.norton.com/en/comment/8520073#comment-8520073

Although, I've not noticed performance issues with the executable files... maybe, your machine performance is affected by NCrypt.exe &or the other files.   

If you're in Europe as your Community name JP_in_Europe suggests.  Please note:

Norton Crypto is opted-out by default.   Norton Crypto is an opt-in feature.  
Norton Crypto is currently only available in the US.

as test:  I've removed &or renamed the three executable files. 
Although, I've not noticed machine performance change.  You may notice machine performance improve since @SoulAsylum noticed machine performance improve.   

I imagine @SoulAsylum will help you remove or rename the executable files. 

Filename: NCrypt.exe
Full Path: C:\Program Files\Norton Security\Engine\22.21.11.46\NCrypt.exe

Filename: nuPerfScan.exe
Full Path: C:\Program Files\Norton Security\Engine32\22.21.11.46\nuPerfScan.exe

Filename: tuIH.exe
Full Path: C:\Program Files\Norton Security\Engine32\22.21.11.46\tuIH.exe

Regards w Respect

Kudos0

Re: ncrypt.exe

Posted: 13-Jan-2022 | 8:03AM · Permalink

Hi JP_in_Europe:

You might be interested in reading Susan Bradley's 10-Jan-2022 ComputerWorld article Windows Security in ’22 — You Need More Than Just Antivirus Software that includes the following:

"Recently, Krebs on Security noted that both Norton Antivirus and Avira have told users that versions of their respective software now include a cryptominer. While it’s not enabled by default, it still gives me pause; antivirus is supposed to protect us from such potentially unwanted software, and these two vendors are now including it in their wares...."

Many security experts have expressed their concerns that NortonLifeLock is adding cryptomining to their antivirus products (note that NortonLifeLock acquired Avira in January 2021) so you're in good company. 

Also note that the product announcement Introducing Norton Crypto! states that "there are coin mining fees as well as transaction costs to transfer Ethereum. The coin mining fee is currently 15% of the crypto allocated to the miner" so I assume that NortonLifeLock is using Norton Crypto for revenue generation above and beyond what users are already paying for their annual Norton subscription.  The Verge article Here’s the Truth About the Crypto Miner That Comes With Norton Antivirus that bjm_referenced <above> tested Norton Crypto and found that "In real numbers, a night of mining on an RTX 3060 Ti netted $0.66 cents worth of Ethereum and cost $0.66 in off-peak electricity. Norton took all the profit."

Kudos0

Re: ncrypt.exe

Posted: 13-Jan-2022 | 8:39AM · Permalink

Anybody going to declare the Millions of Dollars they're making to the IRS ?

Kudos0

Re: ncrypt.exe

Posted: 13-Jan-2022 | 2:08PM · Permalink

Hi BJM

re "Are you still noticing performance issues on your PC when online? Are you still feeling Norton &or Norton Crypto is causal?":

I tend to put trust into the explanation, that ncrypt.exe either is not activated or I can easily deactivate it. However as a first reaction I deleted the file ncrypt.exe and I will follow up by further studying the technical details and as the case may be delete further resources.

Performance issues can have many reasons, not at least upon updates of the operating system that happen regularly too. After some two years of operation it might be a good approach to set up the PC from scratch (resp. from delivery backup), to get the latest updates on OS, to only install the software I'm using and by that to get rid of some software tried out but not really adding value according to my needs. Of course an actual PC does not anymore look like at MacOS 6.0.5 times, when any system components purpose was known to the user. However I'm happy for the responses I got and I am feeling there are still people around who care and are willing to help. Therefore thanks again and don't worry about my issues; I will sort these out in one way or the other.

I simply do not like that anything happens I did not order like components for completely different purpose being installed with those I asked for or pushes for a kind of "in app purchases" within an application I licensed and paid for and this since at least 2 decades in a row as faithful customer. Maybe I'm getting too old to change my values but I believe these values suit me (and likely some others too) and so far I was happy with my values.

Best regards    JP (Europe)

Kudos0

Re: ncrypt.exe

Posted: 13-Jan-2022 | 3:29PM · Permalink

JP_in_Europe:

Hi BJM
[...] I'm happy for the responses I got and I am feeling there are still people around who care and are willing to help. Therefore thanks again and don't worry about my issues; I will sort these out in one way or the other. [...]
Best regards    JP (Europe)

Regards w Respect
bjm_ 

Kudos0

Re: ncrypt.exe

Posted: 18-Jan-2022 | 2:45PM · Permalink

@JP_in_Europe

Norton Crypto - Now in more countries!
Now offered in United Kingdom, Canada, Switzerland & Italy.

https://community.norton.com/en/blogs/product-service-announcements/norton-crypto-now-more-countries - 18-Jan-2022

This thread is closed from further comment. Please visit the forum to start a new thread.