I think it is off by default but this is fairly new news and I suggest more research.
Norton 360, one of the most popular antivirus products on the market today, has installed a cryptocurrency mining program on its customers' computers. Norton's parent firm says the cloud-based service that activates the program and allows customers to profit from the scheme.
https://forums.scotsnewsletter.com/index.php?/profile/17273-abarbarian/ (https://forums.scotsnewsletter.com/index.php?/profile/17273-abarbarian/)
https://forums.scotsnewsletter.com/index.php?/topic/97238-norton-360-now-comes-with-a-cryptominer/#comment-474979 (https://forums.scotsnewsletter.com/index.php?/topic/97238-norton-360-now-comes-with-a-cryptominer/#comment-474979)
The company keeps 15% and it is hard to unistall.
Source: https://www.schneier.com/blog/archives/2022/01/nortons-antivirus-product-now-includes-an-ethereum-miner.html