• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Edge Password Manager Extension apparently installing bad/dangerous external scripts

I discovered an issue with Edge Password Manager Extension (PME) when I was debugging web page. Within the Symantec directory is a javascript script called WAXUtils.js, which I think is genuine, but there are 12 additional links to very dubious external javascripts. These have links to sites that I have never heard of, let alone created any passwords for. For example, I'd never have any reason to download stuff from ib.absa.co.za, or login.vivo.com.br. These scripts are mostly pretty cryptic, but certainly had functions with "password" in their names.

The only way I discovered this is because one of these files fails with an error. My PC also runs very, very slowly when PME is installed, indeed several big websites, such as AOL Webmail, simply fail.

I have attached images of the Edge debugger when PME is, and is not, installed.

Norton support just told me to contact Microsoft. I really don't know enough to say what's going on, but it looks very suspcious. Maybe it's only my PC that's been infected in some way, but then Norton should offer to help me clear it. After all, that's why I pay my subscription. In any case, I'd have thought that Norton would pay a lot more attention of there was even the remotest possibility that there was actually something malicious within their installation. I cannot see how else these links are only present when PME is installed.

File Attachment: 
Labels: Windows 10

Replies

Kudos1 Stats

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Kudos1 Stats

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

FWIW ~ my Edge 

Norton Password Manager (open)

Norton Safe Web

Edit: Norton Password Manager (open)

Kudos2 Stats

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Hi kingletit,

- This is by design from Norton Password Manager side and these are not dangerous scripts

- Regarding the errors reported by these scripts, we are already aware of this issue and working on the same

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Kudos1 Stats

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Thank you for the reply.

I wish I'd been told this when I asked for support rather than telling me it was a Microsoft problem. It never occurred to me that Norton would link to external sites as an integral part of such important software. The overall integrity of Password Manager is now reliant on a significant number external sites each ensuring their systems stay ultra-secure. After all, your customers' security/ finances/ identities depend on this. 

Do you have a timescale for this?

Do you also intend to address the dramatic increase in the consumption of resources when Password manager is installed, or is this because of the existing errors?

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

 It never occurred to me that Norton would link to external sites as an integral part of such important software.

Cloud computing services maybe????

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

I really thought it was Microsoft Edge that was the problem - my Edge browser slowdown began about 2-3 weeks ago, and it seemed to begin after one of the automatically installed updates.  I tried clearing the cache, repairing and then resetting Edge, and I didn't get far enough along in the reinstall process to make a difference for a total reinstallation. 

I disabled the Norton PME, and that seems to be the culprit.  When I enable Norton PME, Edge becomes painfully slow.  When I again disable it, Edge appears to function again with nominal performance.

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Norton Fighter: It could be, though I had a look at some of the scripts and one, at least, used variable names that suggested that passwords were being processed off-site. I wouldn't have expected actual crunching of data externally, but then, what do I know? I wonder how Norton ensures these external scripts are secure?

hiaii: I'm glad it's not just me.

Now that I'm told the scripts are safe, albeit not working properly, your idea to simply enable Password Manager when required, and then disable it again, would be a workaround. I'm slightly reluctant to mark it as a solution without knowing how long Norton expect a fix to take, and whether it will address our Edge performance problems, too. (I previously moved from McAfee to Norton due McAfee's excessive memory use.)

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Just confirming what you all are experiencing.  Running Amazon web site using Edge whilst the Norton Password Manager s active is a painful experience.  After about a minute, it seems to clear up but bogs down again under conditions.  Turn off that Norton extension and restart Edge: problem gone.  Same web site under IE and Chrome function normally with the extension active.  Norton Safe Web extension does not affect the browser.  Also agree it appears to be an issue with the more recent Win 10 update, but that is an anecdotal observation.

Kudos1 Stats

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Hi All,

Regarding the slowness on Edge, we are currently working on this issue.

Will update the thread once the fix is released.

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Thanks vivesku, 

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Hi All,

We have fixed this issue internally and submitted to MS edge store. Once its published, Edge Norton Password Manager extension will get updated automatically.

Regards,
Senthil.

Kudos1 Stats

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

senthilkumar:

Hi All,

We have fixed this issue internally and submitted to MS edge store. Once its published, Edge Norton Password Manager extension will get updated automatically.

Regards,
Senthil.

Is this addressing the original issue of the thread about the scripts, or the slow performance of Edge with the extension enabled?

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Observes:

Fellow STEAM gamers here?

(laughs)

Regards,

H.B. 

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

There's also a debugging fault in Autoformfill_ContentScript.js.

(ms-browser-extension://autoformfill_5ed10d46bd7e47deb1f3685d2c0fce08/content/Autoformfill_ContentScript.js)

function logUserInterestedShownTelemetry(n){__gMsEdge.message.logAutoFormFillTelemetry({command:"telemetry",telemetryEventName:"FormFill_UserInterestShown",formName:n,isPersonalForm:__gMsEdge.common.currentForm.isPersonal,isPaymentForm:__gMsEdge.common.currentForm.isPayment,isGenericForm:__gMsEdge.common.currentForm.isGeneric})}window.__gMsEdge={};var topIframeCoordinates={},__gIsIframeAutofillEnabled=!1;__gMsEdge.windowIdObject={};__gMsEdge.numberOfRequiredFields=1,function(){"use strict"; etc, etc,

fails with Unable to get property 'isPersonal' of undefined or null reference

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Hi Peter,

This fix addressing the scripts issue

Regards

Senthil.

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Password Manager

Safe Web

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Hi Senthil

Does this also fix the intermittent fault in Autoformfill_ContentScript.js?

Kudos1 Stats

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

I also have the problem of Password Manager slowing my system down to a crawl. I contacted Norton for help, the first tech could not solve it so he bounced it to a LEVEL 2 Tech.  The level 2 tech called a week later, did the same thing the other tech did, said that's all he could do.  He also suggested I use Chrome instead of Edge.  If they are working on the problem then the techs should be aware of the problem.  I think I have a solution for my problem, when my subscription is up I plan on looking for a new antivirus.

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

I manually checked and ran the latest update to version 6.5.1.6. It looks like the issues have been solved.

(Senthil, it would have been nice if you had let us know that the changes had been processed, but thank you for your efforts.)

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

FWIW ~ upon page refresh.....for an instant, see...

Kudos1 Stats

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

Password Manager for Chrome is now at 6.5.1.7 (updated 9/6/2019).  Edge is at 6.5.1.6 (updated 8/31/2019).

The last time that I rebooted my machine, it appears that NPM and NSW are each started when the machine is started - I received some message to that effect (I get an authentication request upon restart, and I couldn't understand exactly why since I would also then have to authenticate when I opened individual browsers like Edge and Chrome).  I guess I will need to see if those two add-ons are already active and remain so, as I open and close the individual browsers 

Kudos1 Stats

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

I updated to the latest version and while it's better it is still not right.  My MSN page takes twice as long to load with NPM or NSW on.  But that is better then the ten times longer it was taking.  I guess I'll still just keep them off until I need them.

Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts

I had marked this as a solution but now a new set of errors that appear in Edge have been introduced when debugging even the simplest html code. The errors appear when NPM is Enabled and disappear when it is Disabled. Even worse, it does not say which script is causing the problem. The attachment shows both situations.

Test.htm:- <!DOCTYPE html><html><head><title>Test.htm</title></head><body><p>Paragraph</p></body></html>
Kudos0

Re: Edge Password Manager Extension apparently installing bad/dangerous external scripts