Lenovo Superfish

[penguin0123]

http://www.pcworld.com/article/2886278/how-to-remove-the-dangerous-superfish-adware-presintalled-on-lenovo-pcs.html

The company has been preloading Superfish, a "visual search" tool that includes adware that fakes the encryption certificates for every HTTPS-protected site you visit, on its PCs since at least the middle of 2014. Essentially, the software conducts a man-in-the-middle attack to fill the websites you visit with ads, and leaves you vulnerable to hackers in its wake.

[C.G.]

I never installed Superfish but after this thing came out I found the Superfish Security Certificate installed, which I promptly deleted.

[Zorba]

Its been my experience that Lenovos come pre-loaded with more crapware than just about anybody. Certainly to the point of where I don't like to deal with them. In my opinion, if you have the knowledge, the best thing you can possibly do with a new PC from just about any/everybody is to do a re-install of the operating system. Doing so usually takes little more time than removing the crapware, and the results are often better!

[Mute]

I never installed Superfish but after this thing came out I found the Superfish Security Certificate installed, which I promptly deleted.

Did you manually delete the security certificate? Uninstalling the adware, while good, doesn't get rid of the certificate vulnerability. You need to make sure the certificate has been undone.

[C.G.]

Did you manually delete the security certificate? Uninstalling the adware, while good, doesn't get rid of the certificate vulnerability. You need to make sure the certificate has been undone.

Actually I never installed the software, but the certificate was there anyway in spite of the fact. And yes, I uninstalled the certificate manually.

[Mute]

Actually I never installed the software, but the certificate was there anyway in spite of the fact. And yes, I uninstalled the certificate manually.

It's because Lenovo decided to include that crap bloatware in their OS install from the factory. If anyone gets harmed by this, Lenovo could be in for a world of hurt.

[Bryansix]

Lenovo is already being sued over this. I hope as a result of this that they release a clean install option on their computers. Only one manufacturer I know does this. That manufacturer is PowerSpec.

[KillZone45]

Lenovo is already being sued over this. I hope as a result of this that they release a clean install option on their computers. Only one manufacturer I know does this. That manufacturer is PowerSpec.

Class action lawsuit, I had to deal with Superfish and it was extremely annoying! Hopefully I can get something out of this like credit or what ever. It was def BS for them to install this. Bought a new Lenovo and literally the next day I found out about Superfish. Was easy peazy to remove though.

[PanchoVilla]

we got a yoga 2 pro at Christmas. Had a minor freakout when I realized our model included. Luckily not superfish and no cert on our machine. Since we bought at very end of dec I guess we got lucky and no install. I will definitely go through the machine now hearing that Lenovo is tops when it comes to crapware installs I am sure there is some other stuff I can remove too.

[OlderThanDirt]

Am I the only one that is highly suspicious of companies like Lenovo that are Chinese owned? Besides Superfish, how would someone ever know if there isn't something equally as invasive written into the bios or even some of the hardware. Maybe I'm just being paranoid and nobody would ever use companies Seagate, Micron or Western Digital to spy on people.

Flooding a country with cheap hardware infected with spyware and viruses that can be activated at will would be a great way to bring it's communications infrastructure to a grinding halt.

[NYT]

lenovo is actually one of the few companies that provide an "install path" for IT departments that build their own images. they release these generic images on their systems for the general public that does what the general public does, shops online. superfish was designed to do just that. the problem is that the software wasnt fully vetted by security personnel, thus lenovo is in trouble and superfish is most likely going to be out of business soon.

everyone should be building their own images to run as clean an install of windows as possible. i buy lenovo x1 carbon ultrabooks for my staff because theyre the best all around laptop you can buy for the money.

http://support.lenovo.com/us/en/product_security/superfish

some good info:

https://nakedsecurity.sophos.com/2015/02/20/the-lenovo-superfish-controversy-what-you-need-to-know/