LENOVO and Superfish

agrinnall

Another update from Lenovo, this time with instructions on how to remove the Certificate from Firefox and Thunderbird (both of which I use). And they also say:

NOTE: There are benign additional files and registry entries which will remain after this procedure. Although they are harmless, Lenovo will soon be releasing a utility to remove them which will be posted here as well.

http://support.lenovo.com/us/en/product_security/superfish_uninstall

Supatramp

agrinnall wrote: »

Another update from Lenovo, this time with instructions on how to remove the Certificate from Firefox and Thunderbird (both of which I use). And they also say:

NOTE: There are benign additional files and registry entries which will remain after this procedure. Although they are harmless, Lenovo will soon be releasing a utility to remove them which will be posted here as well.

http://support.lenovo.com/us/en/product_security/superfish_uninstall

And so the saga goes on! Anyone who buys a Lenovo anything after this, needs their head looked

Tropez

agrinnall wrote: »

Another update from Lenovo, this time with instructions on how to remove the Certificate from Firefox and Thunderbird (both of which I use). And they also say:

NOTE: There are benign additional files and registry entries which will remain after this procedure. Although they are harmless, Lenovo will soon be releasing a utility to remove them which will be posted here as well.

http://support.lenovo.com/us/en/product_security/superfish_uninstall

MalwareBytes Anti-Malware is detecting those and getting rid of them, if people don't want to wait for Lenovo to fix it.

Happy_Stan

Bad news for Lenovo, it seems they've been hacked themselves, whoops a daisy.
http://www.cnet.com/uk/news/lenovo-website-taken-down-by-hackers/

Ironic.

50Twuncle

I am assuming that if you rebuild your device from the rebuild partition (which, unless you have a GENUINE OS on DVD - is your only option) - then "superfish" will return ?

RumRat

50Twuncle wrote: »

I am assuming that if you rebuild your device from the rebuild partition (which, unless you have a GENUINE OS on DVD - is your only option) - then "superfish" will return ?

Windows defender removes it, so it shouldn't be a problem, should it?.

CharlieBilly

Lenovo have a uninstaller too

http://support.lenovo.com/en/product_security/superfish_uninstall

Tried it on my daughters laptop Lenovo Y70 17.3-inch Notebook bought end of Nov but no superfish found

spud17

http://www.computerworld.com/article/2890404/mozilla-scrubs-superfish-certificate-from-firefox.html

50Twuncle

RumRat wrote: »

Windows defender removes it, so it shouldn't be a problem, should it?.

It removes it from any "running" Windows installation - but if you reinstall Windows (from a backed up / rebuild partition) - this is in effect reinstalling the whole shebang again - unless there is some way of cleaning up the .ISO (or similar) which I very much doubt....

Tropez

50Twuncle wrote: »

It removes it from any "running" Windows installation - but if you reinstall Windows (from a backed up / rebuild partition) - this is in effect reinstalling the whole shebang again - unless there is some way of cleaning up the .ISO (or similar) which I very much doubt....

It might depend on the system (it worked on my Z50-70, don't see why it wouldn't work on others unless they've been locked somehow) but you can get a Windows image from Microsoft themselves, copy it to a USB flash drive (a clean one, preferably) and boot from it to install a clean version of Windows 8.1.

In the Z50-70's case, the Windows installer pulled the Product Key directly from the BIOS. Worth making a note of it though before you do this, just in case.

This will, of course, get rid of the Lenovo recovery image and all other Lenovo/pre-installed applications. You may need to download a couple of applications from the Lenovo website that control certain functions of your laptop.

And, of course, for anyone planning on doing this, do backup your files before you do this as everything will be lost. I assume most people realise this but always worth restating just in case.