Lenovo laptop users - Delete Superfish

[mustang_revival]

http://arstechnica.com/security/2015/02/lenovo-pcs-ship-with-man-in-the-middle-adware-that-breaks-https-connections/

[Chili]

http://arstechnica.com/security/2015...s-connections/

Hmmm.. We recently bought two. Gonna have to look into this.

[Tx Redneck]

If it's on there, use http://www.majorgeeks.com/files/deta...installer.html to uninstall it.

[Chili]

Looks like we're good. Wasn't our model and the "check" site showed it as clear.

[Baba Ganoush]

I have one for record keeping/financials that I've never connected to the web and never will. Should I even worry about it?

I've never considered adding any security to it for this reason but I'm not tech savvy. I literally print off what I need through an old wired printer then destroy the paper after use. Yeah, I'm old school lol.

[stang2be]

I have one for record keeping/financials that I've never connected to the web and never will. Should I even worry about it?

I've never considered adding any security to it for this reason but I'm not tech savvy. I literally print off what I need through an old wired printer then destroy the paper after use. Yeah, I'm old school lol.

Personally I'm not a fan of that but do what works for ya. In the off chance you need to put it online for some type of updates to your financial software, etc its just not worth the risks but then I work in IT security so thats my .02

[aggie97]

hmmm, found it on my wife's Flex2 we bought about 6 weeks ago. Thanks for posting this.

[Binky]

Windows Defender is also loaded with the removal code in case you have it.

[mustang_revival]

Lenovo slapped with lawsuit over dangerous Superfish adware

http://www.pcworld.com/article/2887392/lenovo-hit-with-lawsuit-over-superfish-snafu.html

Lenovo admitted to pre-loading the Superfish adware on some consumer PCs, and unhappy customers are now dragging the company to court on the matter.

A proposed class-action suit was filed late last week against Lenovo and Superfish, which charges both companies with “fraudulent” business practices and of making Lenovo PCs vulnerable to malware and malicious attacks by pre-loading the adware.

Plaintiff Jessica Bennett said her laptop was damaged as a result of Superfish, which was called “spyware” in court documents. She also accused Lenovo and Superfish of invading her privacy and making money by studying her Internet browsing habits.

The lawsuit was filed after Lenovo admitted to pre-loading Superfish on some consumer PCs. The laptops affected by Superfish include non-ThinkPad models such as G Series, U Series, Y Series, Z Series, S Series, Flex, Miix, Yoga and E Series.

Lenovo has since issued fixes to remove Superfish applications and certificates from PCs. Microsoft’s Windows Defender and McAfee’s security applications also remove Superfish since Friday.

Must-read: How to remove the dangerous Superfish adware preinstalled on Lenovo PCs

Lenovo earlier admitted it “messed up” by preloading Superfish on computers. The software plugs product recommendations into search results, but can hijack connections and open major security holes, thus leaving computers vulnerable to malicious attacks.

The first complaints of Superfish on Lenovo’s laptops emerged in September last year, but it became a real security issue when a hacker Marc Rogers pointed it out in a blog post.

lenovo yoga pro 2
Bennett, a blogger, purchased a Yoga 2 laptop to conduct business and communicate with clients. She noticed “spam advertisements involving scantily clad women” appearing on her client’s website when writing a blog post for the customer. After seeing pop-ups on other websites, she assumed her computer had spyware or had been hacked, but then scoured the forums to notice similar behavior on other Lenovo laptops. She then rooted out the problem to be Superfish, which could intercept secure communication and leave computers vulnerable.

Superfish also used memory resources and took up Internet bandwidth, according to the court document.

Damages from Lenovo and Superfish are being sought as part of the lawsuit filed in the U.S. District Court for the Southern District of California.

A Lenovo spokesman declined comment on the lawsuit.