Lenovo Pre-instaling adware/spam - Superfish - powerd by VisualSearch

[Garrell]

Ah, Lenovo, did it have to end this way?

I won't be buying another one of your devices. Fool me once and all that.

[Flepi]

Thanks I do it and yes it works

I hope there's no more suprises on SSL or other stuff they install without our consent !!

[trainer]

Mark_Lenovo:

Are you kidding me?

The statement you have posted is full of crap, and does not instruct for removal of the root certificate.  Lenovo didn't stop preloading this software in January; my machine was manufactured first week of February and still contained it.  The certificate has been cracked and you have a giant security hole in hundreds of your machines.

You're going to need to do better than that.

[Flepi]

And what about recovery?

Every time we did a recovery we will be automatically facing the same problem...

Did you think about users that didn't came here and keep using there laptop believing there's safe?

For info : http://www.60millions-mag.com/forum/informatique-multimedia-f61/lenovo-installe-des-spyware-t13167.h...

And I'm not stopping here it's a shame !!

[ruddn]

Terrible that a computer company is so cavalier with the security of its customers. You should tell us how to fix this as soon as possible. In the meantime, after reading the news this morning I immediately removed the Superfish certificate. The result? It broke Chrome (my default browser). I don't have time for this. Lenovo: count me too as somebody who's probably never to buy another one of your products.

[pokcoyo]

I bought Lenovo Miix 3 - 1030 on Jan. 16, 2015 in Thailand. It had exactly the same problem. So my tablet is also "some consumer notebook products" as mentioned by Mr. Mark_Lenovo.

I had already uninstall Visual Discovery on the 2nd day I owned the tablet. In fact, I also uninstalled everything Lenovo preinstalled on the tablet. However, it didn't solve the problem for me. I had to uninstall Google Chrome and reinstall it again to solve the problem.

I did not know about the certificate in Internet Explorer. So thank you very much, Mr. trainer, your instruction on removing the certificate on page 5 is great.

[Tecmo_SB_Guy]

Just a quick question.  I just saw this on Newsy.

I bought my Lenovo laptop a long time ago, March 2013.

Do I have to worry about this?

[cybergibbons]

This page uses the same Superfish private cert and should warn you if you have an issue:

https://filippo.io/Badfish/

[tMettam]

Hello

I am not a Lenovo customer (thankfully), and never will be owing to this.

However, I am a security researcher. I was wondering if someone would be kind enough to mail me the VDWFPInstaller.exe file? 

tg3958@my.open.ac.uk

[cybergibbons]

Not seen that particular file about, but the other exes are here: https://github.com/cryptostorm/leakblock/tree/master/superfish.com